@sellable/install 0.1.582 → 0.1.584

package/lib/sellable-agent/fly-customer-worker.mjs

@@ -280,8 +280,11 @@ export function installCustomerRuntimeSecrets({
         envelopes[name].secret
       );
     }
-    mkdirSync(join(stagingRoot, "consumed-turns"), { mode: 0o700 });
-    chmodSync(join(stagingRoot, "consumed-turns"), 0o700);
+    // Must match SELLABLE_AGENT_TURN_CONSUMED_ROOT exactly: the secret-root
+    // swap below discards the directory customer-runtime made at boot, and
+    // the MCP context proxy fails closed when the nonce directory is absent.
+    mkdirSync(join(stagingRoot, "turn-consumed"), { mode: 0o700 });
+    chmodSync(join(stagingRoot, "turn-consumed"), 0o700);
     if (existsSync(activeRoot)) {
       const active = lstatSync(activeRoot);
       if (active.isSymbolicLink() || !active.isDirectory())

package/lib/sellable-agent/fly-skills-bridge-exec.mjs

@@ -9,24 +9,56 @@ import {
   executeExternalSkillsBridgeOperation,
 } from "./fly-skills-bridge.mjs";
 
-export async function runFlySkillsBridgeExecCli() {
-  try {
-    if (process.argv.length !== 2)
+export const FLY_SKILLS_EXEC_ARGUMENT_MAX_BYTES = 96 * 1024;
+export const FLY_SKILLS_EXEC_ARGUMENT_MAX_COUNT = 8;
+
+const BASE64URL_CHUNK = /^[A-Za-z0-9_-]+$/;
+const FLY_SKILLS_EXEC_ENCODED_MAX_BYTES =
+  Math.ceil(SKILLS_REQUEST_MAX_BYTES / 3) * 4;
+
+export function decodeFlySkillsExecArguments(args) {
+  if (!Array.isArray(args) || args.length === 0) {
+    throw new FlySkillsBridgeError("skills_request_rejected");
+  }
+  if (args.length > FLY_SKILLS_EXEC_ARGUMENT_MAX_COUNT) {
+    throw new FlySkillsBridgeError("skills_request_too_large");
+  }
+  let encoded = "";
+  for (const chunk of args) {
+    if (typeof chunk !== "string" || !BASE64URL_CHUNK.test(chunk)) {
       throw new FlySkillsBridgeError("skills_request_rejected");
-    const chunks = [];
-    let total = 0;
-    for await (const chunk of process.stdin) {
-      total += chunk.length;
-      if (total > SKILLS_REQUEST_MAX_BYTES)
-        throw new FlySkillsBridgeError("skills_request_too_large");
-      chunks.push(chunk);
     }
-    let request;
-    try {
-      request = JSON.parse(Buffer.concat(chunks).toString("utf8"));
-    } catch {
-      throw new FlySkillsBridgeError("skills_request_rejected");
+    if (Buffer.byteLength(chunk, "utf8") > FLY_SKILLS_EXEC_ARGUMENT_MAX_BYTES) {
+      throw new FlySkillsBridgeError("skills_request_too_large");
+    }
+    encoded += chunk;
+    if (encoded.length > FLY_SKILLS_EXEC_ENCODED_MAX_BYTES) {
+      throw new FlySkillsBridgeError("skills_request_too_large");
     }
+  }
+  let bytes;
+  try {
+    bytes = Buffer.from(encoded, "base64url");
+  } catch {
+    throw new FlySkillsBridgeError("skills_request_rejected");
+  }
+  if (bytes.toString("base64url") !== encoded) {
+    throw new FlySkillsBridgeError("skills_request_rejected");
+  }
+  if (bytes.byteLength > SKILLS_REQUEST_MAX_BYTES) {
+    throw new FlySkillsBridgeError("skills_request_too_large");
+  }
+  try {
+    const json = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    return JSON.parse(json);
+  } catch {
+    throw new FlySkillsBridgeError("skills_request_rejected");
+  }
+}
+
+export async function runFlySkillsBridgeExecCli() {
+  try {
+    const request = decodeFlySkillsExecArguments(process.argv.slice(2));
     const result = executeExternalSkillsBridgeOperation(request);
     process.stdout.write(`${JSON.stringify(result)}\n`);
     process.exitCode = result.ok ? 0 : 2;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.582",
+  "version": "0.1.584",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {