opencode-codex-memory 0.4.8 → 0.4.9

package/README.md

@@ -52,7 +52,7 @@ If you want the mental model before the details, jump to
 
 ```json
 {
-  "plugin": ["opencode-codex-memory@0.4.8"]
+  "plugin": ["opencode-codex-memory@0.4.9"]
 }
 ```
 
@@ -239,7 +239,7 @@ To set options, turn the plugin entry into a `[name, options]` pair:
 ```json
 {
   "plugin": [
-    ["opencode-codex-memory@0.4.8", { "disable_on_external_context": true, "min_rollout_idle_hours": 2 }]
+    ["opencode-codex-memory@0.4.9", { "disable_on_external_context": true, "min_rollout_idle_hours": 2 }]
   ]
 }
 ```
@@ -298,7 +298,7 @@ directions:
 ```json
 {
   "plugin": [
-    ["opencode-codex-memory@0.4.8", { "codex_interop": { "import": true, "export": true } }]
+    ["opencode-codex-memory@0.4.9", { "codex_interop": { "import": true, "export": true } }]
   ]
 }
 ```

package/dist/src/redact.js

@@ -1,11 +1,14 @@
 const REDACTIONS = [
+    // Bearer before key patterns (codex sanitizer order): a `Bearer sk-…` line
+    // redacts as one token instead of leaving a bare "Bearer " prefix.
+    // Word-boundary + space/tab only (not \s) avoids newline false positives;
+    // trailing =* covers base64 padding outside the 16-char body.
+    { re: /\bBearer[ \t]+[A-Za-z0-9._~+/-]{16,}=*/gi, replacement: "Bearer [REDACTED]" },
     { re: /sk-ant-[A-Za-z0-9_\-]{20,}/g, replacement: "[REDACTED:anthropic-key]" },
     { re: /sk-[A-Za-z0-9]{20,}/g, replacement: "[REDACTED:openai-key]" },
     { re: /AKIA[0-9A-Z]{16}/g, replacement: "[REDACTED:aws-key]" },
     { re: /gh[pousr]_[A-Za-z0-9]{36,}/g, replacement: "[REDACTED:github-token]" },
     { re: /xox[baprs]-[A-Za-z0-9\-]{10,}/g, replacement: "[REDACTED:slack-token]" },
-    // Case-insensitive with a 16-char floor, matching codex's sanitizer.
-    { re: /bearer\s+[A-Za-z0-9\-\._~+\/=]{16,}/gi, replacement: "Bearer [REDACTED]" },
     {
         re: /-----BEGIN [A-Z]+ PRIVATE KEY-----[\s\S]*?-----END [A-Z]+ PRIVATE KEY-----/g,
         replacement: "[REDACTED:private-key]",

package/dist/tools/memory.js

@@ -69,27 +69,25 @@ export const memory_read = tool({
 });
 /** Skip hidden entries and symlinks, mirroring codex local/list.rs + local/search.rs walkers. */
 function visibleEntries(dir) {
-    let names;
+    // Dirent file types (readdir withFileTypes) — codex read_sorted_dir_entries
+    // uses entry.file_type() so listing never follows symlinks.
+    let ents;
     try {
-        names = fs.readdirSync(dir);
+        ents = fs.readdirSync(dir, { withFileTypes: true });
     }
     catch {
         return [];
     }
     const out = [];
-    for (const name of names) {
-        if (name.startsWith("."))
+    for (const ent of ents) {
+        if (ent.name.startsWith("."))
             continue;
-        let st;
-        try {
-            st = fs.lstatSync(path.join(dir, name));
-        }
-        catch {
-            continue;
-        }
-        if (st.isSymbolicLink())
+        if (ent.isSymbolicLink())
             continue;
-        out.push({ name, isDir: st.isDirectory() });
+        if (ent.isDirectory())
+            out.push({ name: ent.name, isDir: true });
+        else if (ent.isFile())
+            out.push({ name: ent.name, isDir: false });
     }
     return out;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-codex-memory",
-  "version": "0.4.8",
+  "version": "0.4.9",
   "description": "Persistent memory plugin for opencode — ports codex's two-phase memory system (extraction → consolidation → injection → citation feedback)",
   "type": "module",
   "main": "./dist/src/index.js",