sneakoscope 10.5.0 → 10.5.1

package/README.md

@@ -16,7 +16,7 @@
 Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
 <!-- END SKS SEARCH VISIBILITY MARKETING -->
 
-Current package: **SKS 10.5.0**. Install the latest stable release from npm.
+Current package: **SKS 10.5.1**. Install the latest stable release from npm.
 
 [Quick start](#install-in-one-command) · [Commands](#everyday-commands) · [SKS Center](#sks-center-macos) · [Documentation](#documentation) · [Changelog](CHANGELOG.md)
 

package/crates/sks-core/Cargo.lock

@@ -259,7 +259,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "10.5.0"
+version = "10.5.1"
 dependencies = [
  "globset",
  "grep-matcher",

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "10.5.0"
+version = "10.5.1"
 edition = "2021"
 
 [dependencies]

package/dist/config/skills-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.skills-manifest.v1",
-  "package_version": "10.5.0",
+  "package_version": "10.5.1",
   "skills": [
     {
       "canonical_name": "sks",

package/dist/core/codex-lb/desktop-service.js

@@ -21,6 +21,8 @@ export const DEFAULT_DESKTOP_BRIDGE_HOST = '127.0.0.1';
 export const DEFAULT_DESKTOP_BRIDGE_PORT = 49_152;
 export const DESKTOP_BRIDGE_SETTINGS_SCHEMA = 'sks.desktop-bridge-settings.v2';
 export const DESKTOP_BRIDGE_SERVICE_SCHEMA = 'sks.desktop-bridge-service.v2';
+export const DESKTOP_BRIDGE_SETTINGS_MAX_BYTES = 256 * 1024;
+const DESKTOP_BRIDGE_SETTINGS_RECOVERY_MAX_BYTES = 2 * 1024 * 1024;
 const DEFAULT_ALLOWED_ORIGINS = ['app://codex'];
 const OPENROUTER_BASE_URL = 'https://openrouter.ai/api/v1';
 export function desktopBridgeServicePaths(home = process.env.HOME || os.homedir()) {
@@ -147,8 +149,11 @@ export async function readDesktopBridgeServiceSettings(file) {
         throw new Error('desktop_bridge_settings_not_regular_file');
     if ((stat.mode & 0o077) !== 0)
         throw new Error('desktop_bridge_settings_permissions_unsafe');
+    if (stat.size > DESKTOP_BRIDGE_SETTINGS_RECOVERY_MAX_BYTES)
+        throw new Error('desktop_bridge_settings_too_large');
     const raw = await fsp.readFile(file, 'utf8');
-    if (Buffer.byteLength(raw) > 256 * 1024)
+    const rawBytes = Buffer.byteLength(raw);
+    if (rawBytes > DESKTOP_BRIDGE_SETTINGS_RECOVERY_MAX_BYTES)
         throw new Error('desktop_bridge_settings_too_large');
     let parsed;
     try {
@@ -157,17 +162,58 @@ export async function readDesktopBridgeServiceSettings(file) {
     catch {
         throw new Error('desktop_bridge_settings_invalid_json');
     }
-    return validateDesktopBridgeServiceSettings(parsed);
+    const validated = validateDesktopBridgeServiceSettings(parsed);
+    return rawBytes <= DESKTOP_BRIDGE_SETTINGS_MAX_BYTES ? validated : sessionPinsThatFit(validated);
 }
 export async function writeDesktopBridgeServiceSettings(file, settings) {
     await withFileLock(settingsLockOptions(file), async () => {
         await writeDesktopBridgeServiceSettingsUnlocked(file, settings);
     });
 }
+function desktopBridgeSettingsDocument(settings) {
+    return {
+        schema: settings.schema,
+        listen_host: settings.listen_host,
+        listen_port: settings.listen_port,
+        provider_registry: settings.provider_registry,
+        route_policy: settings.route_policy,
+        provider_session_pins: settings.provider_session_pins,
+        client_capability_sha256: settings.client_capability_sha256,
+        allowed_origins: settings.allowed_origins,
+        connect_timeout_ms: settings.connect_timeout_ms,
+        idle_timeout_ms: settings.idle_timeout_ms,
+        official_passthrough: settings.official_passthrough,
+        auth_priority_enabled: settings.auth_priority_enabled ?? false
+    };
+}
+function desktopBridgeSettingsText(settings) {
+    return `${JSON.stringify(desktopBridgeSettingsDocument(settings), null, 2)}\n`;
+}
+export function sessionPinsThatFit(settings, maxBytes = DESKTOP_BRIDGE_SETTINGS_MAX_BYTES) {
+    if (Buffer.byteLength(desktopBridgeSettingsText(settings)) <= maxBytes)
+        return settings;
+    const pins = settings.provider_session_pins
+        .map((pin, index) => ({ pin, index }))
+        .sort((left, right) => Date.parse(right.pin.created_at) - Date.parse(left.pin.created_at) || left.index - right.index)
+        .map((row) => row.pin);
+    let lo = 0;
+    let hi = pins.length;
+    while (lo < hi) {
+        const mid = Math.ceil((lo + hi) / 2);
+        const size = Buffer.byteLength(desktopBridgeSettingsText({ ...settings, provider_session_pins: pins.slice(0, mid) }));
+        if (size <= maxBytes)
+            lo = mid;
+        else
+            hi = mid - 1;
+    }
+    const fitted = { ...settings, provider_session_pins: pins.slice(0, lo) };
+    if (Buffer.byteLength(desktopBridgeSettingsText(fitted)) > maxBytes)
+        throw new Error('desktop_bridge_settings_too_large');
+    return fitted;
+}
 async function writeDesktopBridgeServiceSettingsUnlocked(file, settings) {
-    const validated = validateDesktopBridgeServiceSettings(settings);
-    const persisted = { schema: validated.schema, listen_host: validated.listen_host, listen_port: validated.listen_port, provider_registry: validated.provider_registry, route_policy: validated.route_policy, provider_session_pins: validated.provider_session_pins, client_capability_sha256: validated.client_capability_sha256, allowed_origins: validated.allowed_origins, connect_timeout_ms: validated.connect_timeout_ms, idle_timeout_ms: validated.idle_timeout_ms, official_passthrough: validated.official_passthrough, auth_priority_enabled: validated.auth_priority_enabled ?? false };
-    await writeTextAtomic(file, `${JSON.stringify(persisted, null, 2)}\n`, { mode: 0o600 });
+    const validated = sessionPinsThatFit(validateDesktopBridgeServiceSettings(settings));
+    await writeTextAtomic(file, desktopBridgeSettingsText(validated), { mode: 0o600 });
     await fsp.chmod(file, 0o600);
 }
 async function runtimeCredentials(settings, options) {

package/dist/core/version.js

@@ -1 +1 @@
-export const PACKAGE_VERSION = '10.5.0';
+export const PACKAGE_VERSION = '10.5.1';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "10.5.0",
+  "version": "10.5.1",
   "description": "Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",
@@ -191,7 +191,7 @@
     "@modelcontextprotocol/client": "2.0.0",
     "@modelcontextprotocol/server": "2.0.0",
     "@openai/codex-sdk": "0.153.4",
-    "smol-toml": "^1.7.0",
+    "smol-toml": "^1.7.1",
     "typescript": "^5.9.3",
     "ws": "^8.21.3"
   },