sneakoscope 8.6.0 → 8.6.1

package/README.md

@@ -22,7 +22,7 @@ Proof-first orchestration for Codex CLI, ChatGPT Desktop, AI coding agents, mult
 Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
 <!-- END SKS SEARCH VISIBILITY MARKETING -->
 
-This README documents package **SKS 8.6.0** — its own identity, read from `package.json` and subject to release-gate verification, not advice about what to install.
+This README documents package **SKS 8.6.1** — its own identity, read from `package.json` and subject to release-gate verification, not advice about what to install.
 
 Use the official latest stable SKS and Codex CLI releases. The Codex compatibility SSOT is always the **current latest stable** host; capability probes measure what that host can actually do. Product docs do not crown a fixed `0.x.y` string as SSOT (release pins and schema directories are measured artifacts for the current package, not a permanent product version claim). Menu Bar / Center induce updates to the latest stable build. Run `sks update-check` for what is installed and read the capability report for what is supported. Install SSOT is npm `sneakoscope@latest`; PATH `sks` and Menu Bar stamped generation must match that version or gates fail. It resolves managed SKS skills from the authoritative global install, preserves a runnable Naruto child slot when `max_threads=2`, and keeps Menu Bar repair transactional so stamped generations remain verifiable. Naruto uses stable opt-in multi-agent V2 when the host exposes it (Codex official multi-agent wrap-only; SKS does not reimplement a parallel runtime). Local code search is mode-separated (`sks search files|text|structure|symbol|context`); `context` is answered by the compiled TriWiki Context Graph (`context-graph.json` is exhaustive authority; `context-pack.json` and managed `AGENTS.md` are bounded projections) — see [docs/architecture/context-graph.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/docs/architecture/context-graph.md) and [docs/PRODUCT-CONTRACT.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/docs/PRODUCT-CONTRACT.md). See [CHANGELOG.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/CHANGELOG.md).
 

package/crates/sks-core/Cargo.lock

@@ -259,7 +259,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "8.6.0"
+version = "8.6.1"
 dependencies = [
  "globset",
  "grep-matcher",

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "8.6.0"
+version = "8.6.1"
 edition = "2021"
 
 [dependencies]

package/dist/config/skills-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.skills-manifest.v1",
-  "package_version": "8.6.0",
+  "package_version": "8.6.1",
   "skills": [
     {
       "canonical_name": "sks",

package/dist/core/codex-lb/desktop-bridge/security.js

@@ -106,9 +106,6 @@ export function resolveCodexSessionIdentity(headers, payload = null) {
     ], 'session');
     if (sessionId && !threadId)
         throw new DesktopBridgeError('bridge_codex_thread_id_missing');
-    if (threadId && sessionId && threadId !== sessionId) {
-        throw new DesktopBridgeError('bridge_codex_session_identity_mismatch');
-    }
     return { thread_id: threadId, session_id: sessionId };
 }
 function comparableOrigin(value, referer) {

package/dist/core/subagents/wave-lifecycle.js

@@ -156,11 +156,17 @@ export async function refreshSubagentWaveLifecycle(artifactDir, input = {}) {
     const targetSubagents = countPolicy === 'exact' && existing
         ? requestedTargetSubagents
         : Math.min(automaticSubagentTargetCap(plan), Math.max(requestedTargetSubagents, normalizeCount(existing?.target_subagents), startedCount));
-    const waveCapacity = positiveCount(plan.first_wave)
-        || positiveCount(plan.capacity_controller?.selected_capacity)
+    const capacityController = plan.capacity_controller;
+    const plannedWaveFloor = positiveCount(plan.first_wave)
+        || positiveCount(capacityController?.selected_capacity)
         || positiveCount(existing?.wave_capacity)
         || positiveCount(plan.max_threads)
         || targetSubagents;
+    const liveThreadSlots = positiveCount(capacityController?.available_thread_slots);
+    const configuredThreadCap = positiveCount(plan.max_threads) || targetSubagents;
+    const waveCapacity = targetSubagents > planRequestedSubagents
+        ? Math.min(configuredThreadCap, Math.max(plannedWaveFloor, liveThreadSlots ? Math.min(liveThreadSlots, targetSubagents) : targetSubagents))
+        : plannedWaveFloor;
     const next = projectLifecycle(existing || createSubagentWaveLifecycle({
         workflowRunId,
         targetSubagents,

package/dist/core/version.js

@@ -1 +1 @@
-export const PACKAGE_VERSION = '8.6.0';
+export const PACKAGE_VERSION = '8.6.1';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "8.6.0",
+  "version": "8.6.1",
   "description": "Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",