sneakoscope 9.0.2 → 9.0.3

package/README.md

@@ -22,7 +22,7 @@ Proof-first orchestration for Codex CLI, ChatGPT Desktop, AI coding agents, mult
 Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
 <!-- END SKS SEARCH VISIBILITY MARKETING -->
 
-This README documents package **SKS 9.0.2** — its own identity, read from `package.json` and subject to release-gate verification, not advice about what to install.
+This README documents package **SKS 9.0.3** — its own identity, read from `package.json` and subject to release-gate verification, not advice about what to install.
 
 Use the official latest stable SKS and Codex CLI releases. The Codex compatibility SSOT is always the **current latest stable** host; capability probes measure what that host can actually do. Product docs do not crown a fixed `0.x.y` string as SSOT (release pins and schema directories are measured artifacts for the current package, not a permanent product version claim). Menu Bar / Center induce updates to the latest stable build. Run `sks update-check` for what is installed and read the capability report for what is supported. Install SSOT is npm `sneakoscope@latest`; PATH `sks` and Menu Bar stamped generation must match that version or gates fail. It resolves managed SKS skills from the authoritative global install, preserves a runnable Naruto child slot when `max_threads=2`, and keeps Menu Bar repair transactional so stamped generations remain verifiable. Naruto uses stable opt-in multi-agent V2 when the host exposes it (Codex official multi-agent wrap-only; SKS does not reimplement a parallel runtime). Local code search is mode-separated (`sks search files|text|structure|symbol|context`); `context` is answered by the compiled TriWiki Context Graph (`context-graph.json` is exhaustive authority; `context-pack.json` and managed `AGENTS.md` are bounded projections) — see [docs/architecture/context-graph.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/docs/architecture/context-graph.md) and [docs/PRODUCT-CONTRACT.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/docs/PRODUCT-CONTRACT.md). See [CHANGELOG.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/CHANGELOG.md).
 

package/crates/sks-core/Cargo.lock

@@ -259,7 +259,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "9.0.2"
+version = "9.0.3"
 dependencies = [
  "globset",
  "grep-matcher",

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "9.0.2"
+version = "9.0.3"
 edition = "2021"
 
 [dependencies]

package/dist/config/skills-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.skills-manifest.v1",
-  "package_version": "9.0.2",
+  "package_version": "9.0.3",
   "skills": [
     {
       "canonical_name": "sks",

package/dist/core/codex-lb/desktop-bridge/http-forward.js

@@ -144,8 +144,13 @@ function writeHttpBridgeError(res, error, req) {
     });
     res.end(JSON.stringify({ error: { type: 'sks_bridge_error', code, message: code } }));
 }
+function safeUpstreamErrorId(value) {
+    const text = String(value ?? '').trim();
+    return /^[A-Za-z0-9_.:-]{1,64}$/.test(text) ? text : null;
+}
 async function readRedactedUpstreamError(response) {
     let total = 0;
+    const chunks = [];
     for await (const raw of response) {
         const chunk = Buffer.isBuffer(raw) ? raw : Buffer.from(raw);
         total += chunk.length;
@@ -153,14 +158,30 @@ async function readRedactedUpstreamError(response) {
             response.destroy();
             break;
         }
+        chunks.push(chunk);
     }
-    return Buffer.from(JSON.stringify({
-        error: {
-            type: 'upstream_error',
-            code: 'bridge_upstream_request_failed',
-            message: 'Upstream request failed'
-        }
-    }));
+    let upstreamCode = null;
+    let upstreamType = null;
+    try {
+        const parsed = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+        upstreamCode = safeUpstreamErrorId(parsed?.error?.code) ?? safeUpstreamErrorId(parsed?.detail);
+        upstreamType = safeUpstreamErrorId(parsed?.error?.type);
+    }
+    catch {
+    }
+    return {
+        upstreamCode,
+        upstreamType,
+        body: Buffer.from(JSON.stringify({
+            error: {
+                type: 'upstream_error',
+                code: 'bridge_upstream_request_failed',
+                message: 'Upstream request failed',
+                ...(upstreamType ? { upstream_type: upstreamType } : {}),
+                ...(upstreamCode ? { upstream_code: upstreamCode } : {})
+            }
+        }))
+    };
 }
 const upstreamAgents = new Map();
 function upstreamAgent(secure, key, idleTimeoutMs) {
@@ -252,16 +273,16 @@ export async function forwardHttp(req, res, config, prepared, authenticatedLocal
             upstream.once('response', (response) => {
                 const statusCode = response.statusCode || 502;
                 if (statusCode >= 400) {
-                    logHttpRejection({
-                        code: `bridge_upstream_status_${statusCode}`,
-                        transport: 'http',
-                        ...(req.method === undefined ? {} : { method: req.method }),
-                        ...(req.url === undefined ? {} : { url: req.url }),
-                        status: statusCode,
-                        provider_id: provider.provider_id,
-                        public_model: request.route.public_model,
-                    });
-                    void readRedactedUpstreamError(response).then((body) => {
+                    void readRedactedUpstreamError(response).then(({ body, upstreamCode }) => {
+                        logHttpRejection({
+                            code: upstreamCode ? `bridge_upstream_status_${statusCode}:${upstreamCode}` : `bridge_upstream_status_${statusCode}`,
+                            transport: 'http',
+                            ...(req.method === undefined ? {} : { method: req.method }),
+                            ...(req.url === undefined ? {} : { url: req.url }),
+                            status: statusCode,
+                            provider_id: provider.provider_id,
+                            public_model: request.route.public_model,
+                        });
                         responseStarted = true;
                         const responseHeaders = rewriteResponseHeaders(response.headers, provider.base_url, authenticatedLocalBaseUrl);
                         responseHeaders['content-length'] = String(body.length);

package/dist/core/version.js

@@ -1 +1 @@
-export const PACKAGE_VERSION = '9.0.2';
+export const PACKAGE_VERSION = '9.0.3';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sneakoscope",
   "displayName": "ㅅㅋㅅ",
-  "version": "9.0.2",
+  "version": "9.0.3",
   "description": "Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.",
   "type": "module",
   "homepage": "https://github.com/mandarange/Sneakoscope-Codex#readme",