psiphon 2.0.1__tar.gz → 2.0.2__tar.gz

{psiphon-2.0.1 → psiphon-2.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: psiphon
-Version: 2.0.1
+Version: 2.0.2
 Summary: Foreground native Psiphon packet tunnel and explicit local proxy for Linux
 Author: KpihX
 Author-email: KpihX <kapoivha@gmail.com>
@@ -69,6 +69,11 @@ the worker refuses before mutations. Cancellation starts no supervisor or route
 For agent-operated privilege, launch connect only in an armed tmux pane in the
 agent's current window. No sudo or privileged operation runs in offline checks.
 
+Logs live in `$XDG_STATE_HOME/psiphon/psiphon.log` (default
+`~/.local/state/psiphon/`). Before a new connection, a 2 MiB log rotates through
+four numbered prior logs (`.1` to `.4`), bounding retained log storage to about
+10 MiB. The oldest retained log is discarded on the next rotation.
+
 **Escalation trust:** sudo approves this local Python interpreter and installed
 package, including an editable checkout if that is what you installed. They may
 be user-writable. `-I` avoids ambient PYTHONPATH/user-site, but does not make that

{psiphon-2.0.1 → psiphon-2.0.2}/README.md

@@ -52,6 +52,11 @@ the worker refuses before mutations. Cancellation starts no supervisor or route
 For agent-operated privilege, launch connect only in an armed tmux pane in the
 agent's current window. No sudo or privileged operation runs in offline checks.
 
+Logs live in `$XDG_STATE_HOME/psiphon/psiphon.log` (default
+`~/.local/state/psiphon/`). Before a new connection, a 2 MiB log rotates through
+four numbered prior logs (`.1` to `.4`), bounding retained log storage to about
+10 MiB. The oldest retained log is discarded on the next rotation.
+
 **Escalation trust:** sudo approves this local Python interpreter and installed
 package, including an editable checkout if that is what you installed. They may
 be user-writable. `-I` avoids ambient PYTHONPATH/user-site, but does not make that

{psiphon-2.0.1 → psiphon-2.0.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "psiphon"
-version = "2.0.1"
+version = "2.0.2"
 description = "Foreground native Psiphon packet tunnel and explicit local proxy for Linux"
 readme = "README.md"
 license = "BUSL-1.1"

{psiphon-2.0.1 → psiphon-2.0.2}/src/psiphon/config.py

@@ -50,6 +50,8 @@ RUNTIME_DIR = _runtime / f"psiphon-{os.getuid()}"
 ACTIVE_CONFIG = CONFIG_DIR / "psiphon.config"
 PID_FILE = RUNTIME_DIR / "psiphon.pid"
 LOG_FILE = STATE_DIR / "psiphon.log"
+LOG_MAX_BYTES = 2 * 1024 * 1024
+LOG_BACKUPS = 4
 SESSION_FILE = RUNTIME_DIR / "session.json"
 DATA_DIR = CACHE_DIR / "core"  # signed server-list cache and tunnel-core datastore
 

{psiphon-2.0.1 → psiphon-2.0.2}/src/psiphon/main.py

@@ -113,6 +113,23 @@ def notice_state(offset: int = 0) -> dict[str, Any]:
     return state
 
 
+def rotate_log() -> None:
+    """Keep a bounded local history before opening a new connection log."""
+    if (
+        not config.LOG_FILE.exists()
+        or config.LOG_FILE.stat().st_size < config.LOG_MAX_BYTES
+    ):
+        return
+    oldest = config.LOG_FILE.with_name(f"{config.LOG_FILE.name}.{config.LOG_BACKUPS}")
+    if oldest.exists():
+        oldest.unlink()
+    for number in range(config.LOG_BACKUPS - 1, 0, -1):
+        source = config.LOG_FILE.with_name(f"{config.LOG_FILE.name}.{number}")
+        if source.exists():
+            source.replace(source.with_name(f"{config.LOG_FILE.name}.{number + 1}"))
+    config.LOG_FILE.replace(config.LOG_FILE.with_name(f"{config.LOG_FILE.name}.1"))
+
+
 def process_identity(pid: int) -> dict[str, str]:
     proc = Path(f"/proc/{pid}")
     stat = (proc / "stat").read_text().rsplit(") ", 1)[1].split()
@@ -170,7 +187,8 @@ def connected(region: str, proxy: bool, interface: str | None, wait_s: float):
         elif interface:
             uplink = interface
         engine.write_config(region, proxy)
-        # Create a private log before the worker opens it; never truncate history.
+        # Create a private log before the worker opens it; preserve bounded history.
+        rotate_log()
         fd = os.open(
             config.LOG_FILE,
             os.O_APPEND | os.O_CREAT | os.O_WRONLY | os.O_NOFOLLOW,