@devlln/helm - npm Package Compare versions

Comparing version 0.1.6 to 0.1.7

bridge/package-lock.json

 {
   "name": "codex-voice-remote-bridge",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "lockfileVersion": 3,
@@ -9,3 +9,3 @@ "requires": true,
       "name": "codex-voice-remote-bridge",
-      "version": "0.1.6",
+      "version": "0.1.7",
       "dependencies": {
@@ -12,0 +12,0 @@ "dotenv": "^16.6.1",

bridge/package.json

 {
   "name": "codex-voice-remote-bridge",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "private": true,
@@ -5,0 +5,0 @@ "type": "module",

bridge/src/codexAppServerClient.test.ts

@@ -606,2 +606,58 @@ import test from "node:test";
 
+test("Codex desktop session reads prefer local rollout turns before oversized app-server payloads", async () => {
+  const client = new CodexAppServerClient("ws://127.0.0.1:0");
+  const hooks = client as unknown as CodexClientPrivateHooks;
+  const requestCalls: Array<{ method: string; params?: JSONValue }> = [];
+
+  hooks.localThreadReadFallback = async (threadId: string, includeTurns: boolean) => ({
+    thread: {
+      id: threadId,
+      name: "Desktop thread",
+      preview: "local rollout preview",
+      cwd: "/tmp/project",
+      status: "idle",
+      updatedAt: 456_000,
+      sourceKind: "vscode",
+      ...(includeTurns
+        ? {
+            turns: [
+              {
+                id: "turn-1",
+                status: "completed",
+                items: [
+                  {
+                    id: "item-1",
+                    type: "agentMessage",
+                    text: "local rollout text",
+                  },
+                ],
+              },
+            ],
+          }
+        : {}),
+    },
+  });
+  hooks.request = async (method: string, params?: JSONValue) => {
+    requestCalls.push({ method, params });
+    throw new Error("app-server thread/read should not be called");
+  };
+
+  const result = await client.readThread("thread-1", {
+    allowTurnlessFallback: true,
+  });
+  const thread = result && typeof result === "object" && !Array.isArray(result)
+    ? result.thread
+    : null;
+
+  assert.deepEqual(requestCalls, []);
+  assert.equal(
+    thread && typeof thread === "object" && !Array.isArray(thread)
+      ? Array.isArray(thread.turns)
+        ? thread.turns.length
+        : 0
+      : 0,
+    1
+  );
+});
+
 test("Codex thread list merge prefers discovered prompt over degraded remote Helm title", () => {
@@ -608,0 +664,0 @@ const client = new CodexAppServerClient("ws://127.0.0.1:0");

bridge/src/simulatorMirror.ts

@@ -329,3 +329,4 @@ import { execFile } from "node:child_process";
     if AXUIElementCopyAttributeValue(element, attribute, &value) == .success,
-       let children = value as? [AXUIElement] {
+       let children = value as? [AXUIElement],
+       !children.isEmpty {
       return children
@@ -332,0 +333,0 @@ }

package.json

 {
   "name": "@devlln/helm",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "private": false,
@@ -5,0 +5,0 @@ "description": "Helm CLI bridge installer and runtime helpers.",

New alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

838751

0.5%

Lines of code

21928

0.51%

Worsened metrics

Number of medium supply chain risk alerts

9

12.5%

No dependency changes