ATape v0.5.9

ATape v0.5.9: Session analysis and normalized tool identity

This coordinated release contains the CLI and all seven official Adapters at
0.5.9, with matching Web, Server and container metadata. The Authentication epoch
remains auth-v1, including the 180 days absolute Web Session lifetime. Unified
release and minimum CLI metadata are 0.5.9. Publication and Server deployment
are separate operations; a v4-capable Server must be deployed before the new
Claude capture packages are advertised.

Session analysis

Session Analytics derives current authorized Canonical counts, explicit tool
outcomes, child Threads, models and recorded Tokens without Raw access, cost or
productivity inference. Filtered evidence opens the original Event through the
same conditional snapshot. Changed source content requires refresh; pagination
does not combine different publications or legacy inputs.

Analytics v2 adds MCP server/tool and Skill-name reports. The first normalized
source is Claude's explicit MCP namespace and Skill tool invocation. Source
Adapters provide bounded identities in the closed ACP extension under Canonical
and publication v4. Missing identities remain unclassified; a completed Skill
tool does not establish successful completion of its requested task. New Web
also accepts older analytics-v1 responses without inventing a missing report.

Identity redaction uses the existing upload policy. Masked names or copied source
values explicitly clear identity, preventing a field-rule bypass or grouping
different secret values under one replacement. Unrelated masked arguments keep
public identities. Malformed Unicode identities are rejected consistently
between TypeScript and Go. Oversized Claude Skill inputs do not create new
identity copies outside the admitted content boundary.

See Session Analytics,
v4 ingestion,
ADR-0120 and
ADR-0121.

Opening a Project while its background status refresh is running now shares
the existing process inspection. Concurrent callers no longer block each other
with a process-lock recovery screen; completed results are reread on the next
inspection. Capture timing, Stop intent and exclusion of other commands retain
their existing behavior.

Upgrade and recovery boundaries

The journal's actual SQLite format, atape.client.v3-capture.v2 contract,
update-control v1 and compiled journal-v7-to-v8 plan remain unchanged. V4 source
recovery metadata uses a v3-compatible closed field plus an independent v4 fact;
new readers restore its effective profile. Actual target parts remain v4 and
frozen bytes are not rewritten during receipt recovery.

Published 0.5.8 active official-Claude upgrade parents cannot decode the candidate
Adapter's v4 declaration. Their automatic and existing in-console update paths
reject it before pause; this release does not claim universal unattended
0.5.8 → 0.5.9 delivery. Such installations require the stopped external CLI
refresh described in explicit maintenance,
then complete bundle selection through the updated CLI. Preserve ATAPE_HOME,
credentials, project/tool choices and Stop intent. Resume only after every
configured Instance meets the declared capture prerequisites. Other eligible
installations retain the existing managed discovery path.

If the CLI is already current while eligible official integrations remain older,
Tools and updates exposes Update matching official integrations for ATape
0.5.9. This invokes the existing complete-bundle upgrade and preserves stopped
intent. Pinned, local, custom or ahead installations do not trigger a blanket
replacement action.

Pinned, custom, local or nonselected old Adapters are not silently replaced.
Historical sessions acquire identities only after a supported updated Adapter
successfully replays their source. Codex Skill message markers and Claude command
expansion remain outside this tool-invocation report. MCP/Skill-specific source
acceptance currently uses constructed native-format records; a fresh live
execution recording remains unverified.

No database migration is added. Once v4 data is accepted, an older pre-v4 Server
image cannot guarantee Reader compatibility. Preserve the current image and a
fresh paired PostgreSQL/Raw recovery point before rollout; restoring that point
withdraws writes made afterwards.

Candidate validation and manual acceptance disclosure

The exact frozen candidate must pass fresh repository, installed CLI/Adapter,
genuine historical-reader and upgrade-path, PostgreSQL, dependency/container
security, race/fuzz, self-host configuration and paired restore gates. Existing
0.5.8 or feature-PR results do not attest this release candidate. Preparing these
notes claims no successful candidate CI, package publication, deployment or
unattended upgrade.

Focused candidate evidence
binds the exact local archives, genuine 0.5.8 source-free recovery and installed
stopped upgrade path, mandatory POSIX release gate and scanned ARM64 images.
It preserves the initial repository-check failure, unchanged-limit focused
reruns and the PR's Node/Vitest suite-discovery correction. Fresh complete gates
are required on the corrected candidate. It does not attest candidate CI,
public npm visibility, deployment or manual staging.

Staging evidence remains pending. The following
manual checks are unverified and waived for package publication only:

• candidate-artifacts: manual candidate artifact acceptance.
• official-topology: official deployment topology acceptance.
• github-provider-staging-smoke: live GitHub Provider staging smoke.
• official-domain-egress-deny-smoke: official-domain egress isolation.
• two-user-two-team: two-user/two-Team acceptance.
• waf-tls-callback: WAF, TLS and callback configuration.
• backup-restore: operational backup and restore exercise.
• observability-secret-sample: observability secret sampling.
• rollback: operational rollback exercise.
• release-signoff: manual release signoff.

On 2026-10-11 Asia/Singapore, the user replied “继续推进” to the specific proposed
next step “升级 Server，再发布配套 CLI/Adapter”. This accepts that deployment and
coordinated package-publication sequence. Under
ADR-0048, the
publication request also authorizes the candidate-bound manual-only waiver;
automated gates remain mandatory. This increment requires no new database schema
migration and does not authorize unrelated data or schema changes.

{
"protocol": "atape.release-bundle.v1",
"version": "0.5.9",
"captureStateContract": "atape.client.v3-capture.v2",
"updateControlProtocol": "atape.update-control.v1",
"packages": [
{
"name": "@atape/adapter-claude",
"integrity": "sha512-UvbgYL796RzxA7gP2XdrBn9Zfkn2HrIZonj591SY9Z6dsfnLS7tK/0w9JNq5/08nv0ufO8HxAsBQtlDc47TOoQ==",
"tarball": "https://registry.npmjs.org/@atape/adapter-claude/-/adapter-claude-0.5.9.tgz"
},
{
"name": "@atape/adapter-codebuddy",
"integrity": "sha512-DeMBhUg61bJ687IZIsiY/3cePTnlQSvMYGPW9nk5jiGGE3nQGiNDUDDRKDQbgHXSZMuFNPjklohc2/W7AnTUmw==",
"tarball": "https://registry.npmjs.org/@atape/adapter-codebuddy/-/adapter-codebuddy-0.5.9.tgz"
},
{
"name": "@atape/adapter-codex",
"integrity": "sha512-caOzjllMYtbhyM4dU99AodrNrl48X63f3NedW09otADLyCiR5IpkpLMnNp6DOpLqiXvYVgOBs7Zha0O61RGlEw==",
"tarball": "https://registry.npmjs.org/@atape/adapter-codex/-/adapter-codex-0.5.9.tgz"
},
{
"name": "@atape/adapter-cursor",
"integrity": "sha512-b56jltp7o0cFBbu6Qy+gpcnQe1hz160vgxkQDotPsHT5rb1u70I0C8RDCnqfvOYtMu14IcGc1AOn2UMFeRQSdA==",
"tarball": "https://registry.npmjs.org/@atape/adapter-cursor/-/adapter-cursor-0.5.9.tgz"
},
{
"name": "@atape/adapter-grok",
"integrity": "sha512-PiMD2OBaFcAtbF8zTIoIbE5BicfMNGwT+z6/3UyQrAhCQwdPnnp7AKkW234uq7uX2NDjsqtk3vToFru7Q7JEFA==",
"tarball": "https://registry.npmjs.org/@atape/adapter-grok/-/adapter-grok-0.5.9.tgz"
},
{
"name": "@atape/adapter-kimi",
"integrity": "sha512-oOHmn69TfDbxK5rAVTbU0oqsgiHYp/M/GOagAmJGlXltuWhDebWjbOd8FdE0F24e4Kav/lgS6jlpmT7/qELBog==",
"tarball": "https://registry.npmjs.org/@atape/adapter-kimi/-/adapter-kimi-0.5.9.tgz"
},
{
"name": "@atape/adapter-opencode",
"integrity": "sha512-1n7RIjNmv9lTBYQJWISAxYl1Z5LFh3zp7VezannzzJdXrjOjsCxJ3dkb2cU2/DKJ2ksFh1tdIfCN89CqDH/Z7w==",
"tarball": "https://registry.npmjs.org/@atape/adapter-opencode/-/adapter-opencode-0.5.9.tgz"
},
{
"name": "@atape/cli",
"integrity": "sha512-w47H6TUqDg9bWLLKvYQ8J6jgMz0zT3MLs/wzKy9ZFCkkoM+2iReNUneYEeDM/YNHb3xzKP2pbrD1jdRcCQeehw==",
"tarball": "https://registry.npmjs.org/@atape/cli/-/cli-0.5.9.tgz"
}
]
}

{
"protocol": "atape.release-bundle.v2",
"version": "0.5.9",
"captureStateContract": "atape.client.v3-capture.v2",
"updateControlProtocol": "atape.update-control.v1",
"packages": [
{
"name": "@atape/adapter-claude",
"integrity": "sha512-UvbgYL796RzxA7gP2XdrBn9Zfkn2HrIZonj591SY9Z6dsfnLS7tK/0w9JNq5/08nv0ufO8HxAsBQtlDc47TOoQ==",
"tarball": "https://registry.npmjs.org/@atape/adapter-claude/-/adapter-claude-0.5.9.tgz"
},
{
"name": "@atape/adapter-codebuddy",
"integrity": "sha512-DeMBhUg61bJ687IZIsiY/3cePTnlQSvMYGPW9nk5jiGGE3nQGiNDUDDRKDQbgHXSZMuFNPjklohc2/W7AnTUmw==",
"tarball": "https://registry.npmjs.org/@atape/adapter-codebuddy/-/adapter-codebuddy-0.5.9.tgz"
},
{
"name": "@atape/adapter-codex",
"integrity": "sha512-caOzjllMYtbhyM4dU99AodrNrl48X63f3NedW09otADLyCiR5IpkpLMnNp6DOpLqiXvYVgOBs7Zha0O61RGlEw==",
"tarball": "https://registry.npmjs.org/@atape/adapter-codex/-/adapter-codex-0.5.9.tgz"
},
{
"name": "@atape/adapter-cursor",
"integrity": "sha512-b56jltp7o0cFBbu6Qy+gpcnQe1hz160vgxkQDotPsHT5rb1u70I0C8RDCnqfvOYtMu14IcGc1AOn2UMFeRQSdA==",
"tarball": "https://registry.npmjs.org/@atape/adapter-cursor/-/adapter-cursor-0.5.9.tgz"
},
{
"name": "@atape/adapter-grok",
"integrity": "sha512-PiMD2OBaFcAtbF8zTIoIbE5BicfMNGwT+z6/3UyQrAhCQwdPnnp7AKkW234uq7uX2NDjsqtk3vToFru7Q7JEFA==",
"tarball": "https://registry.npmjs.org/@atape/adapter-grok/-/adapter-grok-0.5.9.tgz"
},
{
"name": "@atape/adapter-kimi",
"integrity": "sha512-oOHmn69TfDbxK5rAVTbU0oqsgiHYp/M/GOagAmJGlXltuWhDebWjbOd8FdE0F24e4Kav/lgS6jlpmT7/qELBog==",
"tarball": "https://registry.npmjs.org/@atape/adapter-kimi/-/adapter-kimi-0.5.9.tgz"
},
{
"name": "@atape/adapter-opencode",
"integrity": "sha512-1n7RIjNmv9lTBYQJWISAxYl1Z5LFh3zp7VezannzzJdXrjOjsCxJ3dkb2cU2/DKJ2ksFh1tdIfCN89CqDH/Z7w==",
"tarball": "https://registry.npmjs.org/@atape/adapter-opencode/-/adapter-opencode-0.5.9.tgz"
},
{
"name": "@atape/cli",
"integrity": "sha512-w47H6TUqDg9bWLLKvYQ8J6jgMz0zT3MLs/wzKy9ZFCkkoM+2iReNUneYEeDM/YNHb3xzKP2pbrD1jdRcCQeehw==",
"tarball": "https://registry.npmjs.org/@atape/cli/-/cli-0.5.9.tgz"
}
],
"migration": {
"protocol": "atape.capture-migration.v1",
"id": "journal-v7-to-v8",
"fromCaptureStateContracts": [
"atape.client.v3-capture.v1",
"atape.client.v3-capture.v2"
]
}
}