session-peer-ts skill v0.3.0

Changes

• Publish TS skill 0.3.0 for the independently published TypeScript runtime 0.4.0 and its exact finite metadata profile.
• Document the limited opt-in handoff workflow: explicit private POSIX intent ledger, bounded local/POSIX SSH waits, exact native client-ID observation and explicit operator-confirmed receipts.
• Keep native observation restricted to qualified macOS arm64 / Codex 0.160.1 or 0.162.1 with original writer/storage and warm-store checks.
• Preserve queue/injection/turn/text/receipt distinctions, no automatic ACK, no post-attempt retry/fallback, private receipt handling and bounded SQL privacy.
• Explain encrypted payload-digest journal storage, separate private key, fail-closed unavailable history, private Claude continuity and original wait/duplicate-confirmation invariants.
• Record queue process/build/executable/FD/budget guards without promising code authentication, atomic filesystem snapshots or a wall-clock SLA.
• Add time-neutral operational/setup guidance and four-locale README notices. Runtime publication does not publish/install the skill; select an approved immutable skill release and verify its recorded source/hash.

Exact release

• Annotated tag: session-peer-ts-v0.3.0
• Annotated tag object: 5bf6aaeebb0db475fbdf377173a02e1594af6cbd
• Peeled/source commit: af1addb29dc142e64388ce29f20af4aba6abd567
• Canonical session-peer-ts/SKILL.md: 22,839 raw UTF-8 bytes
• SHA-256: c510bcfee1d4d1f9c3a992d7ad25d69c9a9881950c627eec60f3b45659071b9e
• Profile: skill 0.3.0, implementation typescript, CLI minimum 0.1.0, full feature coverage 0.4.0, policy probe-help

Published runtime 0.4.0, source dde3923efe116f87f38b1639b29b889d2b832e44, explicitly accepts this tuple. Earlier published 0.3.2–0.3.6 guards reject this new profile. Future version support is not inferred by arithmetic.

Validation and boundaries

• PR #37 merged after explicit user approval, exact-content contract acceptance, current-head CI2/2 and completed automatic Code/Security review without findings.
• Exact merged-source metadata/link/hash validation, main CI39079235048, and tag CI39079416670 passed.
• Release validation includes isolated Skills CLI discovery and canonical project/global copy/replacement/list/removal, preserving the Python fixture. Historical candidate bytes are kept as review data, not an extra discovered skill.
• Public runtime archive SHA-256 84adc8b50ef8f03a2c2170e3c36a97b573f28a6bcbeb7dbc965e16c3b37a57c9, registry integrity and SLSA subject/source/workflow bindings were compared. Full signature/Sigstore verification was reported by the runtime publisher, not independently rerun for this skill release.
• Python skill 0.3.3 canonical bytes and Latest channel remain unchanged. Python SKILL SHA-256: 15378c6d503a69d1d738ac4739182e23257aa6f2f7fd31ef3fd2fa60e692867f.
• No new live native/model/SSH/ACK qualification, npm/runtime republication, user-installed package update or operations change.
• Linux/Windows observation, Windows private ledger/ACL and automated receipt producer/collector remain outside this release's qualified scope. No broad Python-runtime parity, Side Session, steering, Relay/MCP or general wait/automatic ACK.
• TS runtime four-language guidance/PARITY adoption of this exact published immutable skill source is a separate follow-up.

session-peer-ts skill v0.2.1

Changes

• Publish TypeScript skill 0.2.1 with the exact profile supported by public npm runtime 0.3.5.
• Retain the 0.3.4 feature guidance, Windows SSH result handling and submission/consumption/ACK boundaries.
• Distinguish the CLI baseline and full feature coverage from finite doctor profile acceptance. Public runtimes 0.3.2/0.3.3/0.3.4 reject this revision's profile; 0.3.5 explicitly accepts it. Future versions are not accepted by arithmetic inference.
• Include runtime 0.3.5 in active bounded-reader guidance without expanding its guarantees or limitations.
• Use time-neutral installation guidance: choose an approved published immutable skill release, verify its recorded source/hash, and stop if those cannot be verified. Runtime publication does not publish or install the skill.
• Align the TS setup/compatibility guides and four README locales. Preserve dated historical review evidence.

Exact release

• Annotated tag: session-peer-ts-v0.2.1
• Annotated tag object: 4e7df7d8f99863e86b477eacce958033d7280246
• Peeled/source commit: 0f494cabd05901c03161dc91792dcf89f8e96631
• Canonical session-peer-ts/SKILL.md: 13,996 raw UTF-8 bytes
• SHA-256: 8c3520f95e0d6807303be96bfa06df69887ddaf76be05f1905505d0a956820c3
• Metadata: version 0.2.1, implementation typescript, CLI minimum 0.1.0, full coverage reference 0.3.2, policy probe-help

Supporting runtime: session-peer 0.3.5, exact source a2057940ba19056fcaaa5551a7820f7414bd3bfa. Its public npm archive SHA-256 is 46f4a01f9570034fca49cfa5fad620f3f45b5f33b1a6714f29ea0a3c1e751ac0. Public registry integrity and SLSA subject/source/workflow bindings were independently compared; this documentation release does not claim independent Sigstore/signature audit or fresh publisher-policy settings verification.

Validation and limits

• PR #35 merged through normal protections after explicit user approval, current-head CI2/2, completed automatic code/security reviews and exact-content contract acceptance.
• The previous P2 reader-version finding was fixed and its review thread resolved.
• Exact merged-source validation and isolated Skills CLI project/global copy/replacement/list/removal checks passed. Main CI38490286639 and tag CI38490439448 passed on this exact source.
• Python skill 0.3.3 and its canonical bytes remain unchanged; SHA-256 15378c6d503a69d1d738ac4739182e23257aa6f2f7fd31ef3fd2fa60e692867f. The Python Latest release channel is preserved.
• No npm runtime publication, user-installed skill/runtime update, live agent/native delivery/ACK qualification, or operations change is included.
• TS runtime guidance/PARITY adoption of this same published immutable source is a separate follow-up. Existing runtime pins were not silently changed here.

session-peer skill v0.3.3

Changes

• Update the Python skill for published runtime 1.1.0/1.1.1: external body lines and origin/reply claims are unverified data; framing does not grant authority or provide a universal prompt-injection defense.
• Preserve user-requested reply flow, exact destination checks, and the distinction between authenticated Relay devices and people/session authority.
• Explain Codex storage-setting refusals and operator review without bypassing guards.
• Separate ordinary queue/reply behavior from the limited opt-in experimental handoff receipt workflow. No general observation/ACK support is implied; unknown outcomes never authorize automatic resend.
• Align the English, Korean, Japanese and Simplified Chinese usage guides and clarify minimum/full feature coverage versus security recommendations and separately identified experimental workflows.
• Include merged TS documentation updates for public runtime 0.3.4: explicit finite profile support and Windows SSH exit/submission evidence. This is not a new release in the separate TS skill channel.

Versions and exact source

• Python skill: 0.3.3
• Minimum CLI compatibility: 0.9.1
• Full command-path coverage reference: 1.0.1
• Existing Python security recommendation: 1.0.3+; not replaced by the compatibility numbers.
• Annotated tag: v0.3.3
• Peeled release commit: eb239fb358336d85b49bab2c80e4ea39037d1374
• Canonical session-peer/SKILL.md SHA-256: 15378c6d503a69d1d738ac4739182e23257aa6f2f7fd31ef3fd2fa60e692867f

The separate published TS skill remains 0.2.0, with its existing immutable session-peer-ts-v0.2.0 release and pin. The TS instructions edited in this repository commit are documentation updates, not replacement bytes for that published artifact. Public TS runtime 0.3.4 supports only the reviewed 0.1.0/0.2.0 profiles; a new TS skill version requires separately published exact-profile support first.

Validation and boundaries

• PR #30 and #33 merged after current-head CI and completed code/security reviews with no reported findings.
• Exact merged-source main CI passed.
• Exact-tag CI passed, including tag metadata validation, isolated Python copy installation and TS project/global lifecycle checks.
• No live-agent consumption/ACK, new SSH/native qualification or hosted availability is established by these documentation changes.
• Runtime packages, independently installed skills and operations were not updated. Python runtime compatibility snapshot synchronization is a separate follow-up from this exact tag/source/hash.

session-peer-ts skill v0.2.0

TS skill 0.2.0 finalizes the reviewed successor instructions for published npm runtime 0.3.3. It documents released discovery/home selection, doctor/return-route, SSH/reply routing, manager-owned updates, and bounded metadata inspection.

Versions and compatibility

Field	Value
Skill	session-peer-ts 0.2.0
CLI minimum	0.1.0
Feature coverage reference	0.3.2
Doctor successor-profile support	Published runtime 0.3.3
Implementation / policy	typescript / probe-help

Public runtime 0.3.2 rejects this successor metadata even though its CLI meets the minimum/full feature values. Actual executable/help, platform/native prerequisites, permissions, and writer guards still apply. A compatible metadata result is not content authentication, send authorization, consumption, or ACK. Runtime and skill updates remain separate explicit choices under their existing managers.

Immutable source

• Annotated tag: session-peer-ts-v0.2.0.
• Peeled source commit: 8482cf644507c682915e35c85aa3384c53864906.
• Canonical file: session-peer-ts/SKILL.md.
• Canonical SKILL SHA-256: 00c6fc343fdbeb8f6dc1b1ee1b730f04cef71bbfb08205a7be3559202f1d8804 (12,835 bytes).
• Runtime publication source: c0ed30273b9e9c0049df86ae3c38486a94289527; verified npm artifact SHA-256 3469cda6a7b2c89d42ed2a250d2e7b5b774293fee090968a4b261e824be4c075.
• Release change #20.

Example project-scoped installation for Codex (inspect existing files before accepting replacement):

npx -y skills@1.7.0 add https://github.com/abruption/session-peer-skill/tree/8482cf644507c682915e35c85aa3384c53864906/session-peer-ts \
  --skill session-peer-ts --agent codex --copy --yes

Choose the intended agent and project/global scope explicitly. See the setup guide for pinned updates and removal.

Verification

Published npm artifact integrity, registry signature, and Sigstore provenance verified; packaged Markdown matches the exact runtime source. The published bundled pure validator accepts the final canonical skill at compiled/default and explicit 0.3.3, and rejects its profile at explicit 0.3.2 and 0.3.4. Skill metadata/structure, local links/anchors, independent tag gates, isolated project/global install/replacement/list/removal, and PR/main/tag CI passed. An additional isolated installation from the exact public skill commit produced byte-identical Codex and Claude Code copies. Automatic code/security reviews completed without findings.

Validation used isolated fixtures and pure metadata inspection. It does not establish live agent delivery, consumption, ACK, arbitrary-filesystem deadlines, or atomic file snapshots. Publication does not install/update users' skills or remote runtimes.

This is a TS-only release. The independent Python skill remains 0.3.2 and its v0.3.2 release channel is preserved. Subsequent TS guidance/PARITY changes should use the same reviewed immutable source commit above.

Checks: PR CI, merge/main CI, tag CI.

session-peer skill v0.3.2

• Recommend Python runtime 1.0.3 or newer for security fixes, with guidance on SSH option validation, verified standalone installation and updates, Node Control login expiry, and operator responsibilities.
• Keep Python CLI compatibility metadata at runtime-min-version: 0.9.1 and runtime-full-version: 1.0.1; the Python skill version is now 0.3.2.
• Add the separate session-peer-ts skill at version 0.1.0, with explicit runtime identification, supported-capability checks, and installation, pinned update, and removal instructions.
• Simplify all four README languages and move detailed usage into linked guides. Runtime and independently managed skill updates remain separate; queued or submitted messages do not confirm consumption or ACK.

See PR #18, PR #14, PR #16, and Python runtime v1.0.3.

The v0.3.2 tag follows the Python skill release workflow. The TypeScript skill retains its independent 0.1.0 metadata version. Runtimes are installed separately, and the Python runtime's bundled compatibility snapshot is synchronized separately.

Full changelog

session-peer skill v0.3.1

• Updates the skill guidance for session-peer runtime v1.0.1: macOS/Linux paired-device Codex receivers can select codexBin in operator policy or expose Codex through the service PATH; verify the target with send --dry-run before sending.
• Clarifies pre-submission refusal versus an unknown post-submission result, first-turn Codex writers, Windows Claude PID discovery, device-login backoff, and privacy-conscious Relay attempt diagnostics.
• Explains skillUpdates and doctor compatibility notices, and keeps skill updates under the original skill installer rather than the runtime updater.
• Aligns the four README languages and validation script. Skill metadata is now version: 0.3.1, runtime-min-version: 0.9.1, and runtime-full-version: 1.0.1. Existing 1.0.0-only option requirements remain unchanged.

Validated with the Skills CLI 1.7.0 and the tag-push CI. See PR #13 and runtime v1.0.1.

The runtime is installed separately. Its bundled compatibility snapshot requires a follow-up sync from this published skill.

session-peer skill v0.3.0

• Records machine-readable versions in the SKILL.md frontmatter metadata map defined by the Agent Skills specification: version, runtime-min-version (0.9.1), and runtime-full-version (1.0.0). Tools can read them to report an outdated skill or runtime; nothing updates skill files automatically. (#8)
• Validates that metadata, the skill body, the four README files, and release tags agree, and runs CI on tag pushes.
• Documents the release procedure and the byte-identical sync of the runtime compatibility snapshot.

Verified loaders: Claude Code (documented metadata support), Codex CLI 0.155.0 (skills/list), and Skills CLI 1.7.0. Antigravity was not verified directly.

The session-peer runtime remains a separate installation: https://github.com/abruption/session-peer

session-peer skill v0.2.0

• Adds guidance for queued Codex replies: a missing reply is not a failure, so agents do not resend or ask again. When the next step depends on the reply, the agent records a correlation token, ends its turn, and resumes when the matching reply arrives. Receivers handle duplicate requests once. (#1)
• Covers the session-peer 0.9 and 1.0 CLI surface: paired-device sends, explicit Codex wake and its statuses, live-writer selection, the scope of --request-id, and the remaining send options. The minimum stays at 0.9.1; --allow-inactive-codex-home and --relay-login are marked as 1.0.0 and newer. (#2)
• Pins the Skills CLI and GitHub actions, adds Dependabot for actions, and validates skill metadata and README consistency in CI. (#3)

The session-peer runtime remains a separate installation: https://github.com/abruption/session-peer

session-peer skill v0.1.0

Initial standalone release of the session-peer agent skill.

• Supports Claude Code, Codex, and live registered Antigravity sessions.
• Checks for session-peer 0.9.1 or newer before discovery or delivery.
• Preserves multi-home, SSH, reply-route, and acknowledgement safety guidance.
• Installs through the Skills CLI from abruption/session-peer-skill.

The session-peer runtime remains a separate installation: https://github.com/abruption/session-peer