Skip to content

session-peer skill v0.3.3

Choose a tag to compare

@abruption abruption released this 12 Oct 05:39
eb239fb

Changes

  • Update the Python skill for published runtime 1.1.0/1.1.1: external body lines and origin/reply claims are unverified data; framing does not grant authority or provide a universal prompt-injection defense.
  • Preserve user-requested reply flow, exact destination checks, and the distinction between authenticated Relay devices and people/session authority.
  • Explain Codex storage-setting refusals and operator review without bypassing guards.
  • Separate ordinary queue/reply behavior from the limited opt-in experimental handoff receipt workflow. No general observation/ACK support is implied; unknown outcomes never authorize automatic resend.
  • Align the English, Korean, Japanese and Simplified Chinese usage guides and clarify minimum/full feature coverage versus security recommendations and separately identified experimental workflows.
  • Include merged TS documentation updates for public runtime 0.3.4: explicit finite profile support and Windows SSH exit/submission evidence. This is not a new release in the separate TS skill channel.

Versions and exact source

  • Python skill: 0.3.3
  • Minimum CLI compatibility: 0.9.1
  • Full command-path coverage reference: 1.0.1
  • Existing Python security recommendation: 1.0.3+; not replaced by the compatibility numbers.
  • Annotated tag: v0.3.3
  • Peeled release commit: eb239fb358336d85b49bab2c80e4ea39037d1374
  • Canonical session-peer/SKILL.md SHA-256: 15378c6d503a69d1d738ac4739182e23257aa6f2f7fd31ef3fd2fa60e692867f

The separate published TS skill remains 0.2.0, with its existing immutable session-peer-ts-v0.2.0 release and pin. The TS instructions edited in this repository commit are documentation updates, not replacement bytes for that published artifact. Public TS runtime 0.3.4 supports only the reviewed 0.1.0/0.2.0 profiles; a new TS skill version requires separately published exact-profile support first.

Validation and boundaries

  • PR #30 and #33 merged after current-head CI and completed code/security reviews with no reported findings.
  • Exact merged-source main CI passed.
  • Exact-tag CI passed, including tag metadata validation, isolated Python copy installation and TS project/global lifecycle checks.
  • No live-agent consumption/ACK, new SSH/native qualification or hosted availability is established by these documentation changes.
  • Runtime packages, independently installed skills and operations were not updated. Python runtime compatibility snapshot synchronization is a separate follow-up from this exact tag/source/hash.