Repository navigation
session-peer skill v0.3.3
Changes
- Update the Python skill for published runtime 1.1.0/1.1.1: external body lines and origin/reply claims are unverified data; framing does not grant authority or provide a universal prompt-injection defense.
- Preserve user-requested reply flow, exact destination checks, and the distinction between authenticated Relay devices and people/session authority.
- Explain Codex storage-setting refusals and operator review without bypassing guards.
- Separate ordinary queue/reply behavior from the limited opt-in experimental handoff receipt workflow. No general observation/ACK support is implied; unknown outcomes never authorize automatic resend.
- Align the English, Korean, Japanese and Simplified Chinese usage guides and clarify minimum/full feature coverage versus security recommendations and separately identified experimental workflows.
- Include merged TS documentation updates for public runtime 0.3.4: explicit finite profile support and Windows SSH exit/submission evidence. This is not a new release in the separate TS skill channel.
Versions and exact source
- Python skill: 0.3.3
- Minimum CLI compatibility: 0.9.1
- Full command-path coverage reference: 1.0.1
- Existing Python security recommendation: 1.0.3+; not replaced by the compatibility numbers.
- Annotated tag:
v0.3.3 - Peeled release commit:
eb239fb358336d85b49bab2c80e4ea39037d1374 - Canonical
session-peer/SKILL.mdSHA-256:15378c6d503a69d1d738ac4739182e23257aa6f2f7fd31ef3fd2fa60e692867f
The separate published TS skill remains 0.2.0, with its existing immutable session-peer-ts-v0.2.0 release and pin. The TS instructions edited in this repository commit are documentation updates, not replacement bytes for that published artifact. Public TS runtime 0.3.4 supports only the reviewed 0.1.0/0.2.0 profiles; a new TS skill version requires separately published exact-profile support first.
Validation and boundaries
- PR #30 and #33 merged after current-head CI and completed code/security reviews with no reported findings.
- Exact merged-source main CI passed.
- Exact-tag CI passed, including tag metadata validation, isolated Python copy installation and TS project/global lifecycle checks.
- No live-agent consumption/ACK, new SSH/native qualification or hosted availability is established by these documentation changes.
- Runtime packages, independently installed skills and operations were not updated. Python runtime compatibility snapshot synchronization is a separate follow-up from this exact tag/source/hash.