Repository navigation
v0.2.1 — Reliability and hardening
Retrospective GitHub release record added on 2026-10-05 (KST).
Original npm publication: 2026-09-28T23:45:16.923Z (UTC).
Fixes since 0.2.0
- Preserve message bodies starting with a dash by passing one native --message= argument; remove inherited CODEX_SQLITE_HOME and refuse detected relocated sqlite_home configurations (#49, #50).
- Refuse option-name tokens used as option values; preserve verified remote exit codes; require absolute Reply-To codexHome paths (#51–#53).
- Escape bidi/zero-width controls in text output and accept an exact successful SSH version preflight despite unrelated stderr (#54, #55).
- Harden PowerShell quoting; explicitly refuse unsupported Windows .cmd/.bat Codex shims instead of shell-interpreting messages (#56, #57).
- Replace quadratic envelope trimming and increase the Windows compiling owner-inspection deadline while retaining conservative timeout refusals (#59, #64–#66).
- Add weekly dependency/signature auditing (#58, #63).
Compatibility
These are stricter refusals within the existing CLI/transport contract. Use native codex.exe on Windows; doctor reports batch shims as unsupported. SSH endpoints must both run 0.2.1. No self-update, new transport, consumption confirmation or automatic retry is introduced.
Escaped TOML root-key detection is strengthened separately in 0.3.1.
Published package and source
- Package: session-peer@0.2.1.
- Tag source:
a9c42334da8f7faf83f0b9bb1fe52f1c695dfe8d, verified against npm provenance. - Publication workflow record; npm attestation metadata.
- Integrity:
sha512-bPjriJZf7OQ5niZafwxNgMYo0DVpZldELEjp640xAfBMjBCAJatT2hPMTG9oV7xDX2ULCPUmox9+vFWc5nw0Mg==. - Dated validation record.
npm install --global --ignore-scripts session-peer@0.2.1posted/queued report submission, not consumption or ACK. An unknown outcome is not safe to retry automatically.