Skip to content

v0.3.3 — SSH reliability and skill metadata compatibility

Choose a tag to compare

View all tags
@abruption abruption released this 09 Oct 09:07
v0.3.3
c0ed302
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changes

  • Strict, bounded SSH response parsing rejects invalid UTF-8, duplicate JSON keys, multiple frames and oversized responses. Diagnostic stderr is decoded separately.
  • Complete, request-matched Claude/Codex native submission evidence is retained after SSH exit 255 or collection timeout. Partial, malformed or oversized responses remain uncertain and never trigger an automatic resend. Submitted/queued/posted does not mean consumption or ACK.
  • Bounded skill metadata inspection checks file type, read size, observable file stability and the limited metadata grammar. Runtime 0.3.3 accepts the explicitly reviewed legacy and successor profiles; compatible is metadata-only evidence.
  • Updated migration and four-language documentation describe the Python/TypeScript contract differences and current SSH return-route behavior.

Upgrade and limitations

Install with npm install --global session-peer@0.3.3 through your existing package manager.

SSH requires the same TypeScript client version at both ends: 0.3.2 and 0.3.3 refuse each other at preflight. Coordinate endpoint upgrades. Windows jump-host support (#20) and remote provisioning limitations (#23) remain open. No 0.4 handoff/ACK implementation, automatic deployment or companion skill publication is included. Skill metadata/pin rollout remains a separate task (#118).

Publication evidence — 2026-10-09

  • Source: c0ed30273b9e9c0049df86ae3c38486a94289527.
  • Published package: session-peer@0.3.3; latest=0.3.3, preview=0.1.0-preview.1 unchanged.
  • Release workflow 37907833518, protected environment approval and final npm 2FA approval completed. No protection bypass or upload retry.
  • Actions, staged and downloaded public tarball bytes match. SHA-256: 3469cda6a7b2c89d42ed2a250d2e7b5b774293fee090968a4b261e824be4c075.
  • Integrity, exact source/workflow provenance, npm signature audit and isolated install/uninstall verified successfully.
  • Exact-main CI and CodeQL passed, including Windows native Node 22/24. Local macOS arm64 Node 24.16.0: 187 tests, 182 passed, 0 failed, 5 Windows-only skips. Fixtures do not establish live delivery/ACK or new platform qualification.

Changes: #125, #126, #127 and release preparation #129.

Assets 2
Loading