Repository navigation
chore(release): prepare session-peer 0.6.0 - #177
Conversation
Align scoped current-version context, carry forward the four reviewed finite skill profiles, and retain the public 0.5.2 baseline and immutable skill pin. Feature integration and final artifact evidence remain separate preparation steps. Refs #175
Add a manually operated private collector and receipt-only handler. Preserve original budgets through private IPC v2, generation-bound Codex v1, and a separate Claude delegated context without native identity or consumption claims. Fence one native submission, preserve known facts on unknown receipt outcomes, and keep authority out of argv, environment, public output and sender/collector persistence. Refs #132
abruption
added this to the
0.6.0 — Claude discovery, authenticated receipts and research milestone
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
Codex Review: Didn't find any major issues. Hooray! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
|
Codex Review: Didn't find any major issues. Swish! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
|
@codex review Please review main-target preparation head 152de81 after #176 was squash-merged at105b3c529d46df025dbb2c3136223ac482d76548. Integration tree is byte-identical to tested39eede0 (666tests,654pass,0fail,11skip,1TODO); current main-target CI and CodeQL must pass before normal protected merge. The diff is release version/docs/finite matrix and fixtures only. |
|
Codex Review: Didn't find any major issues. 🎉 Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
|
Current-head macOS Node24 hit the existing pre-effect owner-probe refusal in the unknown-after-native-write E2E. Original failed log is retained; source/assertions/runtime bounds are unchanged. One failed-job rerun is requested to distinguish a transient runner refusal. A passing rerun will not be described as proof that the unconfirmed root cause is fixed. Other generated checks and current code review pass; no protection bypass is used. |
|
@codex review Please review current preparation head0410d8f. This follow-up only serializes npm test file execution and includes actual fixture queue/native call logs when the existing post-write-loss assertion fails. Runtime guards,800/1000ms probe bounds and all required effect assertions are unchanged. The original failure and one failed rerun are retained; no root-cause fix is claimed without evidence. Normal current-head gates are rerunning. |
|
Codex Review: Didn't find any major issues. Hooray! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
Release contents
Prepares
session-peer@0.6.0after #173/#174/#176: macOS Orca Claude profile discovery and explicit local authenticated receipts. Codex keeps generation-bound v1; Claude uses separate delegated-context v2 without claiming native generation/model identity/consumption/completion. No service, wake, automatic retry, reverse-SSH collector or new native qualification is added.Updates package/compiled version, scoped four-language README/guide examples and the finite doctor matrix. Earlier rows and the documented immutable TS skill 0.2.1 pin remain unchanged; metadata acceptance does not establish new receipt feature coverage. #73 transcript/body probing is NO-GO. Test files run serially without weakening production probe bounds or effect assertions; failures retain actual fixture call diagnostics.
Validation
Reviewed head
0410d8f7fa88ef049b91540720430dcebad4c8c1passed 12/12 checks and code review with no findings. Merged main7d80eb901c63b0a260331779cca30eb2eccfa6eahas the same tree. Local full suite: 666 total, 654 pass, 0 fail, 11 skip, 1 existing TODO, with pinned Python comparison reference. Main CI 41578253524 passes on attempt 2; CodeQL 41578253236 passes. Initial macOS pre-effect owner-probe refusals remain of unconfirmed cause and are retained in the audit record; no runtime deadlines/assertions were weakened.Independent static development/security reviews and root corrections are recorded in #176: actual Claude Opus 5.5 and Gemini 4 Argon Medium, fresh noninteractive frozen inputs, no reviewer writes/tests. The adapter-masking and terminal timeout findings are corrected. GitHub security metadata naming older heads is not represented as current security completion. No live native/model/SSH ACK qualification is inferred from isolated tests.
Published result
Approved source
7d80eb901c63b0a260331779cca30eb2eccfa6eawas staged once by run 41580042849. Reviewed, Actions, staged, npm-public and GitHub-release raw archives match SHA-25623a422252fb945c07f06184207b07c80ec280360cd29c97949c2c941398336f4. All 95 files, including 18 Markdown documents, match source. Registry integrity, npm signature/attestation audit, SLSA digest/source/workflow/run linkage and isolated install/remove pass. npm latest=0.6.0; preview=0.1.0-preview.1 is preserved.GitHub v0.6.0 is public/Latest; its annotated tag peels to the same source. The release includes the reviewed tarball and source-bound manifest. The Trusted Publisher was freshly verified stage-only and the protected npm environment approval was observed. The user explicitly waived this release's separate web publish-MFA-policy read. The final stage became unavailable and public publication was observed after the user reported approval; the agent did not execute a stage-approval command. No user global/fleet installation was changed.
Refs #175