diff --git a/README.ja.md b/README.ja.md index d6a3a60..eae7223 100644 --- a/README.ja.md +++ b/README.ja.md @@ -33,7 +33,7 @@ session-peer 1.0.2による実際のローカル通信です。CodexがClaude Co ### インストール Python 3.9以上が必要です。基本のローカル・SSH CLIに外部Python依存パッケージはありません。 -ソースバージョン：**1.3.0**。2026-10-23の準備時点で、最後に確認した公開済み安定版は**1.2.1**でした。 +ソースバージョン：**1.3.1**。2026-10-27の準備時点で、最後に確認した公開済み安定版は**1.3.0**でした。Controlソースの依存関係修正とGitHubリリースの互換スキル資産については、[メンテナンスリリースの案内](docs/ja/releases/v1.3.1.md)を参照してください。どちらもPythonのwheelとsdistには含まれません。 1.3.0では配信説明、ローカル・SSH経路プリセットと受信者アドレス帳、時間制限付きhandoff観察、信頼したSSH設定、ペアリングリンク、バージョン別通知設定を追加します。対応する組み合わせと制限は[リリース範囲と検証条件](docs/ja/releases/v1.3.0.md)を参照してください。パッケージ公開と本番環境への配備は別です。 diff --git a/README.ko.md b/README.ko.md index fb8ed1a..5c33593 100644 --- a/README.ko.md +++ b/README.ko.md @@ -33,7 +33,7 @@ session-peer 1.0.2를 사용해 실제 로컬 요청과 회신을 주고받았 ### 설치 Python 3.9 이상이 필요합니다. 기본 로컬·SSH CLI는 외부 Python 패키지에 의존하지 않습니다. -소스 버전: **1.3.0**. 2026-10-23 준비 시점의 마지막 확인 공개 안정판은 **1.2.1**이었습니다. +소스 버전: **1.3.1**. 2026-10-27 준비 시점의 마지막 확인 공개 안정판은 **1.3.0**이었습니다. Control 소스의 의존성 수정과 GitHub 릴리스의 호환 스킬 자산은 [유지보수 릴리스 안내](docs/ko/releases/v1.3.1.md)를 참고하십시오. 두 구성 요소는 Python wheel과 sdist에 포함되지 않습니다. 1.3.0에는 전달 설명, 로컬·SSH 경로 프리셋과 수신자 주소록, 유한 시간 handoff 관찰, 신뢰한 SSH 설정, 페어링 링크와 버전별 알림 설정이 추가됩니다. 지원 조합과 제한은 [릴리스 범위와 검증 조건](docs/ko/releases/v1.3.0.md)을 참고하십시오. 패키지 공개와 운영 배포는 별개입니다. diff --git a/README.md b/README.md index a1010fa..3cc47b9 100644 --- a/README.md +++ b/README.md @@ -33,7 +33,7 @@ in this ~22-second animation, not a screen recording; send success alone is not ### Install Python 3.9+. The core local/SSH CLI has no third-party Python dependencies. -Source version: **1.3.0**. At the 2026-10-23 preparation checkpoint, the last verified published stable release was **1.2.1**. +Source version: **1.3.1**. At the 2026-10-27 preparation checkpoint, the last verified published stable release was **1.3.0**. See the [maintenance release notes](docs/releases/v1.3.1.md) for the Control source dependency fix and the compatibility skill asset in the GitHub release. Neither component is included in the Python wheel or sdist. Version 1.3.0 adds delivery explanations, local/SSH route presets and recipient addresses, bounded handoff observation, trusted SSH configuration, pairing links and per-version notice preferences. See the [release scope and verification gates](docs/releases/v1.3.0.md) for supported combinations and limits. Package publication and operational deployment are separate. diff --git a/README.zh-CN.md b/README.zh-CN.md index 80b7449..1b6532e 100644 --- a/README.zh-CN.md +++ b/README.zh-CN.md @@ -33,7 +33,7 @@ session-peer使用各智能体自身的收件箱和队列；接收方智能体 ### 安装 需要Python 3.9或更高版本。核心本地与SSH CLI没有第三方Python依赖。 -源码版本：**1.3.0**。在2026-10-23的准备检查时，最后确认的已发布稳定版本为**1.2.1**。 +源码版本：**1.3.1**。在2026-10-27的准备检查时，最后确认的已发布稳定版本为**1.3.0**。Control源码依赖修复和GitHub发布中的兼容技能资产请参阅[维护版本说明](docs/zh-CN/releases/v1.3.1.md)。这两个组件均不包含在Python wheel或sdist中。 1.3.0增加传递说明、本地与SSH路由预设及收件人地址簿、有时限的handoff观察、受信任SSH配置、配对链接和按版本设置的通知偏好。支持的组合与限制请参阅[发布范围与验证条件](docs/zh-CN/releases/v1.3.0.md)。软件包发布与生产环境部署是两项独立操作。 diff --git a/RELEASING.ja.md b/RELEASING.ja.md index 76b9b97..993f86d 100644 --- a/RELEASING.ja.md +++ b/RELEASING.ja.md @@ -1,5 +1,9 @@ # session-peerのリリース +## v1.3.1 準備 + +公開済みv1.3.0を基準に2026-10-27に準備しました。[メンテナンス案内](docs/ja/releases/v1.3.1.md)はNode ControlのZod修正(#338/#339)、公開済み互換スキルv0.4.0(#334/#335)、ダウンロードバッジ(#336/#337)を扱います。この準備変更の前に依存関係の修正をマージしてください。最新レビューと保護されたmainのCIを通過した後、不変成果物の検証と必須のPyPI環境における人の承認が必要です。Pythonの公開は稼働中のControlサービスや別途管理するスキルを更新しません。以下の過去のリリース手順で以前のタグを再使用しないでください。 + ## v1.3.0 準備 公開済み1.2.1を基準に2026-10-23に準備しました。[リリースノート](docs/ja/releases/v1.3.0.md)はマージ済み機能PR6件と残る制限を説明します。統合ソースの基準はバージョン準備コミットより前の `a0e7af032fd372334782cc3ac3d97b21c71dd797` です。そのCI・CodeQLは成功していますが、最終準備レビュー、保護されたmainの正確なコミットでのCI、依存関係監査、生成された単独ファイル、パッケージとインストールの検証は引き続き必要です。スキルとプラグインのバージョンは独立しています。 diff --git a/RELEASING.ko.md b/RELEASING.ko.md index 99b9895..e8d62dc 100644 --- a/RELEASING.ko.md +++ b/RELEASING.ko.md @@ -1,5 +1,9 @@ # session-peer 릴리스 +## v1.3.1 준비 + +공개된 v1.3.0을 기준으로 2026-10-27에 준비했습니다. [유지보수 안내](docs/ko/releases/v1.3.1.md)는 Node Control의 Zod 수정(#338/#339), 공개된 호환 스킬 v0.4.0(#334/#335), 다운로드 배지(#336/#337)를 다룹니다. 이 준비 변경보다 의존성 수정을 먼저 병합하십시오. 최신 리뷰와 보호된 main의 CI를 통과한 뒤 불변 산출물 검증과 필수 PyPI 환경의 사람 승인을 거쳐야 합니다. Python 발행은 실행 중인 Control 서비스나 별도 관리 스킬을 갱신하지 않습니다. 아래의 과거 릴리스 절차에서 이전 태그를 재사용하지 마십시오. + ## v1.3.0 준비 공개된 1.2.1을 기준으로 2026-10-23에 준비했습니다. [릴리스 기록](docs/ko/releases/v1.3.0.md)은 병합된 기능 PR 6개와 남은 제한을 설명합니다. 통합 소스 기준은 버전 준비 커밋 이전의 `a0e7af032fd372334782cc3ac3d97b21c71dd797`입니다. 해당 CI·CodeQL은 통과했으며, 최종 준비 리뷰·보호된 main의 정확한 커밋 CI·의존성 감사·생성된 독립 실행 파일·패키지와 설치 검증은 여전히 필요합니다. 스킬과 플러그인 버전은 독립적입니다. diff --git a/RELEASING.md b/RELEASING.md index 157aae7..f6369e0 100644 --- a/RELEASING.md +++ b/RELEASING.md @@ -1,5 +1,9 @@ # Releasing session-peer +## v1.3.1 preparation + +Prepared on 2026-10-27 against published v1.3.0. The [maintenance notes](docs/releases/v1.3.1.md) cover the Node Control Zod fix (#338/#339), published compatibility skill v0.4.0 (#334/#335), and download badges (#336/#337). Merge the dependency fix before this preparation. Require current review and protected-main CI, then verified immutable artifacts and required human PyPI environment approval. Python publication does not update a running Control service or independently managed skills. Historical release procedures below must not reuse old tags. + ## v1.3.0 preparation Prepared on 2026-10-23 against published 1.2.1. The [release notes](docs/releases/v1.3.0.md) describe the six merged feature PRs and remaining boundaries. Integrated source base: `a0e7af032fd372334782cc3ac3d97b21c71dd797`, before the version-preparation commit. Its CI and CodeQL passed; final preparation review, exact protected-main CI, dependency audits, generated standalone and package/install checks remain required. Skill and plugin versions remain independent. diff --git a/RELEASING.zh-CN.md b/RELEASING.zh-CN.md index 05b5097..788adca 100644 --- a/RELEASING.zh-CN.md +++ b/RELEASING.zh-CN.md @@ -1,5 +1,9 @@ # 发布session-peer +## v1.3.1 准备 + +于2026-10-27基于已发布的v1.3.0准备。[维护说明](docs/zh-CN/releases/v1.3.1.md)涵盖Node Control的Zod修复(#338/#339)、已发布的兼容技能v0.4.0(#334/#335)及下载量徽章(#336/#337)。应先合并依赖修复，再合并此准备变更。须通过当前审查与受保护main的CI，随后验证不可变产物并取得PyPI环境所要求的人工批准。发布Python软件包不会更新正在运行的Control服务或独立管理的技能。请勿复用下方历史发布流程中的旧标签。 + ## v1.3.0 准备 于2026-10-23以已发布的1.2.1为基准准备。[发布说明](docs/zh-CN/releases/v1.3.0.md)介绍六个已合并功能PR及剩余限制。集成源码基准为版本准备提交之前的 `a0e7af032fd372334782cc3ac3d97b21c71dd797`。该基准的CI与CodeQL已通过；仍需最终准备审核、受保护main准确提交的CI、依赖审计、生成的独立文件、软件包及安装检查。技能与插件版本保持独立。 diff --git a/docs/README.md b/docs/README.md index 1aedc30..e07636f 100644 --- a/docs/README.md +++ b/docs/README.md @@ -24,6 +24,8 @@ installation paths. ## Development and history +- [v1.3.1 maintenance notes](releases/v1.3.1.md) cover the Control dependency fix, compatibility skill update and publication/deployment boundaries. + - [v1.3.0 release notes](releases/v1.3.0.md) describe the six merged features, supported combinations and release verification. - [v1.2.1 preparation notes](releases/v1.2.1.md) record the 2026-10-19 patch candidate for Orca Claude discovery, skill metadata reading and the compatibility skill copy; publication remains separate. diff --git a/docs/i18n-manifest.json b/docs/i18n-manifest.json index 5540c13..097fa99 100644 --- a/docs/i18n-manifest.json +++ b/docs/i18n-manifest.json @@ -7,6 +7,10 @@ "zh-CN" ], "sources": { + "README.md": "96b6b4b72f46059f9df4ebdcf79f0c7f86efd8f3a99e26a4029df7d0bbe532d7", + "RELEASING.md": "75e5f96df663070e67a40560dca15a5bdc1b0d41e240b4b28db75c919ffbcbd7", + "SECURITY.md": "8f018f6f98002312e143609b9734aeb971ca5217e146597c06b57b5645031046", + "docs/README.md": "edccfc92bd4e45850b5f5aa31f90cc4fc644e46a1d55529eedee0ca7a0b34c1b", "docs/agent-adapters.md": "bf185d3121c94829bb412071a25c4d943302e10a6b2e713111e653b8f8c3ea91", "docs/ai-assistant-guide.md": "9624ec96b92fb688fae3be3c94cb3564c77985091be451fbf1f056a1af9b9d9c", "docs/antigravity.md": "f2b5122a0ce6e6fb5bd4d8ed50ce2c8bd2dc9c98ec8ce328405cf7c2cd24229d", @@ -20,7 +24,6 @@ "docs/mcp.md": "a64010cdd63f2cde6a0052450bed2d05faa0f19c93c76143cb0d585d36f8ff62", "docs/multi-home-list.md": "f8d8e3adf727e4842ea7c4d45e8f6523b11d0513bf2509d4d1204645875e6489", "docs/paired-devices.md": "08c2643d08f769deb725c6123193c1ea9593c775afde84a158a41fe6e7d1be82", - "docs/README.md": "775fbf51947b2adca22df3fa5a3bcbec3262a22280b488ba3169997afe6ebbe5", "docs/relay-auth.md": "e6da5291ce6a9da31e79e66ceeff7e9fef7e95046359acbf04d708c96ffab62f", "docs/relay-development-plan.md": "0abf750b36275ea4e467a0020e560277f08689f2d574aed7674133705383b1ff", "docs/relay-edge-policy.md": "c1c7f7a1c4303943c78ca334dab4034f66c0c272e40c007d07c3da2a496155eb", @@ -50,12 +53,10 @@ "docs/releases/v1.2.0.md": "9a153493fb3d25306306a05f6c1f5672d7d7becfe008f371770ce2d13d7e9b38", "docs/releases/v1.2.1.md": "70a3026c2d874a6fd7addcaef840ecfa84bf4f33a0165605217379acffa4fddb", "docs/releases/v1.3.0.md": "a422901b83c85cfb48ac0ad2f99dbc82dca46c4929a3016acd15010e4a18188b", + "docs/releases/v1.3.1.md": "1600b3f6e708ded1cd5d0cad7b5f2d78244e0e4b01d122d727f2a692fccaf652", "docs/validation/69-rc.md": "e490c6a9ad0fec9108b91c74922cedac7ddf214ed405f8f5523da22f48a4b222", "docs/validation/85-antigravity.md": "f89b175191cd98ab03d4029b487065133814b3c8dd8de8cd0a5cc367e2579e4f", "docs/wake.md": "cde135da2ea7be21c815bb265e694f737dbe467d8e76bb82eb118e3b86e29d22", - "plugins/session-peer/README.md": "a4eeae54caac9ad824d740f7f319561f060bc9c2bbbbf7def2bdd8e36dbcd1c6", - "README.md": "4ccfb9f1a617fcc04de5bbb3ee2118ec3fc1eee41c6e902071f97c3ad645c590", - "RELEASING.md": "9e99dd741b4d221064664176b9c09f972ae4d82379f0ac4479853832dacad042", - "SECURITY.md": "8f018f6f98002312e143609b9734aeb971ca5217e146597c06b57b5645031046" + "plugins/session-peer/README.md": "a4eeae54caac9ad824d740f7f319561f060bc9c2bbbbf7def2bdd8e36dbcd1c6" } } diff --git a/docs/ja/README.md b/docs/ja/README.md index 96e61a1..4c392ec 100644 --- a/docs/ja/README.md +++ b/docs/ja/README.md @@ -23,6 +23,8 @@ ## 開発と履歴 +- [v1.3.1メンテナンス案内](releases/v1.3.1.md)はControlの依存関係修正、互換スキル更新、公開と運用配備の範囲を説明します。 + - [v1.3.0リリースノート](releases/v1.3.0.md)は、マージ済みの6機能、対応する組み合わせ、リリース検証を説明します。 - [v1.2.1準備記録](releases/v1.2.1.md)は、Orca Claude検索・スキルメタデータ読み取り・互換スキルコピーの2026-10-19パッチ候補を記録し、公開は別です。 diff --git a/docs/ja/releases/v1.3.1.md b/docs/ja/releases/v1.3.1.md new file mode 100644 index 0000000..896f3c3 --- /dev/null +++ b/docs/ja/releases/v1.3.1.md @@ -0,0 +1,13 @@ +# v1.3.1 メンテナンスリリース + +公開済みv1.3.0を基準に2026-10-27に準備しました。本書はソースの変更範囲を説明します。実際の公開記録は[GitHub Releases](https://github.com/abruption/session-peer/releases)と[PyPI](https://pypi.org/project/session-peer/)で確認してください。 + +- #338 / #339：Node Controlの間接依存であるZodを4.6.5から4.6.7へ更新します。[GHSA-mrhx-c7xc-m3w5](https://github.com/advisories/GHSA-mrhx-c7xc-m3w5)の対象は4.6.6未満です。直接依存と監査方針は変更しません。固定された依存関係の警告への対応であり、稼働中のエンドポイントで悪用可能かどうかは評価・再現していません。 +- #334 / #335：別のスキルリポジトリのソース`176dc0dab619f074dbfc94de7e01f9a02a052f79`から、互換スキルv0.4.0をバイト単位で同一のまま含めます。SHA-256は`debedd472e3b0c0c6844fb63f7fb2f17cb6c6cc8c3e981e9afd2531a35327af7`です。最小ランタイムは0.9.1、文書のCLI機能の基準は1.3.0、受信側の`codexBin`の最小バージョンは1.0.1です。単体版リリースのスキル資産は、別の管理ツールで導入したスキルを更新しません。 +- #336 / #337：4言語のREADMEにPyPIの累計ダウンロード数を表示します。 + +Python CLIの動作、依存関係、対応プラットフォーム、実験的handoffの制限は、バージョン識別子を除いてv1.3.0と同じです。Node ControlのソースはPythonのwheelとsdistに含まれません。Pythonパッケージの公開やインストールだけでは、稼働中のControlサービスに修正は適用されません。Nodeの修正を適用するには、別途承認されたControlのソース・依存関係の更新と再起動が必要です。 + +依存関係の修正のローカル検証では、新規npmインストール、型検査・ビルド、Controlテスト123件、Node/Pythonのループバック統合テスト11件が成功し、ランタイム・全依存関係のnpm監査で報告された脆弱性は0件でした。これは試験環境の結果であり、実際のOAuth、ネイティブエージェント、稼働サービスの検証ではありません。公開前に最終PRレビュー、保護されたmainのCI、依存関係監査、再現可能な成果物と新規インストールの検証を完了してください。 + +新しいv1.3.1タグと検証済みの不変資産を使用します。既存のv1.3.0資産は維持します。ネイティブ世代識別、handoff、保存先、起動時の受け入れ条件(#180/#181/#268/#304/#306/#307)とSide Session・steeringの研究は別途扱います。配信結果がunknownの場合、自動再送は許可されません。 diff --git a/docs/ko/README.md b/docs/ko/README.md index c9c3232..171fa7d 100644 --- a/docs/ko/README.md +++ b/docs/ko/README.md @@ -23,6 +23,8 @@ ## 개발과 이력 +- [v1.3.1 유지보수 안내](releases/v1.3.1.md)는 Control 의존성 수정, 호환 스킬 갱신과 발행·운영 배포의 범위를 설명합니다. + - [v1.3.0 릴리스 노트](releases/v1.3.0.md)는 병합된 기능 6개, 지원 조합과 릴리스 검증을 설명합니다. - [v1.2.1 준비 기록](releases/v1.2.1.md)은 Orca Claude 검색·스킬 메타데이터 판독·호환 스킬 사본을 위한 2026-10-19 패치 후보를 설명하며 공개는 별도입니다. diff --git a/docs/ko/releases/v1.3.1.md b/docs/ko/releases/v1.3.1.md new file mode 100644 index 0000000..4445ab2 --- /dev/null +++ b/docs/ko/releases/v1.3.1.md @@ -0,0 +1,13 @@ +# v1.3.1 유지보수 릴리스 + +공개된 v1.3.0을 기준으로 2026-10-27에 준비했습니다. 이 문서는 소스 변경 범위를 설명합니다. 실제 공개 기록은 [GitHub Releases](https://github.com/abruption/session-peer/releases)와 [PyPI](https://pypi.org/project/session-peer/)에서 확인하십시오. + +- #338 / #339: Node Control의 간접 의존성인 Zod를 4.6.5에서 4.6.7로 갱신합니다. [GHSA-mrhx-c7xc-m3w5](https://github.com/advisories/GHSA-mrhx-c7xc-m3w5)는 4.6.6 미만 버전에 해당합니다. 직접 의존성과 감사 정책은 그대로입니다. 고정된 의존성의 보안 경고에 대응하는 수정이며, 운영 중인 엔드포인트에서 악용 가능한지는 평가하거나 재현하지 않았습니다. +- #334 / #335: 별도 스킬 저장소의 소스 `176dc0dab619f074dbfc94de7e01f9a02a052f79`에서 가져온 호환 스킬 v0.4.0을 바이트 변경 없이 포함합니다. SHA-256은 `debedd472e3b0c0c6844fb63f7fb2f17cb6c6cc8c3e981e9afd2531a35327af7`입니다. 최소 런타임은 0.9.1, 문서의 CLI 기능 기준은 1.3.0이며, 수신 측 `codexBin`의 최소 버전은 여전히 1.0.1입니다. 독립 실행형 릴리스의 스킬 자산은 별도로 관리되는 스킬 설치본을 갱신하지 않습니다. +- #336 / #337: 네 언어 README에 PyPI 누적 다운로드 수를 표시합니다. + +Python CLI의 동작·의존성·지원 플랫폼·실험적 handoff 제한은 버전 식별자를 제외하면 v1.3.0과 같습니다. Node Control 소스는 Python wheel과 sdist에 포함되지 않습니다. Python 패키지를 발행하거나 설치해도 실행 중인 Control 서비스에는 수정이 적용되지 않습니다. Node 수정 적용에는 별도로 승인된 Control 소스·의존성 갱신과 재시작이 필요합니다. + +의존성 수정의 로컬 검증: 새 npm 설치, 타입 검사·빌드, Control 테스트 123개, Node/Python 루프백 연동 테스트 11개가 통과했고 런타임·전체 npm 감사에서 보고된 취약점은 0건입니다. 이는 시험 환경의 결과이며 실제 OAuth·네이티브 에이전트·운영 서비스 검증은 아닙니다. 발행 전에 최종 PR 리뷰, 보호된 main의 CI, 의존성 감사, 재현 가능한 산출물과 신규 설치 검증을 완료해야 합니다. + +새 v1.3.1 태그와 검증된 불변 자산을 사용합니다. 기존 v1.3.0 자산은 유지합니다. 네이티브 세대 식별·handoff·저장소·시작 시점 수락 조건(#180/#181/#268/#304/#306/#307)과 Side Session·steering 연구는 별도 과제입니다. 전송 결과가 unknown이면 자동 재전송을 허용하지 않습니다. diff --git a/docs/releases/v1.3.1.md b/docs/releases/v1.3.1.md new file mode 100644 index 0000000..29093e6 --- /dev/null +++ b/docs/releases/v1.3.1.md @@ -0,0 +1,13 @@ +# v1.3.1 maintenance release + +Prepared on 2026-10-27 against published v1.3.0. These notes describe the source scope; check [GitHub Releases](https://github.com/abruption/session-peer/releases) and [PyPI](https://pypi.org/project/session-peer/) for publication records. + +- #338 / #339: update Node Control's transitive Zod dependency from 4.6.5 to 4.6.7 for [GHSA-mrhx-c7xc-m3w5](https://github.com/advisories/GHSA-mrhx-c7xc-m3w5), which affects versions below 4.6.6. Direct dependencies and audit policy are unchanged. This addresses the locked dependency advisory; exploitability against deployed endpoints was not assessed or reproduced. +- #334 / #335: include the byte-identical compatibility skill v0.4.0 from companion source `176dc0dab619f074dbfc94de7e01f9a02a052f79`, SHA-256 `debedd472e3b0c0c6844fb63f7fb2f17cb6c6cc8c3e981e9afd2531a35327af7`. Minimum runtime remains 0.9.1; documented CLI coverage is 1.3.0; receiver `codexBin` still requires 1.0.1. The standalone release's skill asset does not update independently managed skill installations. +- #336 / #337: show cumulative PyPI download counts in the four README variants. + +Python CLI behavior, dependencies, supported platforms and experimental handoff limits remain unchanged from v1.3.0 apart from the version identifier. Node Control source is outside the Python wheel and sdist; publishing or installing the Python package does not remediate a running Control service. Applying the Node fix requires a separately authorized Control source/dependency update and restart. + +Local verification of the dependency fix: clean npm installation, typecheck/build, 123 Control tests, 11 Node/Python loopback integration tests, and runtime/full npm audits with zero reported vulnerabilities. These are fixture results, not live OAuth, native-agent or deployed-service acceptance. Require final PR review, protected-main CI, dependency audits, reproducible artifacts and fresh installation checks before publishing. + +Use a new v1.3.1 tag and verified immutable assets. Existing v1.3.0 assets remain unchanged. Native generation, handoff, storage and startup acceptance (#180/#181/#268/#304/#306/#307) and Side Session/steering research remain separate. Unknown delivery outcomes never authorize automatic resend. diff --git a/docs/zh-CN/README.md b/docs/zh-CN/README.md index 8c753b3..f7fc002 100644 --- a/docs/zh-CN/README.md +++ b/docs/zh-CN/README.md @@ -22,6 +22,8 @@ ## 开发与历史 +- [v1.3.1维护说明](releases/v1.3.1.md)介绍Control依赖修复、兼容技能更新以及发布与运行环境部署的界限。 + - [v1.3.0发行说明](releases/v1.3.0.md)介绍已合并的六项功能、支持的组合和发行验证。 - [v1.2.1准备记录](releases/v1.2.1.md)说明用于Orca Claude搜索、技能元数据读取及兼容技能副本的2026-10-19补丁候选；发布仍是独立步骤。 diff --git a/docs/zh-CN/releases/v1.3.1.md b/docs/zh-CN/releases/v1.3.1.md new file mode 100644 index 0000000..3dcc8b0 --- /dev/null +++ b/docs/zh-CN/releases/v1.3.1.md @@ -0,0 +1,13 @@ +# v1.3.1 维护版本 + +于2026-10-27基于已发布的v1.3.0准备。本文说明源码变更范围；实际发布记录请查看[GitHub Releases](https://github.com/abruption/session-peer/releases)和[PyPI](https://pypi.org/project/session-peer/)。 + +- #338 / #339：将Node Control的间接依赖Zod从4.6.5更新至4.6.7。[GHSA-mrhx-c7xc-m3w5](https://github.com/advisories/GHSA-mrhx-c7xc-m3w5)影响低于4.6.6的版本。直接依赖和审计策略保持不变。此次修复处理锁定依赖的安全公告；未评估或复现已部署端点中的可利用性。 +- #334 / #335：从独立技能仓库的源码`176dc0dab619f074dbfc94de7e01f9a02a052f79`纳入字节完全一致的兼容技能v0.4.0，SHA-256为`debedd472e3b0c0c6844fb63f7fb2f17cb6c6cc8c3e981e9afd2531a35327af7`。最低运行时为0.9.1，文档的CLI功能覆盖基准为1.3.0，接收端`codexBin`的最低版本仍为1.0.1。独立脚本版本中的技能资产不会更新由其他管理工具安装的技能。 +- #336 / #337：在四种语言的README中显示PyPI累计下载量。 + +除版本标识外，Python CLI的行为、依赖、支持平台和实验性handoff限制均与v1.3.0相同。Node Control源码不包含在Python wheel和sdist中。发布或安装Python软件包不会修复正在运行的Control服务；应用Node修复需要另行批准的Control源码和依赖更新及服务重启。 + +依赖修复的本地验证包括：全新npm安装、类型检查和构建、123项Control测试、11项Node/Python回环集成测试，均已通过；运行时及全部npm依赖审计报告的漏洞均为0。这些是测试环境结果，不代表实际OAuth、原生代理或已部署服务的验收。发布前仍需完成最终PR审查、受保护main的CI、依赖审计、可复现产物及全新安装验证。 + +使用新的v1.3.1标签和经过验证的不可变资产，保留现有v1.3.0资产。原生代次标识、handoff、存储及启动验收条件(#180/#181/#268/#304/#306/#307)和Side Session、steering研究仍为独立工作。投递结果为unknown时，不允许自动重发。 diff --git a/session_peer.py b/session_peer.py index 758efa3..44460f0 100644 --- a/session_peer.py +++ b/session_peer.py @@ -45,7 +45,7 @@ except ImportError: # Native Windows uses its own read-only writer inspection. fcntl = None -__version__ = "1.3.0" +__version__ = "1.3.1" GITHUB_REPO = "abruption/session-peer" # Claude Code refuses a same-machine message once its serialized form passes diff --git a/session_peer_core/common.py b/session_peer_core/common.py index c026f59..1368fa1 100644 --- a/session_peer_core/common.py +++ b/session_peer_core/common.py @@ -45,7 +45,7 @@ except ImportError: # Native Windows uses its own read-only writer inspection. fcntl = None -__version__ = "1.3.0" +__version__ = "1.3.1" GITHUB_REPO = "abruption/session-peer" # Claude Code refuses a same-machine message once its serialized form passes diff --git a/tests/docs/test_docs_i18n.py b/tests/docs/test_docs_i18n.py index 7a6f2e6..8d06d0e 100644 --- a/tests/docs/test_docs_i18n.py +++ b/tests/docs/test_docs_i18n.py @@ -64,7 +64,7 @@ class DocumentationTranslationsTest(unittest.TestCase): def test_every_canonical_document_has_each_translation(self): sources = canonical_documents() - self.assertEqual(50, len(sources), "Update the translation manifest for new canonical docs") + self.assertEqual(51, len(sources), "Update the translation manifest for new canonical docs") canonical_docs = { path.relative_to(ROOT / "docs") for path in (ROOT / "docs").rglob("*.md") diff --git a/tests/docs/test_stable_candidate.py b/tests/docs/test_stable_candidate.py index cd9686a..7bfd4ad 100644 --- a/tests/docs/test_stable_candidate.py +++ b/tests/docs/test_stable_candidate.py @@ -255,8 +255,8 @@ def test_source_version_keeps_experimental_acceptance_gates(self): self.assertIn(marker, english) def test_package_and_generated_core_version_agree(self): - self.assertEqual(session_peer.__version__, "1.3.0") - self.assertIn('__version__ = "1.3.0"', + self.assertEqual(session_peer.__version__, "1.3.1") + self.assertIn('__version__ = "1.3.1"', (ROOT / "session_peer_core/common.py").read_text(encoding="utf-8")) def test_current_readmes_and_runbooks_match_source_version(self): @@ -264,7 +264,7 @@ def test_current_readmes_and_runbooks_match_source_version(self): for stem in ("README", "RELEASING"): with self.subTest(stem=stem, suffix=suffix): text = (ROOT / (stem + suffix + ".md")).read_text(encoding="utf-8") - self.assertIn("1.3.0", text) + self.assertIn("1.3.1", text) self.assertNotIn("1.0.0rc4", text) if stem == "RELEASING": self.assertIn("--draft=false --prerelease=false --latest", text) @@ -287,17 +287,17 @@ def test_release_notes_keep_scope_and_limits_visible(self): def test_stable_release_keeps_operational_deployment_separate(self): profiles = ( - ("", "Source version: **1.3.0**.", - "At the 2026-10-23 preparation checkpoint, the last verified published stable release was **1.2.1**.", + ("", "Source version: **1.3.1**.", + "At the 2026-10-27 preparation checkpoint, the last verified published stable release was **1.3.0**.", "Development candidate 1.2.1 is unpublished"), - (".ko", "소스 버전: **1.3.0**.", - "2026-10-23 준비 시점의 마지막 확인 공개 안정판은 **1.2.1**이었습니다.", + (".ko", "소스 버전: **1.3.1**.", + "2026-10-27 준비 시점의 마지막 확인 공개 안정판은 **1.3.0**이었습니다.", "개발 후보 1.2.1은 미공개입니다"), - (".ja", "ソースバージョン：**1.3.0**。", - "2026-10-23の準備時点で、最後に確認した公開済み安定版は**1.2.1**でした。", + (".ja", "ソースバージョン：**1.3.1**。", + "2026-10-27の準備時点で、最後に確認した公開済み安定版は**1.3.0**でした。", "開発候補1.2.1は未公開です"), - (".zh-CN", "源码版本：**1.3.0**。", - "在2026-10-23的准备检查时，最后确认的已发布稳定版本为**1.2.1**。", + (".zh-CN", "源码版本：**1.3.1**。", + "在2026-10-27的准备检查时，最后确认的已发布稳定版本为**1.3.0**。", "开发候选版本1.2.1尚未发布"), ) for suffix, source_version, dated_checkpoint, stale_unpublished in profiles: