release: session-migrate 0.11.0

CHANGELOG.md

@@ -6,6 +6,24 @@ here. Native format compatibility is documented separately in
 
 ## Unreleased
 
+## 0.11.0 - 2026-09-11
+
+- Read root Codex rollouts written with `history_mode: "paginated"` by using
+  canonical completed user and agent turn items while keeping provider
+  envelopes out of the portable transcript.
+- Reject paginated history bases, subagent projections, mixed or conflicting
+  history modes, unknown modes, and non-contiguous ordinals instead of
+  guessing at a resumable conversation.
+- Add a sanitized real-structure Codex 0.153.4 paginated fixture and regressions
+  across all 18 target writers, including checks that synthetic provider
+  context cannot leak into migrated sessions.
+- Promote the 18-harness native corpus to the default release gate: every
+  native source is parsed and checked across all 324 ordered routes, with
+  pinned credential-free client continuations and explicit modality evidence.
+- Harden corpus capture and sanitization for Claude Code, Codex, Pi, Oh My Pi,
+  OpenCode, Copilot, Antigravity, Cursor, Mistral Vibe, Muse, Qwen Code, Kimi
+  Code, Grok, Kilo Code, OpenHands, Hermes Agent, MastraCode, and Devin CLI.
+
 ## 0.10.0 - 2026-08-31
 
 - Add Hermes Agent 0.20.6, MastraCode 0.37.1, and Devin CLI 3000.6.7 as

docs/cli-reference.md

@@ -1,6 +1,6 @@
 # CLI reference
 
-This page documents `session-migrate` 0.10.0. `smigrate` is an exact shorthand
+This page documents `session-migrate` 0.11.0. `smigrate` is an exact shorthand
 for the same executable.
 
 ## Commands

docs/specification.md

@@ -1,6 +1,6 @@
 # Session migration specification
 
-This is the user-facing contract for `session-migrate` 0.10.0.
+This is the user-facing contract for `session-migrate` 0.11.0.
 
 ## Scope
 

docs/validation-report.md

@@ -1312,6 +1312,23 @@ unsupported classification. All nine audited native roots were parsed and
 converted through each of the eighteen target byte validators: 162/162 local,
 content-safe conversions passed without writing artifacts or invoking a model.
 
+### v0.11.0 release gates
+
+The clean 2026-09-11 release candidate passed Ruff lint and formatting, all
+**1,523 default tests**, and the wheel/source build. The 51 reported skips are
+the documented opt-in live-account or separately installed exact-binary gates;
+the default corpus oracle still executed all **324/324 ordered routes**. Twine
+accepted both distribution metadata files, and a fresh isolated Python 3.11
+environment installed the wheel without an index. Both installed entry points
+reported version 0.11.0.
+
+The website passed ESLint, its production build, and the rendered-page test;
+an audit limited to shipped production dependencies reported zero
+vulnerabilities. A tracked-tree scan found no credential patterns, private
+home paths, or account identifiers. The preceding merged code tree passed all
+22 GitHub Actions jobs on Python 3.11/3.12/3.13, the website, and every pinned
+native client before the release metadata was prepared.
+
 ## Known boundaries
 
 - Complete root Codex paginated history is supported from canonical completed

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "session-migrate"
-version = "0.10.0"
+version = "0.11.0"
 description = "Migrate native coding-agent sessions across eighteen terminal harnesses"
 readme = "README.md"
 requires-python = ">=3.11"

src/session_migrate/__init__.py

@@ -1,3 +1,3 @@
 """Native coding-agent session discovery and migration."""
 
-__version__ = "0.10.0"
+__version__ = "0.11.0"

tests/test_cli.py

@@ -12,7 +12,7 @@
 
 
 def test_parser_exposes_version() -> None:
-    assert __version__ == "0.10.0"
+    assert __version__ == "0.11.0"
     assert build_parser().prog == "session-migrate"
 
 

website/package.json

@@ -1,6 +1,6 @@
 {
   "name": "session-migrate-website",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "private": true,
   "engines": {
     "node": ">=22.13.0"