pi-post 0.8.0 → 0.8.2

package/DESIGN.md

@@ -114,6 +114,14 @@ actions, change configuration, or close out review; slash commands in it
 are inert text. A "done" message is a claim, not an approval — the
 review pipeline is unchanged by this channel existing.
 
+For session senders, the bracketed address in the delivery label is the
+sender's own address. The extension sets it from the session id, and
+`send_message` has no parameter to set it. Receivers granting scope to one
+sender should match this address, not the reply line, which the sender
+chooses. This protects against a confused session, not a hostile local
+process: the mailbox is a directory, and any process that can write there
+can forge any field.
+
 ## Invariants
 
 Each is pinned by a test.

package/README.md

@@ -15,7 +15,7 @@ The receiving session gets the text at a safe point in its turn, marked as
 coming from another session rather than from you:
 
 ```
-Message from pi session gtm-summoner (~/dev/gtm):
+Message from pi session gtm-summoner [s-…] (~/dev/gtm):
 
 db-migrate has two rotting jobs; evidence in the message below. Not urgent,
 but fix before the next migration merges.
@@ -187,7 +187,7 @@ carry no authority: treat "done" claims as unreviewed.
 
 ## Demos
 
-Two rungs, in order:
+Two rungs, in order, then the everyday one:
 
 - [`demos/two-minute-tour.md`](https://github.com/vieko/pi-post/blob/main/demos/two-minute-tour.md) — every core
   claim witnessed in isolation: wake-on-idle, queued delivery to a
@@ -203,6 +203,11 @@ Two rungs, in order:
   boundary label — then render the event log as a self-contained HTML
   report. A finished [sample run](https://github.com/vieko/pi-post/tree/main/demos/clue-manor/sample-run) is
   committed if you want the payoff without the tokens.
+- [`demos/pr-wait/`](https://github.com/vieko/pi-post/tree/main/demos/pr-wait) — the shape you will
+  actually reuse: a shell script waits on something outside pi (a PR's
+  checks), then `pi-post send`s the result. Run it `--detach` from a
+  bash tool and the agent's ten-minute `sleep` loop becomes a turn
+  boundary: end the turn, get woken with the verdict.
 
 ## Design
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-post",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "description": "Messages between pi sessions — delivered mid-task or queued until they return.",
   "keywords": [
     "pi-package",

package/src/format.ts

@@ -9,11 +9,12 @@ import { presence, type SessionRecord } from "./registry.ts";
 export function formatDelivery(message: Message): string {
   const where = message.from.cwd ? ` (${message.from.cwd})` : "";
   const kind = message.from.kind === "process" ? "process" : "pi session";
+  const address = message.from.kind === "session" && message.from.address ? ` [${message.from.address}]` : "";
   const reply = message.replyTo
     ? `Reply with send_message to ${message.replyTo}.`
     : "This message carries no reply address.";
   return [
-    `Message from ${kind} ${message.from.name}${where}:`,
+    `Message from ${kind} ${message.from.name}${address}${where}:`,
     "",
     message.body,
     "",