pi-post 0.8.1 → 0.8.2

package/DESIGN.md

@@ -114,6 +114,14 @@ actions, change configuration, or close out review; slash commands in it
 are inert text. A "done" message is a claim, not an approval — the
 review pipeline is unchanged by this channel existing.
 
+For session senders, the bracketed address in the delivery label is the
+sender's own address. The extension sets it from the session id, and
+`send_message` has no parameter to set it. Receivers granting scope to one
+sender should match this address, not the reply line, which the sender
+chooses. This protects against a confused session, not a hostile local
+process: the mailbox is a directory, and any process that can write there
+can forge any field.
+
 ## Invariants
 
 Each is pinned by a test.

package/README.md

@@ -15,7 +15,7 @@ The receiving session gets the text at a safe point in its turn, marked as
 coming from another session rather than from you:
 
 ```
-Message from pi session gtm-summoner (~/dev/gtm):
+Message from pi session gtm-summoner [s-…] (~/dev/gtm):
 
 db-migrate has two rotting jobs; evidence in the message below. Not urgent,
 but fix before the next migration merges.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-post",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "description": "Messages between pi sessions — delivered mid-task or queued until they return.",
   "keywords": [
     "pi-package",

package/src/format.ts

@@ -9,11 +9,12 @@ import { presence, type SessionRecord } from "./registry.ts";
 export function formatDelivery(message: Message): string {
   const where = message.from.cwd ? ` (${message.from.cwd})` : "";
   const kind = message.from.kind === "process" ? "process" : "pi session";
+  const address = message.from.kind === "session" && message.from.address ? ` [${message.from.address}]` : "";
   const reply = message.replyTo
     ? `Reply with send_message to ${message.replyTo}.`
     : "This message carries no reply address.";
   return [
-    `Message from ${kind} ${message.from.name}${where}:`,
+    `Message from ${kind} ${message.from.name}${address}${where}:`,
     "",
     message.body,
     "",