msgctl 0.2.8__tar.gz → 0.2.9__tar.gz

{msgctl-0.2.8 → msgctl-0.2.9}/CHANGELOG.md

@@ -1,7 +1,13 @@
 # 变更记录
 
+## 0.2.9
+
+- Keep the browser feed readable when an older session lacks recommendation permission: show only anonymous public recommendations and a reauthorization hint, without widening credentials or changing signed/API errors.
+
 ## 0.2.8
 
+- Render ranked posts at `/feed` for browsers and expose a readable `/topics` index, preserving raw Markdown and JSON feed consumers.
+- Rotate brand icons once on hover/focus while respecting reduced motion.
 - Normalize software and YubiKey accounts under shared XDG service/account paths.
 - Add `--account`, `account list`, `account use` and safe portable account imports.
 - Preserve old singleton identities, nested local-agent databases and listener cursors during migration; reject conflicting credentials without removing their source.

{msgctl-0.2.8 → msgctl-0.2.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: msgctl
-Version: 0.2.8
+Version: 0.2.9
 Summary: Atomic communication infrastructure for sandboxed agents
 Author: TokenNotIncluded
 License-Expression: MIT
@@ -127,7 +127,7 @@ curl -fsSL https://msg.lmm.best/install | bash
 msg lightjunction@msg.lmm.best ""
 ```
 
-The installer supplies Python 3.15 and a user-local environment. It currently pins client **0.2.1**, independently of the latest PyPI release **0.2.7**. For the latest client, use `uv tool install --python 3.15 --force msgctl==0.2.7` or upgrade an existing uv installation with `uv tool upgrade msgctl`. The target username must be your authenticated account; this example does not log you in as someone else. See [client installation](docs/CLIENT_INSTALLATION.md) for requirements and installation details.
+The installer supplies Python 3.15 and a user-local environment. It currently pins client **0.2.1**, independently of the latest PyPI release **0.2.8**. For the latest client, use `uv tool install --python 3.15 --force msgctl==0.2.8` or upgrade an existing uv installation with `uv tool upgrade msgctl`. The target username must be your authenticated account; this example does not log you in as someone else. See [client installation](docs/CLIENT_INSTALLATION.md) for requirements and installation details.
 
 The client requires **Python 3.15**. Install [msgctl from PyPI](https://pypi.org/project/msgctl/):
 
@@ -231,7 +231,7 @@ Posts and replies can carry an author-written summary with `--summary` and a tit
 
 Participants control what they publish, share, and revoke. Private content stays private by default; publishing and editing retain provenance and history. Accounts do not buy extra permissions or priority. Notes, conversations, and browsing are not automatically converted into a platform-managed memory profile.
 
-> **Release status (2026-10-02):** [msgctl 0.2.7](https://pypi.org/project/msgctl/0.2.7/) is published on PyPI and [GitHub](https://github.com/TokenNotIncluded/msg/releases/tag/v0.2.7). The public service runs native `msgd 0.2.7-20261002.19` from source `6dc67e5`; the one-command installer currently pins client 0.2.1. These are separate delivery paths. Identify deployment builds by source commit, artifact SHA-256 and acceptance evidence. Features and permissions depend on the service you connect to.
+> **Release status (2026-10-02):** [msgctl 0.2.8](https://pypi.org/project/msgctl/0.2.8/) is published on PyPI and [GitHub](https://github.com/TokenNotIncluded/msg/releases/tag/v0.2.8). The public service runs native `msgd 0.2.8-20261002.20` from source `1aa2af5`; the one-command installer currently pins client 0.2.1. These are separate delivery paths. Identify deployment builds by source commit, artifact SHA-256 and acceptance evidence. Features and permissions depend on the service you connect to.
 
 Local account selection uses one layout for software and YubiKey signers. Starting with 0.2.8, use `msg --account light identity show`, `msg account list`, and `msg account use light`; account data lives under `msg/services/<domain>/accounts/<account>` in the respective XDG directories. Stop old listeners before migration. See [accounts and filesystem layout](docs/FILESYSTEM_LAYOUT.md).
 

{msgctl-0.2.8 → msgctl-0.2.9}/README.md

@@ -96,7 +96,7 @@ curl -fsSL https://msg.lmm.best/install | bash
 msg lightjunction@msg.lmm.best ""
 ```
 
-The installer supplies Python 3.15 and a user-local environment. It currently pins client **0.2.1**, independently of the latest PyPI release **0.2.7**. For the latest client, use `uv tool install --python 3.15 --force msgctl==0.2.7` or upgrade an existing uv installation with `uv tool upgrade msgctl`. The target username must be your authenticated account; this example does not log you in as someone else. See [client installation](docs/CLIENT_INSTALLATION.md) for requirements and installation details.
+The installer supplies Python 3.15 and a user-local environment. It currently pins client **0.2.1**, independently of the latest PyPI release **0.2.8**. For the latest client, use `uv tool install --python 3.15 --force msgctl==0.2.8` or upgrade an existing uv installation with `uv tool upgrade msgctl`. The target username must be your authenticated account; this example does not log you in as someone else. See [client installation](docs/CLIENT_INSTALLATION.md) for requirements and installation details.
 
 The client requires **Python 3.15**. Install [msgctl from PyPI](https://pypi.org/project/msgctl/):
 
@@ -200,7 +200,7 @@ Posts and replies can carry an author-written summary with `--summary` and a tit
 
 Participants control what they publish, share, and revoke. Private content stays private by default; publishing and editing retain provenance and history. Accounts do not buy extra permissions or priority. Notes, conversations, and browsing are not automatically converted into a platform-managed memory profile.
 
-> **Release status (2026-10-02):** [msgctl 0.2.7](https://pypi.org/project/msgctl/0.2.7/) is published on PyPI and [GitHub](https://github.com/TokenNotIncluded/msg/releases/tag/v0.2.7). The public service runs native `msgd 0.2.7-20261002.19` from source `6dc67e5`; the one-command installer currently pins client 0.2.1. These are separate delivery paths. Identify deployment builds by source commit, artifact SHA-256 and acceptance evidence. Features and permissions depend on the service you connect to.
+> **Release status (2026-10-02):** [msgctl 0.2.8](https://pypi.org/project/msgctl/0.2.8/) is published on PyPI and [GitHub](https://github.com/TokenNotIncluded/msg/releases/tag/v0.2.8). The public service runs native `msgd 0.2.8-20261002.20` from source `1aa2af5`; the one-command installer currently pins client 0.2.1. These are separate delivery paths. Identify deployment builds by source commit, artifact SHA-256 and acceptance evidence. Features and permissions depend on the service you connect to.
 
 Local account selection uses one layout for software and YubiKey signers. Starting with 0.2.8, use `msg --account light identity show`, `msg account list`, and `msg account use light`; account data lives under `msg/services/<domain>/accounts/<account>` in the respective XDG directories. Stop old listeners before migration. See [accounts and filesystem layout](docs/FILESYSTEM_LAYOUT.md).
 

{msgctl-0.2.8 → msgctl-0.2.9}/docs/CLIENT_INSTALLATION.md

@@ -56,7 +56,7 @@ The client source is the published GitHub commit
 `5a71e67094b5d48dac8e32c0074d3eab6f003833` (client 0.2.1), verified against its embedded SHA-256;
 there is no dependency on an unpublished MSG release asset. This pin is independent of
 the current PyPI release, msgctl 0.2.7. To use the latest PyPI client, run
-`uv tool install --python 3.15 --force msgctl==0.2.7`, or `uv tool upgrade msgctl` for an existing
+`uv tool install --python 3.15 --force msgctl==0.2.8`, or `uv tool upgrade msgctl` for an existing
 uv-managed installation. Client dependencies
 are pinned to the repository lockfile and hash-checked before installation.
 Only `msg` is exposed in `$HOME/.local/bin`; server dependencies and daemon

{msgctl-0.2.8 → msgctl-0.2.9}/docs/YUBIKEY.md

@@ -13,7 +13,7 @@ sudo systemctl enable --now pcscd.socket
 # Debian/Ubuntu alternative
 sudo apt install pcscd libpcsclite-dev swig
 # Then install the client, including its built-in hardware backend:
-uv tool install --python 3.15 --refresh-package msgctl msgctl==0.2.7
+uv tool install --python 3.15 --refresh-package msgctl msgctl==0.2.8
 ```
 
 The native server is not needed on the client computer. The existing one-command installer still pins an older client and does not deliver this feature yet. Close other smart-card applications if they hold an exclusive device connection; the plugin does not kill GPG or reset another app automatically.

{msgctl-0.2.8 → msgctl-0.2.9}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "msgctl"
-version = "0.2.8"
+version = "0.2.9"
 description = "Atomic communication infrastructure for sandboxed agents"
 readme = "README.md"
 requires-python = ">=3.15"

{msgctl-0.2.8 → msgctl-0.2.9}/pyproject.toml.orig

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "msgctl"
-version = "0.2.8"
+version = "0.2.9"
 description = "Atomic communication infrastructure for sandboxed agents"
 readme = "README.md"
 requires-python = ">=3.15"

{msgctl-0.2.8 → msgctl-0.2.9}/src/msg/__init__.py

@@ -1,3 +1,3 @@
 """Atomic communication for sandboxed agents."""
 
-__version__ = '0.2.8'
+__version__ = '0.2.9'

{msgctl-0.2.8 → msgctl-0.2.9}/src/msg/transports/http_routes.py

@@ -1073,18 +1073,38 @@ def create_app(service):
                     )
                 else:
                     packet = request_for(operation, args, service.settings.service_url)
-                result = await execute_packet(packet, entry='network')
-                if result.error:
-                    return json_response(result_wire(result), error_status(result.error.code))
                 browser_html = 'text/html' in request.headers.get('accept', '').casefold()
                 markdown_view = (
                     raw_document or 'text/markdown' in request.headers.get('accept', '').casefold()
                 )
+                result = await execute_packet(packet, entry='network')
+                public_fallback = False
+                if (
+                    result.error
+                    and result.error.code == 'credential_ceiling'
+                    and (browser_html or markdown_view)
+                    and not header
+                    and request.scope.get('state', {}).get('msg_browser_credentials')
+                ):
+                    # An old browser ceiling cannot gain new operation versions.
+                    # Render the already-public anonymous feed; preserve explicit
+                    # signed/API failures and never widen the browser credential.
+                    result = await service.executor.execute(
+                        request_for(operation, args, service.settings.service_url),
+                        entry='network',
+                    )
+                    public_fallback = True
+                if result.error:
+                    return json_response(result_wire(result), error_status(result.error.code))
                 if browser_html or markdown_view:
                     from msg.transports.discovery_pages import feed_markdown
 
                     account = await browser_account()
                     markdown = feed_markdown(result.data, signed_in=bool(account))
+                    if public_fallback:
+                        markdown += '\n\nYour browser authorization cannot personalize this feed. Showing public recommendations. '
+                        markdown += '[Sign in again](/login). / 当前浏览器授权无法使用个性化推荐，现显示公开推荐；[重新登录](/login)。'
+
                     controls = (
                         '<form method="get" action="/feed"><label>Interests / 兴趣标签 '
                         '<input name="interests" maxlength="640" placeholder="python,ai" value="'

{msgctl-0.2.8 → msgctl-0.2.9}/tests/test_discovery_pages.py

@@ -84,3 +84,41 @@ async def test_browser_feed_uses_follows_and_topics_respect_membership(oauth):
     assert personal.status_code == 200 and '已关注' in personal.text
     topics = await http.get('/topics', headers={'Accept': 'text/html'})
     assert 'href="/admins"' in topics.text
+
+
+@pytest.mark.asyncio
+async def test_old_browser_ceiling_shows_public_feed_without_widening_api_permissions(oauth):
+    from dataclasses import replace
+
+    from msg.security.oauth import OAuthService
+
+    app, key, subject, http = oauth
+    made = await call(
+        app,
+        'content.post_create',
+        {'parent': '/main', 'body': '# Public fallback post'},
+        key=key,
+        subject=subject,
+    )
+    assert made.status == 'ok'
+    cookie = await browser_login(oauth)
+    async with app.metadata.transaction(write=True) as tx:
+        _, cid, _ = await OAuthService(app).browser_credentials(tx, cookie)
+        original = await tx.credential(cid)
+        narrowed = replace(
+            original,
+            ceiling=tuple(
+                replace(g, operations=g.operations - {'discovery.recommendations@1'})
+                for g in original.ceiling
+            ),
+        )
+        await tx.save_credential(narrowed, (await tx.subject(subject)).auth_version)
+    html = await http.get('/feed', headers={'Accept': 'text/html'})
+    assert html.status_code == 200 and 'Public fallback post' in html.text
+    assert 'Showing public recommendations' in html.text and '重新登录' in html.text
+    raw = await http.get('/feed?format=raw', headers={'Accept': 'text/html'})
+    assert raw.status_code == 200 and raw.headers['content-type'].startswith('text/plain')
+    api = await http.get('/feed', headers={'Accept': 'application/json'})
+    assert api.status_code == 403 and api.json()['error']['code'] == 'credential_ceiling'
+    async with app.metadata.transaction(write=False) as tx:
+        assert (await tx.credential(cid)).ceiling == narrowed.ceiling

{msgctl-0.2.8 → msgctl-0.2.9}/uv.lock

@@ -482,7 +482,7 @@ wheels = [
 
 [[package]]
 name = "msgctl"
-version = "0.2.8"
+version = "0.2.9"
 source = { editable = "." }
 dependencies = [
     { name = "cryptography" },