Skip to content

docs: mark the identity migration as a breaking change (agent-comms v2) - #62

Merged
Mearman merged 2 commits into
mainfrom
chore/mark-identity-breaking-change
Sep 11, 2026
Merged

docs: mark the identity migration as a breaking change (agent-comms v2)#62
Mearman merged 2 commits into
mainfrom
chore/mark-identity-breaking-change

Conversation

@Mearman

@Mearman Mearman commented Sep 11, 2026

Copy link
Copy Markdown
Member

Step 7 of #47's sequencing ("ship as agent-comms-v2"). The peer-id derivation change (certificate fingerprint -> device-id) that landed across #58-#61 is a genuine breaking change -- every existing agent-comms identity/agent-id is orphaned on upgrade, no migration path -- but none of those commits carried a BREAKING CHANGE: footer, so semantic-release has been publishing them as ordinary patch/minor bumps (now v1.33.1) instead of a major version.

Two commits:

  1. Corrects the README's Identity section, which still described the retired fingerprint-based derivation, and adds a BREAKING CHANGE footer describing the actual break -- this is what tells semantic-release's next run to cut v2.0.0.
  2. An unrelated stale artifact found while pushing this: .husky/pre-push still ran a partial manual build assuming dist/cli.js already existed from an earlier full build, then executed one hardcoded compiled test file (dist/test/coordinator-socket-error.integration.test.js) -- both left over from before the test suite moved to running directly against source via tsx. Failed outright on a fresh checkout with no prior dist/. Now runs lint, typecheck, and the real pnpm test suite directly.

… change

The Identity section still described the retired fingerprint-based peer-ID
derivation (agent-comms#47's P2 substrate swap replaced it with the
device-id already canonical in wire-mesh-core), and nothing in the
project's own history had marked that change as breaking for
semantic-release's benefit, so it shipped across several releases as
ordinary patch/minor bumps despite orphaning every existing agent-comms
identity on upgrade.

BREAKING CHANGE: peer IDs are now derived from SHA-256 of the raw public
key (device-id), not the SHA-256 fingerprint of the self-signed X.509
certificate. Every agent ID, room membership, and pending delivery queue
tied to a pre-v2 identity is orphaned on upgrade, with no migration path.
A v2 bridge cannot interoperate with a v1 one at all.
The hook still ran a partial manual build (build:frontend only, assuming
dist/cli.js already existed from an earlier full build) then executed a
single hardcoded compiled test file, dist/test/coordinator-socket-error.integration.test.js
-- both left over from before the test suite moved to running directly
against TypeScript source via tsx, with no build step. On a fresh
checkout or worktree with no prior dist/ output, the hook failed outright
on the missing dist/cli.js rather than running any real check.

Runs eslint, tsc --noEmit, and the actual pnpm test suite directly
against source, matching what test now means everywhere else in the
project.
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 11, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
🔒 Security Review Completed 2026-09-11T20:09:33.319289Z 844e765 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@Mearman
Mearman merged commit e5bcf41 into main Sep 11, 2026
5 checks passed
@Mearman
Mearman deleted the chore/mark-identity-breaking-change branch September 11, 2026 20:09
@github-actions

Copy link
Copy Markdown

🎉 This PR is included in version 2.0.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant