🦋 New version release

[brentrager]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@smooai/smooth-operator@1.36.1

Patch Changes

• 770edec: SECURITY: fix cross-user conversation-history leak in the Python server's get_conversation_messages.

  The per-user scoping fix added a _visible_session ownership chokepoint and routed
  get_session, send_message and verify_otp through it, but get_conversation_messages
  still called the store directly — so any authenticated user could read any other user's
  full conversation history by sessionId. It now routes through the same chokepoint and
  reports a session it does not own with the byte-identical SESSION_NOT_FOUND payload it
  uses for an id that never existed (no existence oracle). A structural test now fails if any
  future handler bypasses the chokepoint again.

@smooai/smooth-operator-web-chat-example@0.0.37

Patch Changes

• Updated dependencies [770edec]
  • @smooai/smooth-operator@1.36.1