v0.4.0

What's Changed

• Red-team fixes: fail-closed legacy signing + not_for lint, release 0.4.0 by @totto in #25

Full Changelog: v0.3.0...v0.4.0

v0.3.0 — replay, the incident world, Arena ⑤, full MCP surface

Highlights

replay — determinism as a verifiable property (RFC-0019). Every plan --json artifact now pins the manifest's sha256 and echoes every planner input. kcp-agent replay plan.json re-fetches the manifests, compares bytes, re-runs the pure planner from the echoed inputs, and reports identical or drifted — per manifest, with the fields that moved. Exit 0: the decision reproduces on your machine, no trust required. A plan is evidence; replay is the cross-examination.

The 03:00 incident world (examples/incident/). Four fictional federated parties — an energy company's hub, a national CERT with a signed manifest, a vendor, and an intel feed where TLP:AMBER is an enforced gate, not a label. One story exercises attestation, ed25519 signatures, supersession, payment, and an intel budget. Run it: node examples/demos.js incident.

MCP at full fidelity. kcp-agent mcp now serves four tools — kcp_plan, kcp_load, kcp_validate, and the new kcp_replay — and kcp_plan/kcp_load take the CLI's whole capability surface (role, methods, credentials, attest), so attestation and credential gates answer over MCP exactly as on the command line. The Borrowed Leash demo (node examples/demos.js leash) drives the incident over raw JSON-RPC and catches a client that falsifies its own spend ledger. The borrowing agent doesn't have to be deterministic — it just has to ask someone who is.

Red-team hardening. Fail-closed federation context, tree-wide budget threading across --follow, unicode task terms, signature-envelope integrity.

Arena match ⑤ — The 03:00 Page. The incident world live in the browser, gates flipping as you provision the responder: https://cantara.github.io/kcp-agent/

Changes since v0.2.0

• #19 the 03:00 incident-response world — one story, every gate
• #20 red-team batch: fail-closed context, tree-wide budget, unicode, envelope integrity, replay
• #21 Arena match ⑤: the incident world in the browser
• #22 MCP: full capability surface, kcp_replay, the Borrowed Leash demo
• #23 release 0.3.0

126 tests, all narrated demo claims regression-tested against the shipping CLI.

v0.1.1

chore(release): 0.1.1 — publish as unscoped kcp-agent

The @cantara npm scope was unavailable (org name taken), so the package
ships unscoped like kcp-mcp before it. Renames every @cantara/kcp-agent
reference, bumps version to 0.1.1 in package.json, SERVER_INFO, and
knowledge.yaml, and applies npm pkg fix (bin path, repository.url) so
npm 11 keeps the kcp-agent bin at publish.

Published: https://www.npmjs.com/package/kcp-agent

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

v0.2.0

What's Changed

• fix(planner): access is the auth axis — x402 never satisfies it (spec §4.11, v0.25.1) by @totto in #9
• feat(planner): supersession precedence over temporal overlap (spec §4.22, v0.25.1) by @totto in #10
• Six-demo suite: narrated scenarios driving the real CLI, CI-asserted by @totto in #11
• ask --loop: the audited critique loop (the model proposes, the plan disposes) by @totto in #12
• The Loop — seventh demo: the audited critique loop, offline by @totto in #13
• The Arena — gh-pages site running the real planner in the browser by @totto in #14
• Proof upgrades: property-based invariants + The Seal (demo 8) by @totto in #15
• The Playground — bring your own manifest, validated and planned in-browser by @totto in #16
• Docs with teeth — receipts matrix, drift-guarded captures, bundle sha256, guides by @totto in #17
• Bump version to 0.2.0 by @totto in #18

Full Changelog: v0.1.0...v0.2.0

---

Now on npm (unscoped): npx kcp-agent — https://www.npmjs.com/package/kcp-agent

Write-up: The Vibes-Based Agent Era Deserves to End · The Arena: https://cantara.github.io/kcp-agent/

v0.1.0

What's Changed

• feat: kcp-agent — reference agent that consumes KCP end to end by @totto in #1
• Import kcp-agent: reference KCP agent with natives, dogfood manifest, validate/follow/verify/MCP by @totto in #6
• Add manually dispatched release workflow by @totto in #8

New Contributors

• @totto made their first contribution in #1

Full Changelog: https://github.com/Cantara/kcp-agent/commits/v0.1.0