v0.5.124

Team Agent 0.5.124

• Current-shell install (#359): when ~/.local/bin is not on the installing shell's PATH, print the exact export and rehash commands plus the absolute binary. Also write the PATH marker to both ~/.zprofile and ~/.zshrc.
• Quiet fresh Pi session (#361): do not pass a preassigned --session-id on a fresh Pi launch. Pi creates the session itself, and capture reads the id from the session header.
• Grok second Enter (#363): press a second Enter only when the queue footer is Queued · Enter to send now or Enter:send now, or when the owned folded capsule is still in the composer. Do not press it on an empty busy composer.
• Public PATH launch (#364): launch providers through their public PATH command instead of a hardcoded deep image path.
• Version-named Claude panes (#367): recognize native Claude panes whose command name includes the version in canonical lifecycle checks.

The first v0.5.124 tag push failed in Publish npm run 40224266770 at Verify workspace, before any package publish. PR #369 fixed those four tests. The tag now points at c55a5a5ee26e8b4bd3ad277567f056ca38c27463.

Official tagged Publish npm run 40232294706 completed all 8 jobs successfully. npm registry https://registry.npmjs.org shows @team-agent/installer, @team-agent/cli-darwin-arm64, @team-agent/cli-darwin-x64, and @team-agent/cli-linux-x64 at 0.5.124. Installing this release does not automatically replace a running team.

v0.5.123

Team Agent 0.5.123

• Share the workspace tmux session instead of a private tac-<hash> server, and reuse a live process on repeated start.
• Remove the install-time doctor/MCP gate and path-shadow noise.
• Present Grok under the public command name grok, and let doctor match a live seat by pane id rather than the agent-id window title.
• Create the public-name hard link on the image volume. Caller TMPDIR is not used.

Official tagged Publish npm run 40061153479 completed all 8 jobs successfully. The first tag push failed in workspace example compilation before any publish; the tag was moved to eba138ae only after that fix, and no 0.5.123 package had been published.

npm view against https://registry.npmjs.org shows @team-agent/installer, @team-agent/cli-darwin-arm64, @team-agent/cli-darwin-x64, and @team-agent/cli-linux-x64 at 0.5.123. Installing this release does not automatically replace a running team.

v0.5.122

Team Agent 0.5.122

• Fix dynamic single-seat startup and team respawn losing the generated MCP configuration (Issue #345 / PR #346).
• Fail closed when a Provider requires MCP readiness but its configuration metadata is missing; defer without input or attempt consumption.
• Retain exact process/image/owner binding, add dynamic-start/resume regressions, and align controlled test observation with the existing image-computation budgets.

Official tagged Publish npm run 39537120683 completed all 8 jobs successfully. Verify workspace: 3,728 passed / 0 failed. Installer and three platform packages are published at 0.5.122.

Published-artifact smoke completed 103 primary CLI expected-exit checks (73 isolated help/configuration checks and 30 native lifecycle/collaboration commands across three workers). Leader CLI and native Worker to="*" broadcasts reached every other intended worker with native acknowledgements. Three same-session, no-hint recalls and a scoped stop with two zero-resource inventories passed. All model communication stayed on native MCP, without source searches or shell/script/RPC fallback.

Known observations are retained: the initial composite driver timed out on an unavailable Leader transcript-receipt projection even though the real Leader independently confirmed receipt; one post-restart native MCP client disconnection recovered through native directory refresh and retry. This is functional finite acceptance with those explicit warnings, not a zero-error or all-provider/platform guarantee. Installing the release does not automatically replace running teams.

v0.5.121

Team Agent 0.5.121

• Native Cursor MCP isolation (#342 / #343): use an owned non-Git primary root while retaining real-project access through --add-dir; preserve the native spawn cwd and strict workspace/team/seat scope across start and restart. Stale parent-repository MCP configuration is not adopted.
• Handshake before first input: require fresh, identity-bound initialize/tools-list response receipts before releasing a Cursor task. A running process or generated config alone is not MCP readiness.
• Shutdown convergence: align CLI waiting with coordinator graceful shutdown, retain scoped zero-residual verification, and protect the controlled shut_004 fixture with a bounded server-death fence.
• Finite native acceptance: fresh Cursor and Grok Build 1.0.62 journeys completed native hello, 5535, same-session restart recalls and scoped cleanup. Full-window native tool histories showed direct Team MCP calls without source searches, scripts or hand-written RPC; business replies were independently naturally received by Leader. Runtime executable replacement still fails closed.

Verification and packages

• Product #343; eight-file metadata-only release #344.
• Pre-tag official verification/build 39411109663 passed without publishing. Formal tagged publication 39416528216: 8/8 jobs SUCCESS; workspace verification 3724 passed / 0 failed / 146 ignored executions. The unchanged excluded contract crate was separately verified at the product source: 300 passed / 0 failed / 3 ignored, with selected macOS root groups 192 passed / 0 failed. These are scoped execution counts, not a sum of unique tests.
• Source 3f7b40abc6bc6aedefa9dca15da9adac689cfbcb; annotated tag v0.5.121.
• All four public npm packages are available at version/latest 0.5.121: @team-agent/installer, @team-agent/cli-darwin-arm64, @team-agent/cli-darwin-x64, @team-agent/cli-linux-x64. Tarball SHA512/SHA1, current npm registry signatures, platform binary/manifests versus official build artifacts, and explicit npm view receipts were independently checked. The published macOS arm64 binary reports 0.5.121 and its help exits successfully.
• Installer public SLSA subject/source/tag/workflow/run matches this release. Platform packages expose no public SLSA bundle; their binaries/manifests match official artifacts. Independent Sigstore/Fulcio/Rekor trust-chain verification was not performed.

Acceptance is finite, not an unrestricted native provider/model/platform or future live-upgrade guarantee. Publication does not restart existing teams or automatically replace a local runtime.

v0.5.120

Team Agent 0.5.120

• Safer CLI parsing (#334): strict options/operands, consistent equals-form arguments, fail-closed explicit workspaces, required attach provider and rejected pseudo-force options; native payloads after -- remain intact.
• Intuitive lifecycle: start, stop, restart <agent>, team and agent surfaces; initial/daily startup, proven-live no-ops, stopped-seat wakeup and role-only additions share a thin intent layer. New restart surfaces use auto; legacy bare restart retains preserve, with session preflight before stop.
• Aligned public journey: Skills, operator references, README, help/next actions and packaged mirrors follow the new commands; legacy commands remain compatibility bridges.
• Lifecycle diagnostics (#336–#338): robust tmux column delimiters, live caller admission before startup effects, honest partial-effect receipts and explicitly scoped uncertainty/recovery guidance.
• Reliable test namespace (#341): atomically unique native-fixture directories with a deterministic identical-clock concurrency regression; all original physical assertions and production fences retained.

Verification and packages

• Product PRs #335, #339; test-only #341; eight-file metadata-only release #340.
• Official tagged publication 39303613862: 8/8 jobs SUCCESS. Workspace verification:3695 passed/0 failed/146 ignored executions. The excluded contract crate was separately verified:300 passed/0 failed/3 ignored across25 targets, with Clippy/scoped formatting passed. These are execution counts, not a sum of unique tests.
• Source fc09252432e15790c567a1ca7d62406b4ae27969, annotated tag v0.5.120.
• All four public npm packages at 0.5.120: @team-agent/installer, @team-agent/cli-darwin-arm64, @team-agent/cli-darwin-x64, @team-agent/cli-linux-x64; public versions/latest tags, tarball integrity, registry signatures and official platform-artifact equality were independently checked.
• Installer public SLSA subject/source/tag/workflow/run matches this release. The three platform packages have no public SLSA bundle; their binary/manifests match official build artifacts. Independent Sigstore/Fulcio/Rekor trust-chain verification was not performed.

Validation is finite and does not assert every native provider/model or lifecycle combination. Publication does not restart existing teams or change a local runtime automatically.

v0.5.119

Team Agent 0.5.119

• Fix false-positive delivery when a message token remains in the editable composer. Visibility prevents duplicate paste; input consumption is independently verified.
• Restore an independent 90-second Enter watchdog for submitted-unverified messages, with original identity, input-lock, residue/stability and one-shot/no-replay safety fences.
• Complete Cursor inline/expanded multiline composer and message-bound Seen-to-Gone consumption parsing in the Cursor provider leaf.

Verification

• Frozen implementation b6b972cc; official dual-platform CI 38872949540 passed: Ubuntu workspace 3608 passed/0 failed; macOS bounded root packs and excluded-contract tests all passed.
• Release PR #333 prerequisite tests, Clippy and scoped formatting passed. Release authorization followed main-team use of the exact candidate.
• Official tag workflow: Publish npm 39054901853.

Packages: @team-agent/installer, @team-agent/cli-darwin-arm64, @team-agent/cli-darwin-x64, @team-agent/cli-linux-x64 at 0.5.119.

These results are finite; they do not claim every native Cursor four-state, provider/model or rescue-path combination was tested. No additional runtime restart is part of publication.

v0.5.118 — Ambient tmux recovery and follow-up delivery

What's changed

• #326 — Smooth Leader startup from tmux: adaptively isolate inherited foreign or unavailable ambient pane context into a workspace-owned managed launch. Explicit external/attach authority checks remain strict; unrelated panes are not adopted or rewritten.
• #328 — Cursor follow-up delivery: recognize the current Add a follow-up viewport after startup banners leave scrollback, including expanded multiline editors, so follow-up messages reach the normal Enter submission path.
• #331 / #321 — Restore unconditional legacy input: remove regressive pre-paste idle admission and restore v0.5.113 paste-and-submit behavior instead of indefinitely deferring messages while waiting for an idle composer.
• Align the installer, Rust workspace and all three native platform packages at 0.5.118.

Validation scope

Independent finite basic-function smoke covers three provider catalogs and a real Pi Leader/Pi Worker startup, message delivery, natural worker-originated CLI inbox reply and scoped shutdown. The fixture's preliminary role/response-channel calibration is retained in its report. This is not an unrestricted provider/model/state matrix.

Official CI verifies workspace tests, controlled macOS root/contract fixtures, Clippy and scoped formatting; the tagged publishing workflow rebuilds all three native platforms before npm publication.

Full changelog: v0.5.117...v0.5.118

v0.5.117 - Multiline Input Handshake & Delayed Enter-Rescue Watchdog

What's Changed

Features & Bug Fixes

• Multiline Input Handshake & Timing Fence (Issue #321 / PR #323):
  • Fixed race condition where multiline text injection hung in input composers as submitted_unverified without Enter submission across Cursor Agent and Pi Agent.
  • Implemented fail-closed empty-composer pre-paste readiness check and stable token/capsule confirmation before single physical Enter submission.
  • Fixed Pi notification banner geometric conflict: admitted frames with closed non-modal banners above the maximum editor extent.
  • Added native Pi folded capsule grammar ([paste #N +M lines]) and pre-stability latch persistence.
• Asynchronous Enter-Rescue Watchdog (Issue #321 / PR #323):
  • Implemented 90s–120s atomic EnterRescue scheduled event to rescue unverified residual messages away from the injection explosion radius under fail-closed input lock and idle verification.
• Full Acceptance & Workspace Verification (PR #324):
  • 35-step real-binary dual-target blind test verified (PASS_FINITE_DUAL_26_LINE_DELIVERY_AND_RETURN_WITH_NATIVE_PI_NOTICE_BASELINE).
  • Full workspace verification: 3,564 passed, 0 failed; contract test suite: 290 passed, 0 failed.

Full Changelog: v0.5.116...v0.5.117

v0.5.116 - Grok Build Contract Provider Adaptation & Stopped-Agent Restart Isolation

What's Changed

Features & Bug Fixes

• Contract-Native Grok Build Provider Adaptation (PR #318):
  • Adapted the Grok Build CLI (@xai-official/grok 1.0.52, canonical provider grok_build) under the universal contract platform (crates/team-agent-contract).
  • Empirical 56-card black-box reconnaissance (464 verified receipts): dual wrapper/native-image (grok-native) fingerprinting, .grok/config.toml ([mcp_servers.<id>]) generation-bound MCP materialization with OwnedServerIsolated ambient coexistence, non-Git transport_root v2 private cwd, single-y StartupConsent directory trust confirmation, bounded rectangular modal extraction for /session-info and rounded paste-preview popups, /exit native teardown, and receipt-fenced dead socket unlinkat.
  • Live 91-step E2E acceptance verified (FINITE_E2E_ACCEPTANCE_PASS): G1 Catalog (grok-4.7), G2 Formation, G3 real arithmetic (123 * 45 = 5535) with Native Leader active-context receipt & natural acknowledgement, G4 3-generation session recovery & dual secret recall, and G5 zero-residual process & socket teardown.
• Stopped-Agent Restart Isolation & Mixed-Team Restart Ordering (Issue #317 / PR #318):
  • Explicitly stopped agents (team-agent stop-agent <agent>) now persist explicit_stop and remain stopped across team-wide team-agent restart across both legacy and contract-native paths, waking only via explicit team-agent start-agent <agent> (with full dual-mirror StartAgent authority).
  • Fixed mixed-team restart control flow (M1) so prepared contract seat resumes execute even when legacy seats fail.
• Release 0.5.116 Version Alignment & Test Suite Stabilization (PR #319, PR #320):
  • Full workspace verification: 3,530 passed, 0 failed; contract test suite: 288 passed, 0 failed.

Full Changelog: v0.5.115...v0.5.116

v0.5.115 - Cursor Provider Adaptation & Contract Platform Integration

What's Changed

Features & Architecture

• Contract-Native Cursor Provider Adaptation (PR #314):
  • Adapted the Cursor CLI (cursor-agent 2026.10.01-e373342) under the universal contract platform (crates/team-agent-contract).
  • Empirical 55-card black-box reconnaissance: identified bundled Node runtime, --approve-mcps flag, PasteBuffer injection, and bounded ancestor process traversal.
  • Native session preallocation via cursor-agent create-chat and explicit resume via --resume <chatId>.
  • Folded paste transcript marker recognition ([Pasted text #...]) preventing guard deadlocks on long prompt payloads.
  • NativeToolRoundtrip protocol: server-side invocation and response verification for MCP stdio tools.
  • Live acceptance verified: Native Leader quick-start, Cursor Worker task execution (123 * 45), and successful result delivery (5535).
• Release 0.5.115 Version Alignment (PR #315).
• CI Test Suite Stabilization (PR #316):
  • Fixed receiver session assertion alignment in start.rs.
  • Quiesced rollback coordinator in intermediate layer lifecycle integration tests.

Full Changelog: v0.5.114...v0.5.115