v0.5.121

Team Agent 0.5.121

• Native Cursor MCP isolation (#342 / #343): use an owned non-Git primary root while retaining real-project access through --add-dir; preserve the native spawn cwd and strict workspace/team/seat scope across start and restart. Stale parent-repository MCP configuration is not adopted.
• Handshake before first input: require fresh, identity-bound initialize/tools-list response receipts before releasing a Cursor task. A running process or generated config alone is not MCP readiness.
• Shutdown convergence: align CLI waiting with coordinator graceful shutdown, retain scoped zero-residual verification, and protect the controlled shut_004 fixture with a bounded server-death fence.
• Finite native acceptance: fresh Cursor and Grok Build 1.0.62 journeys completed native hello, 5535, same-session restart recalls and scoped cleanup. Full-window native tool histories showed direct Team MCP calls without source searches, scripts or hand-written RPC; business replies were independently naturally received by Leader. Runtime executable replacement still fails closed.

Verification and packages

• Product #343; eight-file metadata-only release #344.
• Pre-tag official verification/build 39411109663 passed without publishing. Formal tagged publication 39416528216: 8/8 jobs SUCCESS; workspace verification 3724 passed / 0 failed / 146 ignored executions. The unchanged excluded contract crate was separately verified at the product source: 300 passed / 0 failed / 3 ignored, with selected macOS root groups 192 passed / 0 failed. These are scoped execution counts, not a sum of unique tests.
• Source 3f7b40abc6bc6aedefa9dca15da9adac689cfbcb; annotated tag v0.5.121.
• All four public npm packages are available at version/latest 0.5.121: @team-agent/installer, @team-agent/cli-darwin-arm64, @team-agent/cli-darwin-x64, @team-agent/cli-linux-x64. Tarball SHA512/SHA1, current npm registry signatures, platform binary/manifests versus official build artifacts, and explicit npm view receipts were independently checked. The published macOS arm64 binary reports 0.5.121 and its help exits successfully.
• Installer public SLSA subject/source/tag/workflow/run matches this release. Platform packages expose no public SLSA bundle; their binaries/manifests match official artifacts. Independent Sigstore/Fulcio/Rekor trust-chain verification was not performed.

Acceptance is finite, not an unrestricted native provider/model/platform or future live-upgrade guarantee. Publication does not restart existing teams or automatically replace a local runtime.