Waypost v0.6.0

Agent calendar with two-way flow to Proton (within Proton's documented limits), mail organizing and Sieve triage, remote MCP over Streamable HTTP with OAuth 2.1, and a hardened self-hosting stack. See docs/self-host.md and docs/proton-support.md.

Upgrading from 0.5: no config changes are required. New features are off until you enable them.

Waypost v0.4.1

• Calendar share links can live in a Proton Pass item. Waypost reads the item with the official pass-cli when the cache misses, keeps a successful fetch for 10 minutes, and does not write the URL into config, logs, or tool results.
• A private link file or stdin still works. An expired cache is not reused after a failed refresh.
• plugin.json now matches the package version so the release workflow can tag v0.4.1.

Waypost 0.4.0

Mail list can search by sender and date. pass_lookup returns item names and http(s) URLs only, never secrets. Confirm gates on send and upload are unchanged.

Waypost v0.3.0

• mail_send and drive_upload now require confirm: true on every call, in addition to the local send/write policy. A missing or false flag fails with CONFIRMATION_REQUIRED before any SMTP or Drive operation. CLI users pass --confirm.
• README covers Claude Code (claude mcp add) and Claude Desktop setup.

Mail and Calendar stay read-only by default. Calendar writes still produce import files only. Account passwords remain in Proton’s official tools.

Release assets include SHA-256 checksums. GitHub Actions builds also attest the CLI and plugin archives.

Waypost v0.2.0

• Reuse an authenticated read-only Mail helper without copying Bridge credentials.
• Read Calendar exports or refresh protected Proton share links on each query, with retrieval times and upstream-delay reporting.
• Use ordinary CLI flags and calendar agenda; JSON calls remain supported.
• Reject unsafe artifact directories and downloaded symlinks before reading their contents.

Calendar writes still produce import files. Proton share links are read-only and can lag by up to eight hours. Direct Bridge is required for SMTP. Account passwords remain in Proton’s official tools.

Release assets include SHA-256 checksums. GitHub Actions builds also attest the CLI and plugin archives. The installable Codex marketplace plugin is separate from OpenAI’s reviewed directory.

Waypost v0.1.0

Local Proton tools shared by a CLI and stdio MCP server.

Mail uses authenticated Bridge and generated client credentials. Drive uses the official CLI. Calendar reads ICS snapshots and prepares imports; it does not save live events through an API. Sending and uploads start disabled.

The plugin archive includes its Node.js runtime and agent skill. Node.js 22.14+ and separate service setup are required. Read the setup guide and verification coverage before connecting an account.

Package checksums are in SHA256SUMS. The CLI package also has a GitHub build attestation when built by this workflow.