Sidekick v2.1.0

Highlights

Sidekick 2.1.0 is a substantial feature release focused on durable Agent execution, persistent Agent sessions, evidence-based completion, context intelligence, and semantic repository analysis.

Agent execution and governance

• Added a durable, evidence-driven Agent work loop.
• Added durable checkpoints and execution claims.
• Added evidence-based completion gating.
• Added bounded replanning and execution limits.
• Preserved truthful incomplete, cancelled, interrupted, and resource-limit outcomes.
• Improved cancellation and recovery behavior.
• Added safe user-facing projections of Agent work progress.
• Preserved governed dispatch, approvals, policy enforcement, auditability, and bounded continuation context.

Agent Tab v2

• Added persistent multi-turn Agent sessions.
• Added direct follow-up composition beneath completed Agent turns.
• Added governed child-task continuation with root, parent, and depth lineage.
• Added chronological Agent History ordering using canonical timestamps.
• Added session reconstruction and resume behavior.
• Added bounded history pagination.
• Added calendar-aware history dates.
• Added browser restoration for active and completed sessions.
• Added safe work-state and progress presentation.
• Improved failure, cancellation, approval, interruption, and incomplete-state handling.
• Added regression coverage for history, sessions, follow-ups, restoration, XSS safety, and lineage.

Context and repository intelligence

• Added the scoped Context Engine.
• Added bounded context manifests and ranking.
• Added project and scope isolation.
• Added memory consolidation with provenance.
• Added migration 054_context_engine.sql.
• Added semantic repository analysis and normalized repository IR.
• Added AST, symbol, relationship, dependency, and evidence-aware projections.
• Improved repository discovery and semantic identity handling.
• Added deterministic, bounded, tamper-aware semantic indexing.
• Expanded the Developer compatibility pack with semantic repository capabilities.
• Added associated documentation, workflows, and tests.

Release integrity

• Signed tag: v2.1.0
• Signed tag target: 19aa7a0e00b74d6fefdd6f34e7887092ad7e3e4f
• Tag signature verified successfully with the configured ED25519 signing key.
• PR #542 merged successfully.
• Deployed commit verified against origin/main.
• Dashboard, Agent, and MCP services verified active after deployment.
• Packaged restart smoke test passed.
• Deployment backup: /home/sidekick/backups/deploy-20260822T184544Z
• PowerShell test run passed 97 suites before stopping on Windows-specific test-directory cleanup errors and one scheduler assertion; the version metadata and release changes themselves passed validation.

v2.0.1

Highlights

• Extracted dashboard identity and authentication routes.
• Extracted handoff persistence into a dedicated store.
• Split MCP transport and session management into focused modules.
• Made the canonical tool registry authoritative.
• Reconciled post-refactor architecture and tool documentation.
• Consolidated security audit documentation and expanded repository ignore rules.

Release integrity

• Tag: v2.0.1
• Commit: 3c5c857
• The release tag is SSH-signed and points to the merged main commit.

Sidekick v2.0.0

Highlights

• Makes structured Handoff v2 the sole active handoff system.
• Removes active legacy KV handoff/resume-key paths and rejects legacy key inputs.
• Removes KV-to-handoff memory backfill.
• Migrates from the legacy monolithic @modelcontextprotocol/sdk v1 package to the stable MCP TypeScript SDK v2 packages, while preserving Sidekick’s governed dispatcher, tool annotations, and transport compatibility.
• Adds a portable bounded Node filesystem-search fallback for Windows when rg/grep are unavailable.

Verification

• Handoff versioning tests passed.
• Memory intelligence tests passed.
• Tools integration test passed.
• MCP v2 runtime test passed.
• Migration self-containment test passed.
• Static code quality test passed.
• Deployment verified healthy on merged main commit 1660ecc.

The release tag is signed and points to the merged main commit.

Sidekick v1.2.0

Highlights

• Explicit MCP tool annotations for safer client interoperability.
• Public self-hosted privacy policy at /privacy.
• Versioned installation documentation updated for v1.2.0.

Verification

• PR #518 merged with all CI checks passing.
• Signed annotated tag v1.2.0 created on the merged main commit.

Sidekick v1.1.0

Highlights

• Added a full local Sidekick deployment that MCP clients can launch directly through npx and stdio, without requiring a dedicated server.
• Preserved the existing dedicated/server deployment as a first-class topology.
• Reused the canonical MCP registration, governed dispatcher, validation, policy, approvals, execution context, redaction, auditing, and capability-pack paths.
• Added durable platform-aware local persistence outside npm/npx caches, including support for SIDEKICK_HOME.
• Added safe first-run initialization and local stdio integration coverage.
• Added package executable metadata for the sidekick CLI and clean packaged-install testing.
• Documented local and dedicated topologies, persistence, security, client configuration, Compute, capability packs, and pinned GitHub Release usage.

Verification

• Local stdio MCP integration passed.
• Clean npm package installation and stdio integration passed.
• MCP session and tool-registry regressions passed.
• Focused security, Compute, and capability-pack suites passed.
• npm audit --omit=dev: 0 vulnerabilities.
• Deployment verified healthy on merged main commit e76d87fc352ee73194ae73f6aa53a8093c18c744.

Installation

For a pinned release:

{
  "mcpServers": {
    "sidekick": {
      "command": "npx",
      "args": ["-y", "github:geoffmcc/sidekick#v1.1.0"]
    }
  }
}

This release is the same Sidekick product available through the dedicated/server deployment; local execution is an alternative deployment topology, not a reduced edition.

Sidekick v1.0.0

Sidekick v1.0.0

Initial public release of Sidekick, a self-hosted autonomous agent platform.

Highlights

• Governed MCP tools with policy, approvals, redaction, and audit logging
• Persistent project memory and searchable knowledge
• Durable workflows, handoffs, and task continuity
• Extensible first-party capability packs
• Dashboard, Agent Bridge, monitoring, and incident evidence
• Distributed local-model compute
• GitHub, infrastructure, database, networking, and automation tools

Requirements

• Node.js 22 or newer
• Git
• A remote Ubuntu or Debian machine
• SSH access to the remote machine

See the README for installation and deployment instructions.