v0.1.0-alpha.24

0.1.0-alpha.24 — 2026-10-11

• Add session-independent update discovery, numeric release/channel comparison and separate npm/GitHub availability reports. Fixed HTTPS sources, bounded responses and pagination; no remote commands or automatic downgrades.
• Add opt-in private notification policy, pin/disable/status and hourly notification workers scheduled through macOS launchd/Linux systemd user services. Default CLI remains offline; notices use cached TTY stderr and preserve MCP/JSON output.
• Use process-crash-safe SQLite coordination, discard worker results after policy changes, reconcile notification schedules on enable, and suppress stale notices after manual upgrades.
• Add Ed25519 release-envelope verification and explicit automatic-apply blockers. Operational signing, owner detection, maintenance fence, automatic installation and independent rollback/recovery remain unimplemented; Windows product support remains blocked.

Install and delivery verification — 2026-10-11

macOS/Linux with Node.js 24 or newer:

npm install --global durebak@0.1.0-alpha.24
durebak --version

The npm alpha tag points to 0.1.0-alpha.24 as of this verification. Check npm view durebak dist-tags before channel-based upgrades; latest remains 0.1.0-alpha.2.

• Release workflow completed successfully, including npm delivery after trusted publisher configuration and registry processing.
• The downloaded npm tarball is byte-for-byte identical to the GitHub asset. SHA256: c4782ccd8eda9a5e0777259e50a8fa3454aa86c545c35fc9534f4066057608b5.
• Actual npm tarball reinstallation and updater-status/guards, skills, daemon, registration, doctor, setup and collaboration send/receive smoke passed. Registry provenance metadata is present.
• For GitHub file installation, download the .tgz and SHA256SUMS assets and verify the checksum first. Installation and update instructions.

This release provides update discovery and opt-in notifications. Automatic installation/rollback and native Windows runtime support remain unimplemented. Tags and release assets are unchanged; the later registry-processing wait fix is in main for future release tags, not retroactively added to this artifact.

v0.1.0-alpha.23

0.1.0-alpha.23 — 2026-10-11

• Update the pinned MCP SDK from 1.30.1 to 1.32.1 to resolve GHSA-6qxp-vccf-f47h. The advisory excludes the stdio client/server use in this alpha.
• Refuse storage on platforms without OS user identity before creating directories or database files, with unsupported_storage_platform. Windows remains unsupported.
• Add a synthetic Windows ACL/SQLite investigation and validate its public JSON output: reject malformed or incomplete reports, discard unexpected fields, and bound error diagnostics. This investigation does not enable Windows product support.
• Give the transient process-group inspection regression the same shutdown budget as descendant-retirement fixtures, retaining its ownership assertions under CI load. Product shutdown limits are unchanged.
• Clarify supported platforms and remaining Windows validation gates in installation, usage and compatibility documentation. Database schema and protocol versions are unchanged.

v0.1.0-alpha.22

0.1.0-alpha.22 — 2026-10-05

• Read only queue metadata during maintenance and status polling, avoiding materialization of pending message bodies while preserving expiry, retry hints, receipts and session availability.
• Add a deterministic payload-loading regression and a synthetic local benchmark. In one same-machine Node26.8.1 comparison with 100 messages of 64KiB each, status p50 decreased from 3.231ms to 2.442ms; see docs/PERFORMANCE.md for method and limits. No security or durability checks are removed.

v0.1.0-alpha.21

0.1.0-alpha.21 — 2026-10-05

• Refuse database directories owned by another effective OS user, including final symlinks with a trailing slash.
• Validate the database and existing WAL/SHM/rollback journals before SQLite opens: regular owner-private files, current effective UID and a single hardlink. Recheck generated sidecars before migration and after initialization.
• Preserve unsafe files unchanged instead of silently changing permissions or deleting recovery data. Normal private WAL reopening and concurrent connections remain supported. These checks do not isolate processes sharing an OS account.

v0.1.0-alpha.20

0.1.0-alpha.20 — 2026-10-05

• Recheck the live OpenCode driver and owner after asynchronous observation, including cancellation; reject closure instead of reading a closed ledger or returning stale outcomes after owner loss.
• Cover cached prepared and terminal observation races without model calls or native replay. Native controller/model authority and automatic wake remain unverified.
• Reconcile the README and missing alpha.17–alpha.19 history with the delivered source and verification limits.
• Generate new GitHub release notes from the exact tagged version section; reject missing, empty or duplicate notes while preserving existing release asset retries.

v0.1.0-alpha.9

Changelog

0.1.0-alpha.9 — 2026-10-04

• Add an internal durable native Codex turn ledger with exact receipts, stop intent and unknown reconciliation; transport fixtures cover cancellation and response loss.
• Add a fresh owned Codex host factory with private configuration checks, scoped command canaries and process-group shutdown before ownership release.
• Cover descendants retaining pipes or ignoring graceful termination, including unexpected leader exit.
• Deliver verified GitHub release assets independently of npm publisher authentication while preserving single-pack integrity and immutable retry checks.
• Installed Codex 0.146.0 non-model checks pass. Actual model collaboration, automatic wake and other native provider execution remain unverified.

0.1.0-alpha.8 — 2026-10-04

• Add bounded internal Codex app-server RPC framing, request limits and fail-closed transport handling.
• Add private canonical-profile ownership with an uninterrupted process lock, durable native identity and unknown state after holder loss. Existing records cannot be automatically adopted.
• Cover metadata commit races, blocked inspection, process crashes and unsafe profile paths with regression tests.
• Verify the internal RPC and ownership fence against an isolated installed Codex host without model turns, credential copying or existing-session resume. Native model collaboration and automatic wake remain unverified.

0.1.0-alpha.6 — 2026-10-04

• Add shared collaboration skills for Codex, Claude Code and OpenCode, with an OpenCode command and a credential-free project installer.
• Add explicit session onboarding, bounded full-source reads, sharing previews, acceptance, cancellation and revision-aware verification guidance.
• Add administrator-managed runtime-local native bindings, owner leases and disabled-by-default policies with durable expiry and clock rollback protection.
• Add internal complete work-input preparation with private attachment validation, revision evidence and queued request-prefix context.
• Preserve existing sessions and private requests through the additive schema9→10 migration.
• Validate 198 regression tests, six-direction three-session MCP exchanges, installed package skill reuse and Codex 0.146.0 skill discovery without model execution.

Managed execution, atomic work reservation and automatic native wake remain future work. Claude Code/OpenCode native skill discovery and actual heterogeneous model execution remain unverified. GitHub delivery and npm registry publication are tracked separately.

0.1.0-alpha.5 — 2026-10-04

• Add request-linked protected tasks with participant/delivery ACLs and dual request/task versions.
• Add immutable owner uploads and message-scoped private attachment handles, sharing previews and public-copy disclosure.
• Add immutable private result revisions, latest-revision completion and result-reference redaction until delivery.
• Add revision-bound self-reported verification evidence, author-specific supersession, failure/conflict reporting and revalidation after changes.
• Add bounded deterministic context bundles with full-source and attachment/message pagination references.
• Add one-shot CLI collaboration dashboard and shared HTTP/MCP status, distinguishing bridge contact from unknown host readiness.
• Preserve existing credentials, requests, previews, tasks and private sources through additive schema6→7→8→9 migrations.
• Regress hidden-evidence cursor loss, completion quota exhaustion, missing input references, terminal control escaping and deadline snapshot consistency.
• Validate 168 tests, type checks, package allowlist, independently installed package smoke and Linux/macOS feature CI.

Evidence remains self-reported; native automatic wake, browser UI and actual heterogeneous host execution remain outside verified support. Source version and GitHub delivery do not imply successful npm registry publishing.

0.1.0-alpha.4 — 2026-10-04

• Add private two-participant request conversations, fixed deadlines and versioned acceptance/result/termination.
• Retain cancellation and timeout notices independently of inbox pressure or pause; notice acknowledgement does not assert host stopping.
• Add session-scoped consumer checkpoints with monotonic observed cursors and compare-and-swap updates.
• Add optional 60-second sender-only sharing previews, original-body range reads and send-time payload/permission checks.
• Preserve existing credentials, messages and delivery cursors through additive schema4→5→6 migrations.
• Regress deadline races, oversized pages, skipped unobserved notices and atomic storage failure rollback; test real HTTP/MCP routes.

Protected request tasks/attachments, revision evidence and native automatic wake remain future work. Actual heterogeneous host execution is unverified.

0.1.0-alpha.3 — 2026-10-04

• Add inactive harness research catalog and epoch-scoped MCP bridge health.
• Keep bridge contact, CLI activity and declared availability distinct.
• Add actionable doctor checks and schema 3→4 migration preserving original state.
• Handle multi-bridge, clock rollback, reconnect, revocation and EOF/signal cleanup.
• Clarify configuration fragments versus unverified native session isolation.
• Preserve MCP peer-data instructions and managed local paths from alpha.2.

Actual heterogeneous host execution and automatic native wake remain unverified.

0.1.0-alpha.2 — First public npm prerelease

• MCP initialization now supplies concise cross-session guidance; receive/read tool descriptions distinguish peer data from user authorization.

• Durebak skill and Codex/Claude manuals explain sender checks, refusals, acknowledgements and the native-versus-Durebak messaging boundary.

• CLI reports unknown_command before requesting a session for unknown commands.

• Malformed call --json or --input content reports invalid_json without exposing input.

• Regression coverage for three-session queue handling, runtime restart, task ownership, revocation and protected record exports.

0.1.0-alpha.1 — Tagged source snapshot, not published to npm

• New installations default to ~/.durebak, preserving explicit paths and legacy databases.

• Managed session credentials and immutable Markdown record snapshots when --out is omitted; paths command for discovery.

• Local authenticated runtime and per-session MCP connections.

• Durable priority queues, delivery leases, receipt acknowledgements and bounded retries.

• Tasks, content-addressed artifacts and explicit Markdown records.

• Session-specific host configuration with setup and connection diagnostics with doctor.

• Exact-tarball installation checks and guarded release workflow.

Native session resume and automatic wake are not supported. Back up a stopped runtime before upgrading; use a separate data directory for alpha trials.

Durebak 0.1.0-alpha.8

Durebak cooperative alpha for local coding-agent sessions.

This release adds internal bounded Codex RPC transport and canonical private-profile ownership fencing. Lifetime ownership is separate from metadata commits and inspection; holder loss remains unknown without automatic takeover. Regression coverage includes process crashes, inspection races, blocked persistence and symlink traversal.

The cooperative CLI/HTTP/MCP and shared skill/command workflow remains available. Actual native model collaboration, automatic wake, native turn interruption and reconnect are still separate verification gates. Installed Codex 0.146.0 was probed without model turns, credential copying or resuming existing sessions.

Validation: 272 regression tests, type checking, package allowlist, installed-package smoke, repository hygiene, secret scanning, independent review and Linux/macOS CI.

Attached tarball and reports are the single artifact produced and verified by the release workflow. npm publication is reported separately from GitHub asset availability.

npm status: publication returned E404 on PUT /durebak in release run 37197187154. Version 0.1.0-alpha.8 is absent from the registry; these GitHub assets do not imply npm publication. Publisher authorization/trust remains a separate unresolved gate.

Durebak 0.1.0-alpha.7

Durebak alpha.7 adds an internal mock execution lifecycle and correlated continuations on top of the existing cooperative CLI/HTTP/MCP and shared Claude Code/Codex/OpenCode skill/command workflow.

• Atomic question reservations lock the complete incoming request prefix and share durable grant budgets.
• Mock driver acceptance, interrupt, deadlines and reconnect reconciliation distinguish delivered, accepted, stopped and unknown states.
• Execution-owned child requests inherit root budgets/deadlines and explicitly allowed peers. Exact binding/epoch waiters claim an answer/result once.
• Permission withdrawal, session pause and ancestor cancellation prevent new submissions and stop running descendants.
• Uncertain submissions keep ownership/budget and are observed without automatic resubmission.

This release uses schema13. Stop the runtime and back up its private directory before upgrading. An older binary cannot read schema13. Existing schema12 mock reservations require policy revalidation; unknown executions must not be resubmitted.

Actual native automatic wake/model continuation and heterogeneous native model collaboration remain unverified. No existing active host is resumed by this release. Grok/Antigravity execution is not enabled.

Validation: 249 full regression tests, independent review with four reproduced/fixed edge cases, Linux/macOS CI, package installation smoke, allowlist and secret scans. Attached assets are the single CI-packed tarball, SHA-256 and package/smoke reports.

Npm publication is reported separately from GitHub artifact delivery; a GitHub prerelease does not establish successful registry publication.

v0.1.0-alpha.6

Durebak 0.1.0-alpha.6 adds a shared collaboration skill installer for Codex, Claude Code and OpenCode, an OpenCode command, explicit onboarding and revision-aware cooperation guidance, administrator-managed bindings/policies and internal complete work-input preparation.

Validation: 198 tests, types, package allowlist, secret scanning and Linux/macOS installed-package smoke passed. The attached package is the exact artifact from protected release workflow 37190708318.

SHA-256: 2c639342b167e8611001ecb73227902cdb77802c2c6a9b517c18512b81af4146

The npm publishing step failed with registry E404 (package not found or insufficient permission). This GitHub prerelease provides the verified tarball; it does not imply npm publication. Install this tarball directly if needed.

Automatic native wake, Managed execution and actual heterogeneous model cooperation remain unverified or future work. The six-direction MCP tests verify protocol cooperation; Codex 0.146.0 skill discovery was verified without a model turn.

Durebak 0.1.0-alpha.5

Changelog

0.1.0-alpha.5 — 2026-10-04

• Add request-linked protected tasks with participant/delivery ACLs and dual request/task versions.
• Add immutable owner uploads and message-scoped private attachment handles, sharing previews and public-copy disclosure.
• Add immutable private result revisions, latest-revision completion and result-reference redaction until delivery.
• Add revision-bound self-reported verification evidence, author-specific supersession, failure/conflict reporting and revalidation after changes.
• Add bounded deterministic context bundles with full-source and attachment/message pagination references.
• Add one-shot CLI collaboration dashboard and shared HTTP/MCP status, distinguishing bridge contact from unknown host readiness.
• Preserve existing credentials, requests, previews, tasks and private sources through additive schema6→7→8→9 migrations.
• Regress hidden-evidence cursor loss, completion quota exhaustion, missing input references, terminal control escaping and deadline snapshot consistency.
• Validate 168 tests, type checks, package allowlist, independently installed package smoke and Linux/macOS feature CI.

Evidence remains self-reported; native automatic wake, browser UI and actual heterogeneous host execution remain outside verified support. Source version and GitHub delivery do not imply successful npm registry publishing.

0.1.0-alpha.4 — 2026-10-04

• Add private two-participant request conversations, fixed deadlines and versioned acceptance/result/termination.
• Retain cancellation and timeout notices independently of inbox pressure or pause; notice acknowledgement does not assert host stopping.
• Add session-scoped consumer checkpoints with monotonic observed cursors and compare-and-swap updates.
• Add optional 60-second sender-only sharing previews, original-body range reads and send-time payload/permission checks.
• Preserve existing credentials, messages and delivery cursors through additive schema4→5→6 migrations.
• Regress deadline races, oversized pages, skipped unobserved notices and atomic storage failure rollback; test real HTTP/MCP routes.

Protected request tasks/attachments, revision evidence and native automatic wake remain future work. Actual heterogeneous host execution is unverified.

0.1.0-alpha.3 — 2026-10-04

• Add inactive harness research catalog and epoch-scoped MCP bridge health.
• Keep bridge contact, CLI activity and declared availability distinct.
• Add actionable doctor checks and schema 3→4 migration preserving original state.
• Handle multi-bridge, clock rollback, reconnect, revocation and EOF/signal cleanup.
• Clarify configuration fragments versus unverified native session isolation.
• Preserve MCP peer-data instructions and managed local paths from alpha.2.

Actual heterogeneous host execution and automatic native wake remain unverified.

0.1.0-alpha.2 — First public npm prerelease

• MCP initialization now supplies concise cross-session guidance; receive/read tool descriptions distinguish peer data from user authorization.

• Durebak skill and Codex/Claude manuals explain sender checks, refusals, acknowledgements and the native-versus-Durebak messaging boundary.

• CLI reports unknown_command before requesting a session for unknown commands.

• Malformed call --json or --input content reports invalid_json without exposing input.

• Regression coverage for three-session queue handling, runtime restart, task ownership, revocation and protected record exports.

0.1.0-alpha.1 — Tagged source snapshot, not published to npm

• New installations default to ~/.durebak, preserving explicit paths and legacy databases.

• Managed session credentials and immutable Markdown record snapshots when --out is omitted; paths command for discovery.

• Local authenticated runtime and per-session MCP connections.

• Durable priority queues, delivery leases, receipt acknowledgements and bounded retries.

• Tasks, content-addressed artifacts and explicit Markdown records.

• Session-specific host configuration with setup and connection diagnostics with doctor.

• Exact-tarball installation checks and guarded release workflow.

Native session resume and automatic wake are not supported. Back up a stopped runtime before upgrading; use a separate data directory for alpha trials.