@inflowpayai/inflow@0.10.0

Minor Changes

• #39
  fda6120 Thanks
  @nkavian! - Add Agent Enrollment Protocol Service inspection, enrollment with Platform
  identity recovery and duplicate prevention, status, credential issuance, and revocation commands. Detect AEP
  authentication in the top-level inspect command and present AEP inspection and status details in tables. Store
  authentication secrets and AEP credential payloads in the encrypted local vault, with non-secret metadata in SQLite.
  On first use, delete the legacy plaintext config.json without migrating its credentials, requiring users to
  authenticate and enroll again. Add resource-aware AEP inspection and aep fetch, including anonymous success, caller
  request preservation, identity recovery, stored credential selection, pending Sign approval continuation, bounded
  redirects and responses, and structured resource body output. Persist fresh AEP Inspect documents per authenticated
  Platform user so separate CLI invocations reuse discovery safely. Ship a dedicated agentic-enrollment skill through
  the CLI, plugin, and web publication surfaces, and include every AEP command in language-model and MCP inventory
  regression coverage.

• #46
  89b5464 Thanks
  @nkavian! - Publish macOS release artifacts for Apple Silicon and Intel Macs, render a
  multi-architecture Homebrew Cask, and point update/install messaging at the hosted install instructions.

• #47
  f3e82c5 Thanks
  @nkavian! - Publish the npm package as a compatibility notice that points users and
  agents to the signed native InFlow CLI instead of running commands or managing credentials.

  Check GitHub Releases for advisory signed-binary updates, surface a one-line human notice, return structured
  current/latest version metadata to agents, bound release checks to a short deadline, provide Homebrew and hosted
  installer upgrade guidance, and send the installed CLI version on InFlow API requests.

  Prepare native x64 and ARM64 Windows release payloads for Azure Artifact Signing, sign the executable before building
  the MSI, sign the MSI before generating checksums and WinGet manifests, and keep unsigned nonpublishing workflow
  validation available without production credentials.

• #38
  ce2191a Thanks
  @nkavian! - Add MPP and x402 Fetch commands for completing deferred payment
  transactions, including structured continuation tool input from Pay, credential-safe seller replay, and
  replay-outcome-unknown error handling.

• #39
  fda6120 Thanks
  @nkavian! - Make MPP and x402 pay/fetch AEP-aware. Seller requests complete AEP
  authentication before payment creation, compose non-colliding AEP and payment credentials on the final replay, and
  preserve the payment fetch continuation contract. AEP fetch reports payment-required handoffs, and combined inspect
  reports blocked AEP payment inspection without creating grants, approvals, or payments.

• #35
  e4d4b0f Thanks
  @nkavian! - Require Node.js 24.15.0 or newer for the command-line package, development
  builds, and continuous integration.

• #59
  6d3191c Thanks
  @nkavian! - Add self-contained Linux archives, Debian and RPM system-service packages,
  and a checksummed hosted installer with encrypted local vault storage, same-executable Unix socket peer verification,
  and signed APT and RPM repository metadata.

Patch Changes

• #53
  552157e Thanks
  @nkavian! - Harden signed credential storage recovery for SQLite corruption, interrupted
  secret lifecycle work, and expired AEP credential cleanup.

• #59
  51d6035 Thanks
  @nkavian! - Use the latest AEP libraries and keep the internal user profile command out
  of the CLI, MCP, and agent documentation surfaces.

• #36
  647cec4 Thanks
  @nkavian! - Add the SQLite metadata repository and transactional secret-lifecycle
  foundation used by the signed command-line application.

• #50
  5fc1f7b Thanks
  @nkavian! - Display unsupported CLI version responses from InFlow as actionable upgrade
  errors.

• #59
  51d6035 Thanks
  @nkavian! - Report locally stored active session credentials in AEP Status output and
  return an actionable not-enrolled error when the Service no longer recognizes the locally stored Agent identity.

• #54
  9b9af54 Thanks
  @nkavian! - Decode MPP receipts by their standard base fields and project nested
  settlement details in payment output.

• #61
  f0e0f8a Thanks
  @nkavian! - Declare the Linux RPM package under the repository's MIT license.

• #51
  eed570b Thanks
  @nkavian! - Report rejected authenticated account requests as actionable authentication
  errors instead of generic failures.

• #59
  51d6035 Thanks
  @nkavian! - Recognize the packaged command-line symlink as the same executable as its
  signed local vault daemon.

• #59
  51d6035 Thanks
  @nkavian! - Make vault unlock idempotent when the vault is already unlocked and report
  rejected PINs or passphrases as unlock failures.

• #54
  c84e078 Thanks
  @nkavian! - Run MPP challenge, credential, and receipt handling against the pinned
  upstream conformance suite.

• #60
  93dc1a1 Thanks
  @nkavian! - Exercise secure vault daemon, storage, client, peer-verification, and Agent
  Enrollment Protocol failure paths.

• #59
  51d6035 Thanks
  @nkavian! - Replace incompatible running macOS vault daemons before commands access
  vault-backed state after an in-place application update.

• #59
  51d6035 Thanks
  @nkavian! - Harden local vault transport limits, secret-reference integrity,
  locked-state reporting, terminal passphrase handling, credential cleanup, and signed-build compatibility checks.

• #59
  51d6035 Thanks
  @nkavian! - Prepare the signed native CLI for local encrypted vault storage by packaging
  the vault daemon runtime, exposing vault lifecycle commands, enforcing daemon sleep-lock policy, adding macOS
  peer-verification plumbing, and wiring native dependencies.

• #41
  d216e08 Thanks
  @nkavian! - Expand regression coverage for secure storage, payment completion failures,
  and AEP-aware payment inspection.

• #59
  6d3191c Thanks
  @nkavian! - Verify the Developer-ID-signed macOS package across vault initialization,
  credential persistence, process reuse, locking, peer rejection, logout, and daemon shutdown.

• #40
  9a236ad Thanks
  @nkavian! - Add the macOS signed application packaging and Homebrew Cask rendering
  pipeline used for the InFlow command-line executable.