AgentMBX v0.5.6

What's Changed

• docs(T159): handoff context spec — bounded per-identity resume summary by @kryptobaseddev in #71
• docs(T232): amend ADR-035 and POLICY §7 for cloud accounts and owner authenticators by @kryptobaseddev in #83
• fix(T326): a mailbox registered after a resumed Claude start follows the resumed session id by @kryptobaseddev in #85
• docs(T162): automatic resume across providers — verification plan by @kryptobaseddev in #75
• feat(T312/T313): daemon HUD snapshots and statusline adapters by @kryptobaseddev in #81
• feat(T311): agentmbx status --json emits mbx.status/v1 by @kryptobaseddev in #82
• feat(T313): copilot/cursor/gemini statusline adapters + wiring docs by @kryptobaseddev in #86
• release(T308): v0.5.6 by @kryptobaseddev in #87

Full Changelog: v0.5.5...v0.5.6

AgentMBX v0.5.5

What's Changed

• chore(T320): CLEO accepts merged-PR CI results as evidence by @kryptobaseddev in #80
• docs(T164): durable relay spec: transactional persistence, acceptance, recovery by @kryptobaseddev in #73
• feat(T166): durable relay client: persisted wire, signed accepts, receive checkpoint, quarantine, receipts over the relay by @kryptobaseddev in #79
• feat(T165): durable relay store (SQLite) with signed v2 accept/pull/ack by @kryptobaseddev in #74
• release(T166): v0.5.5 by @kryptobaseddev in #84

Full Changelog: v0.5.4...v0.5.5

AgentMBX v0.5.4

What's Changed

• docs(T215): README source-install example points at v0.5.3 by @kryptobaseddev in #68
• feat(T219): ledger rows show the matched project_key by @kryptobaseddev in #69
• fix(S2): no duplicate copy for a bare name on both hosts; retired phantoms send no receipt by @kryptobaseddev in #70
• fix(S3): lean mbx notices: one-line wake, no repeat on the wake prompt, policy recap once by @kryptobaseddev in #72
• fix(T219): self-hosted git remotes become a digest in the project key by @kryptobaseddev in #77
• fix(T309/T310/T315/T316): Claude /clear keeps the mailbox; exact status resolver; claim known mailboxes by name by @kryptobaseddev in #76
• release(T308): v0.5.4 by @kryptobaseddev in #78

Full Changelog: v0.5.3...v0.5.4

AgentMBX v0.5.3

What's Changed

• docs(T156): session catch-up spec — durable consumer checkpoints per identity by @kryptobaseddev in #61
• feat(S1): self-healing skill, skills-CLI aware, and the guide over MCP by @kryptobaseddev in #64
• fix(S2): no phantom mailboxes from received mail; doctor --fix; return to sender by @kryptobaseddev in #63
• fix(S1): write the skill atomically (temp file + rename) by @kryptobaseddev in #66
• feat(T157/T158): durable consumer checkpoints per identity, mbx_catchup by @kryptobaseddev in #62
• feat(T218/T219): signed cross-host receipts and a cross-host project ledger by @kryptobaseddev in #65
• release(T215): v0.5.3 by @kryptobaseddev in #67

Full Changelog: v0.5.2...v0.5.3

AgentMBX v0.5.2

What's Changed

• feat(T205): send-time recipient truth by @kryptobaseddev in #51
• T204: chosen identities only (unbound start, resume, per-project list, register) by @kryptobaseddev in #52
• feat(T207): sender receipts with mbx_sent and per-recipient thread lines by @kryptobaseddev in #53
• T209: identity prune and owner-signed forward; docs for chosen identities by @kryptobaseddev in #54
• fix(T206): process-evidence load resilience by @kryptobaseddev in #55
• feat(T208): project ledger, owner-signed project lead and mbx_forward by @kryptobaseddev in #56
• T210: release the identity when an mbx server is ended by SIGTERM/SIGHUP by @kryptobaseddev in #57
• feat(T211): doctor surfaces stranded mail, pending identities and prune weight by @kryptobaseddev in #58
• release(T210): v0.5.2 by @kryptobaseddev in #59
• Release v0.5.2: chosen identities, delivery truth and project oversight (T203, P0) by @kryptobaseddev in #60

Full Changelog: v0.5.1...v0.5.2

AgentMBX v0.5.1

What's Changed

• Clarify agent workflow and organize the native feature roadmap by @kryptobaseddev in #46
• fix(T201): heal stale peer addresses with signed challenges and presence by @kryptobaseddev in #48
• fix(T104): relay depth counts relays, not conversation turns by @kryptobaseddev in #49
• fix(T201): send queued mail as soon as a peer is heard from again by @kryptobaseddev in #50
• release: v0.5.1 stable local and LAN mailbox base by @kryptobaseddev in #47

Full Changelog: v0.5.0...v0.5.1

AgentMBX v0.5.0

AgentMBX v0.5.0 adds durable mailbox replay and read-only session diagnostics.

• mbx_replay and agentmbx replay return bounded pages ordered by first mailbox visibility. Persist the returned cursor to resume across restarts or explicit provider handoffs. Completed cursors poll newly visible mail without rescanning history.
• Replay preserves read and ACK state. Bodies and envelope metadata are data; use mbx_read for current trust and owner policy before acting.
• agentmbx diagnostics --mailbox NAME [--cli CLI --session ID] --json reports bounded, redacted mailbox, lease, queue and receipt evidence. Connector version remains unknown unless directly observed.
• Live MCP handover sends a tool-list change notification so clients can discover the replay tool.

This release migrates the mailbox database to schema 3 and fences incompatible old message writers. Before activating it, pause daemon traffic and make a coherent backup. Keep the existing installation type during the upgrade, let exact-session connectors adopt the new build, then resume the daemon. See the coordinated rollout procedure. Mail, signed envelopes and ACK state are preserved; rollback requires the matching database backup and previous binaries.

Source installation and signed executable assets are distributed through GitHub. A registry npm publication is not claimed. The local console, shared topic-room delivery and interoperability extensions remain future work.

AgentMBX v0.4.1

AgentMBX 0.4.1 fixes mailbox recovery and session handoff across hosted coding-agent connectors.

• Hosted MCP upgrades retire every old lease generation and preserve released identities across subsequent upgrades. Later builds can reload without getting stuck behind a one-time restart guard.
• A mailbox conflict opens a separate temporary recovery identity, keeping ownership controls usable without exposing the occupied mailbox. Failed claims after release remain recoverable.
• Claude terminal-exit hooks explicitly release the exact session's lease. The updated skill explains completion, provider changes, crashed terminals, and owner-authorized recovery when closure is uncertain.
• Session status and the optional Claude HUD helper count only the current mailbox sender's queued outgoing messages.
• Setup and packaged skill assets match the updated MCP implementation.

Live or uncertain holders remain protected. A surviving shared provider service is not evidence that its conversation ended; use explicit release or owner-authorized takeover rather than shortening the timeout blindly.

Validation: macOS and Linux CI passed; the full local suite passed with 589 passing tests, 2 skips and 1 existing TODO. Release binaries undergo full tests, type checking and standalone MCP smoke checks on all four platforms.

Install using the signed standalone assets below, or with Node 24+:

npm i -g https://github.com/kryptobaseddev/agentmbx/archive/refs/tags/v0.4.1.tar.gz
agentmbx setup
agentmbx doctor

The npm registry package is not published; the tagged GitHub source installation above is verified. Legacy running connectors may require one MCP reconnect before the updated handoff behavior applies.

Changes: #44

AgentMBX v0.4.0

What's Changed

• fix(T104): expire relay exposures independently by @kryptobaseddev in #4
• fix(T105): preserve native harness permission prompts by @kryptobaseddev in #5
• feat(T105): prepare interactive native provider sessions by @kryptobaseddev in #6
• fix(T104): saturate relay depth at the wire limit by @kryptobaseddev in #7
• fix(T083): backport malformed envelope metadata guards by @kryptobaseddev in #8
• fix(T083): backport grant timestamp validation by @kryptobaseddev in #9
• fix(T083): revalidate cached owner authority on main by @kryptobaseddev in #10
• fix(T106): reject malformed envelope core fields by @kryptobaseddev in #11
• fix(T105): retain native harness recovery across failures by @kryptobaseddev in #12
• fix(policy): validate signed and retained policy records (T107) by @kryptobaseddev in #13
• fix(T108): validate local daemon diagnostic identity by @kryptobaseddev in #14
• fix(T109): preserve unverified listeners during setup by @kryptobaseddev in #15
• fix(policy): enforce signed revocation time boundaries (T110) by @kryptobaseddev in #16
• fix(kimi): validate wake status and submission receipts (T111) by @kryptobaseddev in #17
• fix(opencode): verify synthetic wake admission receipts (T112) by @kryptobaseddev in #18
• fix(T083): fence CLI mailbox access and retire implicit links by @kryptobaseddev in #3
• feat(identity): add explicit MCP recovery and read-only inventory (T082) by @kryptobaseddev in #2
• fix(T083): smooth schema-2 transitions for live sessions by @kryptobaseddev in #19
• fix(T082): converge lease claims inside one MCP process instead of erroring by @kryptobaseddev in #20
• fix(T083): point refused CLI mailbox access at the real recovery paths by @kryptobaseddev in #21
• docs(T007): cloud relay design synthesis for owner review by @kryptobaseddev in #22
• docs(T028): envelope body encryption design options by @kryptobaseddev in #23
• feat(T028): envelope body encryption foundation (seal/open + enc v1 shape) by @kryptobaseddev in #24
• feat(T028): pairwise enc-key exchange between approved peers by @kryptobaseddev in #25
• feat(T028): signatures commit to sealed ciphertext; receive opens sealed bodies by @kryptobaseddev in #26
• docs(T035): cloud architecture threat model ADR for owner acceptance by @kryptobaseddev in #27
• feat(T097): wake MCP-bound OpenCode agents via the service directory fallback by @kryptobaseddev in #28
• test(T097): cover the opencode service directory wake fallback by @kryptobaseddev in #29
• fix(T082): adopt our own base's name instead of refusing session claims as occupied by @kryptobaseddev in #30
• feat(T082): sessions adopt newly deployed builds without any restart by @kryptobaseddev in #31
• feat(T007): untrusted store-and-forward relay reference + ADR-035 conformance gates by @kryptobaseddev in #32
• feat(T007): daemon relay transport — offline peers receive sealed mail over the relay by @kryptobaseddev in #33
• feat(T007): operator commands for the relay by @kryptobaseddev in #34
• feat(T007): per-owner quotas on the relay (ADR-035) by @kryptobaseddev in #35
• docs(T007): relay protocol spec addendum; doctor reports relay status by @kryptobaseddev in #36
• docs(T048): 0.4.0 changelog covers the full day's shipped work by @kryptobaseddev in #37
• docs(T040): bring the agent skill to 0.4.0 by @kryptobaseddev in #38
• docs(T003): INSTALL.md covers 0.4.0 identities and the relay by @kryptobaseddev in #39
• refactor(T067): node core no longer imports the kimi-web adapter by @kryptobaseddev in #40
• fix(T082): re-exec children keep the session identity and cli classification by @kryptobaseddev in #41
• test(T113): close stub-server connections so keep-alive cannot retain the runner by @kryptobaseddev in #42

New Contributors

• @kryptobaseddev made their first contribution in #4

Full Changelog: v0.3.1...v0.4.0

AgentMBX v0.3.1

Full Changelog: v0.3.0...v0.3.1