AgentMBX v0.4.0

What's Changed

• fix(T104): expire relay exposures independently by @kryptobaseddev in #4
• fix(T105): preserve native harness permission prompts by @kryptobaseddev in #5
• feat(T105): prepare interactive native provider sessions by @kryptobaseddev in #6
• fix(T104): saturate relay depth at the wire limit by @kryptobaseddev in #7
• fix(T083): backport malformed envelope metadata guards by @kryptobaseddev in #8
• fix(T083): backport grant timestamp validation by @kryptobaseddev in #9
• fix(T083): revalidate cached owner authority on main by @kryptobaseddev in #10
• fix(T106): reject malformed envelope core fields by @kryptobaseddev in #11
• fix(T105): retain native harness recovery across failures by @kryptobaseddev in #12
• fix(policy): validate signed and retained policy records (T107) by @kryptobaseddev in #13
• fix(T108): validate local daemon diagnostic identity by @kryptobaseddev in #14
• fix(T109): preserve unverified listeners during setup by @kryptobaseddev in #15
• fix(policy): enforce signed revocation time boundaries (T110) by @kryptobaseddev in #16
• fix(kimi): validate wake status and submission receipts (T111) by @kryptobaseddev in #17
• fix(opencode): verify synthetic wake admission receipts (T112) by @kryptobaseddev in #18
• fix(T083): fence CLI mailbox access and retire implicit links by @kryptobaseddev in #3
• feat(identity): add explicit MCP recovery and read-only inventory (T082) by @kryptobaseddev in #2
• fix(T083): smooth schema-2 transitions for live sessions by @kryptobaseddev in #19
• fix(T082): converge lease claims inside one MCP process instead of erroring by @kryptobaseddev in #20
• fix(T083): point refused CLI mailbox access at the real recovery paths by @kryptobaseddev in #21
• docs(T007): cloud relay design synthesis for owner review by @kryptobaseddev in #22
• docs(T028): envelope body encryption design options by @kryptobaseddev in #23
• feat(T028): envelope body encryption foundation (seal/open + enc v1 shape) by @kryptobaseddev in #24
• feat(T028): pairwise enc-key exchange between approved peers by @kryptobaseddev in #25
• feat(T028): signatures commit to sealed ciphertext; receive opens sealed bodies by @kryptobaseddev in #26
• docs(T035): cloud architecture threat model ADR for owner acceptance by @kryptobaseddev in #27
• feat(T097): wake MCP-bound OpenCode agents via the service directory fallback by @kryptobaseddev in #28
• test(T097): cover the opencode service directory wake fallback by @kryptobaseddev in #29
• fix(T082): adopt our own base's name instead of refusing session claims as occupied by @kryptobaseddev in #30
• feat(T082): sessions adopt newly deployed builds without any restart by @kryptobaseddev in #31
• feat(T007): untrusted store-and-forward relay reference + ADR-035 conformance gates by @kryptobaseddev in #32
• feat(T007): daemon relay transport — offline peers receive sealed mail over the relay by @kryptobaseddev in #33
• feat(T007): operator commands for the relay by @kryptobaseddev in #34
• feat(T007): per-owner quotas on the relay (ADR-035) by @kryptobaseddev in #35
• docs(T007): relay protocol spec addendum; doctor reports relay status by @kryptobaseddev in #36
• docs(T048): 0.4.0 changelog covers the full day's shipped work by @kryptobaseddev in #37
• docs(T040): bring the agent skill to 0.4.0 by @kryptobaseddev in #38
• docs(T003): INSTALL.md covers 0.4.0 identities and the relay by @kryptobaseddev in #39
• refactor(T067): node core no longer imports the kimi-web adapter by @kryptobaseddev in #40
• fix(T082): re-exec children keep the session identity and cli classification by @kryptobaseddev in #41
• test(T113): close stub-server connections so keep-alive cannot retain the runner by @kryptobaseddev in #42

New Contributors

• @kryptobaseddev made their first contribution in #4

Full Changelog: v0.3.1...v0.4.0