v0.3.0

Agentpost 0.3.0 brings per-inbox forwarding and webhooks, registration metadata, recoverable send keys, and byte-preserving attachments to the published CLI, MCP and self-hosted Worker.

• Forward incoming mail with global defaults and per-inbox inherit/custom/off settings. Retain originals, restrict destinations to verified operator-approved addresses, and block marked forwarding loops.
• Add signed per-inbox received-email webhooks, encrypted receiver settings, delivery history, bounded retries and dedicated queues.
• Generate UUIDv4 idempotency keys when omitted, return them on client success/failure, and preserve selected keys across retries.
• Issue unnamed inboxes with three random English words joined by hyphens, while retaining custom names. Store and edit optional notes and multiple registration URLs through the API, CLI and MCP.
• Preserve exact attachment bytes with Base64 raw MIME sending, including text-file line endings, Unicode names, alternative bodies and threaded replies.
• Improve D1 indexes and bounded recovery, R2 integrity/size checks and stream cleanup, and mail/webhook queue isolation. Require explicit deployment credentials and document scoped Cloudflare permissions.
• Expand bounded formal verification, real-storage race replays and mutation tests. Distribute the updated CLI/MCP and seven standalone executables through signed releases and npm OIDC publishing.
• Add the bilingual product website, supplied logo and continuous alias animation. Explain receiving, forwarding, sending and replying in the README and website.

Existing hosts must apply migrations through 0009_recovery_indexes.sql and update queue bindings before deploying. Forwarding and webhooks remain disabled until configured by the operator. Updating a CLI does not update a Worker; see installation and deployment.

日本語の変更履歴 · Verified installation

Download source, npm archive or the executable for your platform from this release. Verify GitHub attestations and SHA256SUMS using the installation guide before running downloaded code.

Agentpost gives AI agents random or custom email addresses on an operator-owned domain,
with send/receive/reply, a standalone CLI, MCP, and resumable mailbox events.
Token and Cloudflare Access OAuth modes preserve per-inbox ownership. Raw-first storage,
conditional send claims, adversarial tests, formal verification, and continuous security
checks protect the documented boundaries.

Source and standalone executables support self-hosted installations. Cloudflare Email Sending remains Beta.
Verify each download's GitHub attestation and SHA256SUMS before installing.
This release does not deploy a Worker or certify production readiness.

What's Changed

Other Changes

• Adopt the supplied Agentpost logo by @upamune in #14
• Add signed inbox webhooks, automatic send keys, and faster verified CI by @upamune in #15
• Publish a bilingual Agentpost website on GitHub Pages by @upamune in #16
• Lead with per-site aliases and generate three-word addresses by @upamune in #17
• Forward incoming mail with global defaults and inbox overrides by @upamune in #18
• Show send/reply capabilities and animate per-site aliases by @upamune in #19
• Store optional inbox notes and registration URLs across API CLI and MCP by @upamune in #20
• Harden Cloudflare storage and queue recovery by @upamune in #21
• Harden deployment credentials and preserve attachment bytes by @upamune in #22
• Release v0.3.0: forwarding, webhooks and coordinated client upgrades by @upamune in #23

Full Changelog: v0.2.0...v0.3.0

v0.2.0

Agentpost gives AI agents random or custom email addresses on an operator-owned domain,
with send/receive/reply, a standalone CLI, MCP, and resumable mailbox events.
Token and Cloudflare Access OAuth modes preserve per-inbox ownership. Raw-first storage,
conditional send claims, adversarial tests, formal verification, and continuous security
checks protect the documented boundaries.

Source and standalone executables support self-hosted installations. Cloudflare Email Sending remains Beta.
Verify each download's GitHub attestation and SHA256SUMS before installing.
This release does not deploy a Worker or certify production readiness.

What's Changed

Other Changes

• Wait for consistent npm metadata before signature audit by @upamune in #12
• Add safe outbound attachments and simplify the README by @upamune in #13

Full Changelog: v0.1.4...v0.2.0

v0.1.4

Agentpost gives AI agents random or custom email addresses on an operator-owned domain,
with send/receive/reply, a standalone CLI, MCP, and resumable mailbox events.
Token and Cloudflare Access OAuth modes preserve per-inbox ownership. Raw-first storage,
conditional send claims, adversarial tests, formal verification, and continuous security
checks protect the documented boundaries.

Source and standalone executables support self-hosted installations. Cloudflare Email Sending remains Beta.
Verify each download's GitHub attestation and SHA256SUMS before installing.
This release does not deploy a Worker or certify production readiness.

What's Changed

Other Changes

• Wait for npm processing with bounded verification retries by @upamune in #10
• Bound local inputs and detect stalled sends by @upamune in #11

Full Changelog: v0.1.3...v0.1.4

v0.1.3

Agentpost gives AI agents random or custom email addresses on an operator-owned domain,
with send/receive/reply, a standalone CLI, MCP, and resumable mailbox events.
Token and Cloudflare Access OAuth modes preserve per-inbox ownership. Raw-first storage,
conditional send claims, adversarial tests, formal verification, and continuous security
checks protect the documented boundaries.

Source and standalone executables support self-hosted installations. Cloudflare Email Sending remains Beta.
Verify each download's GitHub attestation and SHA256SUMS before installing.
This release does not deploy a Worker or certify production readiness.

What's Changed

Other Changes

• Fix local npm archive resolution and release 0.1.3 by @upamune in #9

Full Changelog: v0.1.2...v0.1.3

v0.1.2

Agentpost gives AI agents random or custom email addresses on an operator-owned domain,
with send/receive/reply, a standalone CLI, MCP, and resumable mailbox events.
Token and Cloudflare Access OAuth modes preserve per-inbox ownership. Raw-first storage,
conditional send claims, adversarial tests, formal verification, and continuous security
checks protect the documented boundaries.

Source and standalone executables support self-hosted installations. Cloudflare Email Sending remains Beta.
Verify each download's GitHub attestation and SHA256SUMS before installing.
This release does not deploy a Worker or certify production readiness.

What's Changed

Other Changes

• ci: enforce pinned cccc complexity budgets by @upamune in #4
• Refactor all complexity exceptions and lower limits to 12/8 by @upamune in #5
• Lower complexity limits to 8 cognitive and 6 cyclomatic by @upamune in #6
• Distribute standalone CLI and MCP executables for seven platforms by @upamune in #7
• Install the CLI with npm and publish verified packages through OIDC by @upamune in #8

Full Changelog: v0.1.1...v0.1.2

v0.1.1

Agentpost gives AI agents random or custom email addresses on an operator-owned domain,
with send/receive/reply, a Bun CLI, MCP, and resumable mailbox events.
Token and Cloudflare Access OAuth modes preserve per-inbox ownership. Raw-first storage,
conditional send claims, adversarial tests, formal verification, and continuous security
checks protect the documented boundaries.

This is an early source release for self-hosted installations. Cloudflare Email Sending remains Beta.
Verify the archive's GitHub attestation and SHA256SUMS before installing.
This release does not deploy a Worker or certify production readiness.

What's Changed

Other Changes

• fix: isolate TLC temporary modules during parallel verification by @upamune in #3

Full Changelog: v0.1.0...v0.1.1

v0.1.0

Agentpost gives AI agents random or custom email addresses on an operator-owned domain,
with send/receive/reply, a Bun CLI, MCP, and resumable mailbox events.
Token and Cloudflare Access OAuth modes preserve per-inbox ownership. Raw-first storage,
conditional send claims, adversarial tests, formal verification, and continuous security
checks protect the documented boundaries.

This is an early source release for self-hosted installations. Cloudflare Email Sending remains Beta.
Verify the archive's GitHub attestation and SHA256SUMS before installing.
This release does not deploy a Worker or certify production readiness.

What's Changed

Other Changes

• Harden security scans and verify public repository protections by @upamune in #1
• Add security fuzzing and verified immutable source releases by @upamune in #2

New Contributors

• @upamune made their first contribution in #1

Full Changelog: https://github.com/upamune/agentpost/commits/v0.1.0