v0.17.1

v0.17.1 — The local dashboard now opens complete canonical artifact records instead of summary-only placeholders

Released 2026-07-31.

What changed

Work cards mount their real bodies, envelopes, events and references

fix · normal impact

The local HTML dashboard now resolves every visible incoming and outgoing row through the same canonical cache projection as a2a show. Selecting a work card displays its original Markdown body, schema-owned envelope facts, lifecycle events, references, digest and sync state instead of reporting that no detail record exists. Space-qualified lookups also keep identical artifact IDs in different spaces distinct and deterministic.

Affects: a2a html, artifact details, multi-space dashboards

What to do (local): Update when 0.17.1 is released to inspect complete artifact details in generated dashboards; no space or document migration is required.

Check: a2a version

a2a update --yes

Passive dashboard snapshots retain canonical attention and move ownership

fix · low impact

Dashboard-only inbox and outbox snapshots now carry the existing canonical action reasons and whose-move projection without advancing the CLI inbox cursor. Approval gates, disputes and other real attention signals therefore reach severity badges and overview counts, while routine agent work remains outside the narrower human-attention queue. Existing inbox, outbox and show JSON contracts remain unchanged.

Affects: a2a html, attention badges, overview

Known issues

The macOS companion remains ad-hoc signed and may require manual approval

known issue · normal impact

The release cohort authenticates the exact macOS app and ad-hoc signing protects its bundle integrity, but the app is not identified or notarized through a paid Apple Developer account. A quarantined download may require one explicit System Settings → Privacy & Security → Open Anyway decision. Interactive Notification Center, Focus, Login Items, VS Code trust/profile, and remote-window checks remain release-environment evidence rather than claims inferred from hermetic tests.

Affects: macOS notifications, VS Code notifications

Current guidance: Keep Gatekeeper enabled and approve only the A2A Notifier version obtained through the verified a2a release cohort.

Install or update

macOS and Linux:

curl -fsSL https://raw.githubusercontent.com/ydnikolaev/a2ahub/main/scripts/install.sh | sh

Already installed? Run a2a update --yes. Windows archives and manual downloads are in the assets below.

Release artifacts include checksums, per-asset Sigstore bundles, SBOMs, and SLSA provenance. See SECURITY.md for verification commands.

Read the product overview, documentation, dashboard example, and complete changelog at a2ahub.dev.