agent-team-mail: vanhemmat versiot ja versiohistoria

What's Changed
- chore(release): merge 1.5.0 release back into develop by @randlee in #1174
- docs(plans): Phase AW — unified retained runtime logging and graft observability (#905, #904) by @randlee in #1137
- fix(release): block published crates whose workspace deps are missing from the publish manifest by @randlee in #1175
- feat(observability): AW.1 tracing bridge into sc-observability and runtime stderr retirement by @randlee in #1176
- AW.4: graft fallback observability by @randlee in #1181
- docs(plans): Phase AX plan — task state machine, Herdr reminders, pushed escalation by @randlee in #1183
- AW.5: native tool parity with the CLI by @randlee in #1184
- fix(send-to): seam the wrapper notification so tests never reach osascript by @randlee in #1190
- feat(ax1): queue template class and default template fixes (AX.1) by @randlee in #1185
- feat(diagnostics): AW.2 SQLite diagnostic timeline by @randlee in #1179
- AW.3 health and retained diagnostics query by @randlee in #1182
- fix(aw2): AW2-QA-I2 real diagnostic saturation lane test (AC7) by @randlee in #1195
- feature/ax2 herdr template rendering by @randlee in #1186
- fix: align doctor diagnostics health projection by @randlee in #1196
- fix: harden diagnostics integration guards by @randlee in #1198
- fix: close Phase AW final gate findings by @randlee in #1200
- AX.4: task completion and inspection CLI by @randlee in #1194
- feat(storage): add AX3 task state machine by @randlee in #1191
- AX5: add Herdr task reminder cycle by @randlee in #1201
- docs(agents): flaky-test-qa rejects masking fixes and unbounded waits by @randlee in #1208
- fix(phase-aw): typed diagnostic drop classification, counter-fold, idempotent attach, dev-only boundary by @randlee in #1210
- fix(phase-aw): redesign flaky/race test findings B1-B8 with deterministic sync by @randlee in #1209
- tooling: schema-reviewer agent for wire-schema semver governance by @randlee in #1218
- feat(ax6): lead notification and escalation doctor by @randlee in #1204
- docs(adr-020): fix stale atm-daemon path after crate rename by @randlee in #1203
- fix(cross-host): AV-HOTFIX-001..004 consolidated round (no local echo, trust validation, versioned envelope, rejection diagnostics) by @randlee in #1220
- site: announce atm-core v1.5.0 by @randlee in #1202
- fix: triage-report resolver, peer delivery observability, CLI ack/read errors by @randlee in #1221
- Main->develop by @rand-lee in #1224
- fix(ci): AW-PARITY-ISOLATION-1 — debug atm-graft for CLI parity lane by @randlee in #1227
- fix(phase-aw): diagnostics pagination cap-alignment, admission routing, typed client by @randlee in #1211
- fix(aw-readiness): arch findings M1/M2/M3/M5/O5 by @randlee in #1212
- fix: harden AW readiness findings by @randlee in #1215
- fix(runtime): keep remote receiver hooks peer-owned by @randlee in #1222
- Merge develop into phase-aw after AW readiness stack by @randlee in #1231
- test: bound HTTP runtime gate waits by @randlee in #1239
- fix(tooling): support Windows daemon-switch lifecycle by @rand-lee in #1223
- fix(tooling): daemon-switch optional stop honesty on Linux + canonical suite in CI by @randlee in #1225
- docs(adr): ADR-053 amendment — Windows out of temporary-launch scope; REQ-P-DAEMON-SWITCH-002 by @randlee in #1226
- feat(tooling): daemon-switch --release and --worktree modes (DAEMON-SWITCH-MODES-1) by @randlee in #1228
- fix(daemon-switch): isolate release and service operations (qa-pr1228-r1 fixes) by @randlee in #1233
- ci: cancel superseded PR runs via per-ref concurrency group by @randlee in #1251
- skill: /gh-stack-view one-call stack coherence table by @randlee in #1250
- merge(ax): develop into integrate/phase-ax (stack layer 1; supersedes #1232) by @randlee in #1248
- fix(ax): phase-end review easy set (AXPE-BG-001/002, CPR-001/M1, ARCH-002) by @randlee in #1234
- fix: close AX phase-end structural findings by @randlee in #1236
- docs(ax): refresh phase-end evidence coverage by @randlee in #1237
- docs(ax): r

What's Changed
- chore(release): merge 1.5.0 release back into develop by @randlee in #1174
- docs(plans): Phase AW — unified retained runtime logging and graft observability (#905, #904) by @randlee in #1137
- fix(release): block published crates whose workspace deps are missing from the publish manifest by @randlee in #1175
- feat(observability): AW.1 tracing bridge into sc-observability and runtime stderr retirement by @randlee in #1176
- AW.4: graft fallback observability by @randlee in #1181
- docs(plans): Phase AX plan — task state machine, Herdr reminders, pushed escalation by @randlee in #1183
- AW.5: native tool parity with the CLI by @randlee in #1184
- fix(send-to): seam the wrapper notification so tests never reach osascript by @randlee in #1190
- feat(ax1): queue template class and default template fixes (AX.1) by @randlee in #1185
- feat(diagnostics): AW.2 SQLite diagnostic timeline by @randlee in #1179
- AW.3 health and retained diagnostics query by @randlee in #1182
- fix(aw2): AW2-QA-I2 real diagnostic saturation lane test (AC7) by @randlee in #1195
- feature/ax2 herdr template rendering by @randlee in #1186
- fix: align doctor diagnostics health projection by @randlee in #1196
- fix: harden diagnostics integration guards by @randlee in #1198
- fix: close Phase AW final gate findings by @randlee in #1200
- AX.4: task completion and inspection CLI by @randlee in #1194
- feat(storage): add AX3 task state machine by @randlee in #1191
- AX5: add Herdr task reminder cycle by @randlee in #1201
- docs(agents): flaky-test-qa rejects masking fixes and unbounded waits by @randlee in #1208
- fix(phase-aw): typed diagnostic drop classification, counter-fold, idempotent attach, dev-only boundary by @randlee in #1210
- fix(phase-aw): redesign flaky/race test findings B1-B8 with deterministic sync by @randlee in #1209
- tooling: schema-reviewer agent for wire-schema semver governance by @randlee in #1218
- feat(ax6): lead notification and escalation doctor by @randlee in #1204
- docs(adr-020): fix stale atm-daemon path after crate rename by @randlee in #1203
- fix(cross-host): AV-HOTFIX-001..004 consolidated round (no local echo, trust validation, versioned envelope, rejection diagnostics) by @randlee in #1220
- site: announce atm-core v1.5.0 by @randlee in #1202
- fix: triage-report resolver, peer delivery observability, CLI ack/read errors by @randlee in #1221
- Main->develop by @rand-lee in #1224
- fix(ci): AW-PARITY-ISOLATION-1 — debug atm-graft for CLI parity lane by @randlee in #1227
- fix(phase-aw): diagnostics pagination cap-alignment, admission routing, typed client by @randlee in #1211
- fix(aw-readiness): arch findings M1/M2/M3/M5/O5 by @randlee in #1212
- fix: harden AW readiness findings by @randlee in #1215
- fix(runtime): keep remote receiver hooks peer-owned by @randlee in #1222
- Merge develop into phase-aw after AW readiness stack by @randlee in #1231
- test: bound HTTP runtime gate waits by @randlee in #1239
- fix(tooling): support Windows daemon-switch lifecycle by @rand-lee in #1223
- fix(tooling): daemon-switch optional stop honesty on Linux + canonical suite in CI by @randlee in #1225
- docs(adr): ADR-053 amendment — Windows out of temporary-launch scope; REQ-P-DAEMON-SWITCH-002 by @randlee in #1226
- feat(tooling): daemon-switch --release and --worktree modes (DAEMON-SWITCH-MODES-1) by @randlee in #1228
- fix(daemon-switch): isolate release and service operations (qa-pr1228-r1 fixes) by @randlee in #1233
- ci: cancel superseded PR runs via per-ref concurrency group by @randlee in #1251
- skill: /gh-stack-view one-call stack coherence table by @randlee in #1250
- merge(ax): develop into integrate/phase-ax (stack layer 1; supersedes #1232) by @randlee in #1248
- fix(ax): phase-end review easy set (AXPE-BG-001/002, CPR-001/M1, ARCH-002) by @randlee in #1234
- fix: close AX phase-end structural findings by @randlee in #1236
- docs(ax): refresh phase-end evidence coverage by @randlee in #1237
- docs(ax): r

What's Changed
- docs(aq): ADR-058 Herdr local steer backend contract (lane A) by @randlee in #1039
- feat(aq1): trait foundation + atm queue by @randlee in #1040
- feat(aq1.5): graft receiver registration API + durable SQLite store (ADR-056) by @randlee in #1045
- feat: complete AQ2.6 Herdr steer backend by @randlee in #1042
- feat(aq-c): Send-To groundwork — ADR-055, ATM_TEMP resolve, transfer-script seam, sweeper by @randlee in #1043
- ci(aq): phase-aq evidence job (clean-runner live evidence for AQ1.9/AQ2.5/AQ3) by @randlee in #1058
- feat(aq2): atm-graft dual-channel queue delivery by @randlee in #1051
- ci: authenticate cargo-binstall bootstrap (fix macOS 403 bootstrap failures) by @randlee in #1061
- feat(aq1.6): graft receiver registration client — announce, refresh, unregister-on-drop by @randlee in #1046
- feat(aq1.7): graft endpoint consumer cutover — registry-backed delivery, _internal-nudge, doctor by @randlee in #1048
- fix(atm-herdr): isolate breaker test state — wall-clock race, not shared state by @randlee in #1060
- feat(aq1.8): retire the graft file record — registry + flock only (AI3133 closure) by @randlee in #1049
- feat(aq1.9): hermes-atm wheel bump + restart-matrix harness (m5 live run pending) by @randlee in #1050
- feat(aq2.5): queue delivery triggers — heartbeat hooks, bare-CLI FIFO + Stop-pull by @randlee in #1053
- fix(release): v1.4.4 round-3 — maturin toolchain components (sc-publish#72) by @randlee in #1073
- feat(aq3): tmux idle-drain + kind-agnostic recovery sweep by @randlee in #1054
- fix(aq1.9): restart-matrix evidence harness crash guard by @randlee in #1070
- feat(aq4): Send-To core — --attach/--from-json fan-out, staging, transfer invocation by @randlee in #1055
- feat(AQ2.7): add Herdr queue wake pump by @randlee in #1056
- fix(release): v1.4.4 round-3b — dynamic [project].version support (sc-publish#73) by @randlee in #1074
- feat(aq5): Send-To surface — pickers, shell entries, R8 convention, phase evidence register by @randlee in #1059
- feat(aq6): add sc-ecosystem release preflight gate by @randlee in #1066
- merge: develop (kit-era release, Phase AT/AU) into integrate/phase-aq by @randlee in #1076
- fix(aq1.9): assert crash recovery on lease-displacement observables, not wall clock; register AQ6-wyvern-pin-bump by @randlee in #1078
- docs(aq): Phase AQ closeout — statuses, tracking, AQ6 final evidence, §48 COMPLETE by @randlee in #1075
- fix(release): round-3 kit fixes — sdist matcher, universal wheels, tag-pinned checkout (v1.4.4) by @randlee in #1077
- Phase AQ: integrate/phase-aq → develop (14/14 sprints) by @randlee in #1079
- docs(aq1.5): backfill final QA PASS into audit trail (PR #1045 @ 1e21ff8) by @randlee in #1080
- docs(aq): critical-review fixes — CHANGELOG Unreleased, ADR-054 wording, AQ4 disclosure, audit window by @randlee in #1081
- fix(release): homebrew formula runtime break (pkgshare) + tag-pinned tooling checkouts — v1.4.4 round 4 by @randlee in #1083
- docs: v1.4.4 publish post-mortem — first-attempt success criteria by @randlee in #1084
- docs(skill): publishing — one-approval goal, runtime rehearsal, batch fixes, parallel channels by @randlee in #1085
- refactor/test: shared flag parsing in peer_launch_config; guard Send-To test-only seams (RBQA-F103/F104) by @randlee in #1089
- fix(daemon-bootstrap): register runtime maintenance so HerdrQueueWakePump actually starts (phase-end CRITICAL) by @randlee in #1087
- fix(test): bound two-runtime router tests by hang detector by @randlee in #1091
- fix(boundary): canonical backendType test fixture + taxonomy hardening (RBQA-F101/F102); pin atm-graft deps (AL.9) by @randlee in #1082
- fix(test): remove env leakage and wall-clock bounds flagged by phase-end flaky-test audit (FTQ-001..003) by @randlee in #1086
- fix(daemon-switch): repair Homebrew restore provenance by @randlee in #1092
- fix(hooks): close queue hook test teardown race on Windows by @randlee in #1093
- evidence(aq1.9): regenerate clean-runner restart-mat

What's Changed
- fix(graft): keep receiver endpoint record private by @randlee in #928
- Recover 3 orphaned AI36 finding records for re-verification by @randlee in #925
- sync: back-propagate main into develop (PR #914 hotfix) by @randlee in #915
- feat(cli): agent@host cross-host shorthand + trusted-peer host resolver (#901/#902) by @randlee in #933
- fix: drop .atm.toml activation gate, fail loud on real errors (GH #900) by @randlee in #934
- plan: Phase AS shared publish-kit migration by @randlee in #939
- docs: GH #864 canonical naming SSOT link + ingestion diagnostics by @randlee in #937
- docs+feat: permissive sender-identity ADR + non-blocking roster warning by @randlee in #938
- chore(tracking): remove worktree-tracking.md from repo by @randlee in #936
- Plan: Phase AO (opt-in mTLS) + Phase AP (outbound connectivity) by @randlee in #829
- AS.2: Justify ATM consumer-manifest activation by @randlee in #944
- AS.1: Freeze canonical publish-kit overlay by @randlee in #940
- docs(as4): record blocked PyPI publication receipt by @randlee in #947
- chore: prove publish-kit branch overlay by @randlee in #946
- fix(ci): centralize sc-compose revision pins by @randlee in #951
- Phase AS: shared publish-kit migration engineering (AS.1-AS.4) by @randlee in #954
- refactor(as5): retire bespoke Hermes PyPI pipeline by @randlee in #955
- Phase AS: merge AS.5 legacy-retirement delta by @randlee in #956
- Revert: pull Phase AS engineering back out of develop by @randlee in #957
- DRAFT: Phase AS engineering (AS.1-AS.5) -- for review, not merge by @randlee in #958
- plan: TLS transport isolation replan (freezes Phase AO) by @randlee in #959
- Revert unauthorized Phase AS redraft from develop by @randlee in #960
- AO2.1: Peer-wire policy and plain-pipeline baseline by @randlee in #961
- fix(sprint-report): don't gate in-progress sprints as data gaps by @randlee in #964
- AO2.2: isolated mTLS peer-wire byte-stream adapter by @randlee in #965
- docs(ao2): mark AO.1 complete, register sprint line by @randlee in #962
- AO2.3: runtime peer-wire mode seam by @randlee in #967
- AO2.4: Operational performance proof (shipped daemon, mode-aware benchmarking) by @randlee in #968
- fix(ao2): harden cleanup guards and version sync by @randlee in #970
- fix(daemon-switch): gate signed cli and daemon pairs by @randlee in #974
- fix(daemon-switch): gate signed cli and daemon pairs (cherry-pick to develop) by @randlee in #975
- fix(signing): migrate ATM binaries to Apple Development identity by @randlee in #976
- fix(smoke): AO2 benchmark harness peer-wire-mode isolation and daemon-switch hardening by @randlee in #977
- docs(ao2): AO2.5 benchmark-db-safety and daemon-switch launch-overlay plans by @randlee in #979
- Add canonical SC website (site/ + announcements/) by @randlee in #953
- docs(ao2): plan AO2.5.4/AO2.6/AO2.7/AO2.8 benchmark safety and parity sequence by @randlee in #980
- propagate documents by @rand-lee in #981
- fix(AO2.5): benchmark primary-db safety + daemon-switch launch overlay (AO2.5.1–.3b) by @randlee in #978
- fix(ao2.6): restore admission writer batching regression by @randlee in #982
- fix(smoke): mandatory benchmark snapshot/restore lifecycle (AO2.5.4) by @randlee in #983
- build: centralize pinned bootstrap tooling ('just bootstrap') by @randlee in #986
- fix(graft): receiver reconnect + nudge body propagation (GH-985) by @randlee in #987
- fix(benchmark): remove mutating daemon start from post-restore readiness check by @randlee in #992
- fix: scope benchmark daemon-switch preflight to owner UID by @randlee in #991
- fix(benchmark): regenerate stale mTLS identity during account bootstrap by @randlee in #993
- test(benchmark): fix WAL-mode snapshot contract regression from PR #992 by @randlee in #994
- fix: writer/batch-concurrency throughput regression (AO2.7 sqlite parity) by @randlee in #990
- fix(bench): cap atmbench connection workers to RLIMIT_NOFILE reserve by @randlee in #995
- fix(bench): dedupe signing identity select

What's Changed
- fix(release): package CLI OpenAPI contract by @randlee in #930
- chore(release): bump version to 1.4.3 by @randlee in #931
Full Changelog: v1.4.2...v1.4.3

Release Notes

Summary
- version: 1.3.1
- release date: 2026-07-15
- release owner: publisher (ATM release execution)
This release lands Phase AE (installed-copy packaging, docs/help surfacing,
publisher freshness gate) and Phase AF (host-wide singleton closure,
observability/release gates, native send input-integrity hardening), plus a
1.3.1 cross-host smoke-test validation sprint and a Homebrew tap
platform-asset mapping fix.

Included Changes

Phase AF — reliability hardening (PR #539 integrate/phase-AF → develop)
- Close the host-wide singleton bypass that blocked the 1.3.0 release
(Sprint AF.1).
- Add observability and release-gate hardening: structured tracing fields,
request-ID sentinel-collision fix, release-preflight freshness checks
(Sprint AF.2).
- Harden native atm send input-integrity handling (Sprint AF.3).
- Remove the workflow-sidecar (superseded by daemon-native dispatch,
reclassified from Sprint AF.4 to Sprint AD.36).

Phase AE — installed-copy packaging & docs (PR #530 integrate/phase-AE → develop)
- Ship an installed-copy packaging path and publisher freshness gate
(Sprints AE.1, AE.8).
- Land hooks/nudge template corpus and mailbox/diagnostics corpus expansion
(Sprints AE.3, AE.4).
- Surface CLI help content and verify the installed user-doc graph
end-to-end (Sprints AE.6, AE.7, AE.9).

1.3.1 cross-host smoke-test validation (PR #540)
- Independently re-run and verify the full macOS and Windows smoke suites
against the 1.3.1 candidate (fast/normal/thorough/shared-host/graft-
same-host lanes) with evidence SHAs verified as real ancestors of the
reviewed commit.
- Formally document the true cross-host (Windows↔macOS simultaneous)
coverage gap as deferred (AB-SMOKE-001–010, still pending) rather than
silently glossing over it.

Homebrew formula fix (PR #529, issue #522)
- Fix the update-homebrew formula generator's platform-asset mapping bug
that caused all three platform url/sha256 blocks to point at the same
aarch64-apple-darwin asset.
- Backfill the 1.3.0 and 1.2.3 tap formulas with corrected per-platform
assets using the fixed generator.

Other fixes carried into this release
- winget token wiring fix (PR #532).
- Preflight documentation pass (PR #531).
- atm send/SendMessage-to-atm-send audit and correction (PR #534).

Operator / User Impact
- No breaking CLI changes. atm continues to operate as documented in 1.3.0.
- Installations using the daemon/plugin host benefit from the host-wide
singleton fix (prevents duplicate daemon instances race-starting on a
single host) and observability improvements.
- Homebrew tap users on 1.3.0/1.2.3 who hit a platform-asset mismatch
(wrong sha256/url for non-macOS-arm64 platforms) get corrected formulas
as part of this release's tap backfill.
- True cross-host (Windows↔macOS simultaneous) messaging remains
same-host-validated only; the cross-host matrix is tracked as pending,
not yet executed.

Packaging / Distribution Notes
- crates.io: publish in dependency order per the release manifest (9
publishable crates): atm-storage → agent-team-mail-core →
atm-storage-rusqlite → atm-daemon-client → atm-runtime →
atm-daemon-bootstrap → atm-daemon → atm-graft → agent-team-mail.
- GitHub Releases: tag v1.3.1 cut from main via the Release workflow.
- Homebrew: regenerate agent-team-mail.rb and atm.rb at 1.3.1 with the
fixed generator; backfill 1.3.0 and 1.2.3 formulas with corrected
per-platform url/sha256.
- winget: token wiring fix included (PR #532); manifest publish follows
standard release workflow.

Known Issues / Waivers
- True cross-host (Windows↔macOS simultaneous) smoke coverage
(AB-SMOKE-001–010) remains PENDING; only same-host validation was run
for this release.

Follow-Up
- Execute the frozen cross-host smoke matrix
(docs/plans/phase-AB/cross-host-smoke-checklist.md) in a future
release window.
- File the non-blocking flaky-test hardening follow-up for
mailbox_locking.rs:606-621 (tracked, not yet filed as of this release).

Release Notes

Summary
- version: 1.2.3
- release date: 2026-07-02
- release owner: publisher (ATM release execution)
This recovery release preserves the Phase AA, Phase AC, and release-readiness
content already assembled for v1.2.2, but cuts a new immutable tag after two
publish-blocking defects were discovered mid-release. v1.2.2 remains as the
partial, abandoned attempt; v1.2.3 is the clean tag+publish line.

Included Changes

1.2.3 — Recovery patch release
- Add the missing description metadata to atm-storage-claude so crates.io
accepts the crate during ordered publish.
- Replace bash-4-only mapfile usage in release.yml with bash-3.2-compatible
loops so macOS packaging works on GitHub-hosted runners.
- Preserve the immutable v1.2.2 tag and recover with a new release/v1.2.3
branch/tag instead of mutating the failed release attempt.

1.2.2 — Phase AC + release readiness
- Converge the storage layer on the atm-storage contract and canonical types,
unifying the SQLite backend and the RPC envelope/domain types on a single
shared type surface.
- Close out storage cleanup and deletion handling and prove SQL Server readiness
for the storage backend contract.
- Land the production-readiness boundary fixes so the retained runtime enforces
the storage boundary through live factory wiring.
- Consolidate release readiness (PR #425): release_gate.sh branch-regex
enforcement, the canonical release validation suite (validate_release.py,
verify_release_archive.py), publisher release-branch discipline, and the
publishing-improvements plan docs.

1.2.1 — Phase AA
- Restate the daemon architecture and introduce subsystem doctor traits for
health/observability of daemon subsystems.
- Clean up the mailbox path and remove the SQLite legacy-compatibility surface.
- Relock and enforce the crate boundaries hardened during Phase AA.
- Upgrade observability across the daemon subsystems.

Release-branch reconciliation (this release)
- Merged origin/main into the release branch to retain the v1.2.0
publish-surface hotfixes (publish=false version-pin skips in the lint scripts,
cargo-deny path/wildcard allowance, dual-binary archive fixes) that had not
flowed to develop.
- Removed the sc-lint-attributes dependency (and its sc_lint attribute call
sites) from the published agent-team-mail-core crate; sc-lint packages are
not publishable from this repository. The published surface no longer leaks an
internal lint-only crate.
- Retained develop's full 1.2.2 publishable crate set and canonical storage
types.

Operator / User Impact
- No user-facing CLI behavior change is introduced by the reconciliation itself.
- Storage/runtime internals were converged onto the atm-storage contract
(Phase AC); existing on-disk mailbox and message flows are preserved.
- The SQLite legacy-compatibility surface was removed (Phase AA); installations
relying on the retained Claude/SQLite paths continue to work through the
supported storage backends.
- Windows installation remains first-class via the winget package and the
Windows release archive — no Rust toolchain required.

Packaging / Distribution Notes
- crates.io: publishes the full retained dependency chain in dependency order —
atm-storage, agent-team-mail-core, atm-storage-rusqlite,
atm-storage-claude, atm-daemon-client, atm-runtime,
atm-daemon-bootstrap, atm-daemon, atm-graft, agent-team-mail. Publish
is idempotent and ordered so each crate's upstream is live before it ships.
- GitHub Releases: atm + atm-daemon archives for
x86_64-unknown-linux-gnu, x86_64-apple-darwin, aarch64-apple-darwin, and
x86_64-pc-windows-msvc, with checksums.
- Homebrew: tap randlee/homebrew-tap, formulas agent-team-mail.rb and
atm.rb updated to 1.2.3.
- winget: package randlee.agent-team-mail at 1.2.3. Microsoft review normally
delays public winget install visibility by 1–2 days; submission success is
the immediate release signal.

Known Issues / Waivers
- None. No verification waivers are required for this release.
- Note (non-blocking): a sta