Dicklesworthstone/mcp_agent_mail

**Learn more:** [github.com/steveyegge/beads](https://github.com/steveyegge/beads)

# Install Beads curl -sSL https://raw.githubusercontent.com/steveyegge/beads/main/scripts/install.sh | bash

curl -sSL https://raw.githubusercontent.com/steveyegge/beads/main/scripts/install.sh | bash

curl -sSL https://raw.githubusercontent.com/steveyegge/beads/main/scripts/install.sh | bash

- **Documentation**: [github.com/steveyegge/beads/docs](https://github.com/steveyegge/beads/tree/main/docs)

- **Examples**: [github.com/steveyegge/beads/examples](https://github.com/steveyegge/beads/tree/main/examples)

{"id":"bd-10s","title":"Document attachment_paths resolution semantics","description":"README/docs do not state how attachment_paths are resolved; currently non-absolute paths resolve relative to the project archive root. Clarify in README 

{"id":"bd-11g","title":"mcp-toon-fixtures-expand","description":"Capture additional real-world fixtures (fetch_inbox, file_reservation_paths, macro_start_session) in /dp/toon_test_fixtures/real_world for bd-21h; document sizes and token sav

{"id":"bd-11w","title":"Add Factory Droid (~/.factory) integration support (GH #63)","description":"Add detection and configuration for Factory Droid AI coding tool. Need to add ~/.factory to installer script and update documentation.","sta

{"id":"bd-2a3","title":"Prevent concurrent thread digest write races","description":"Thread digest appends in storage.py were unprotected; concurrent messages to same thread could interleave writes. Add a lock around digest append.","status

{"id":"bd-2bi","title":"Clear notification signal when inbox is read","description":"clear_notification_signal is defined but never used. Consider clearing signals after fetch_inbox/mark_message_read/mark-all-read to avoid stale notificatio

{"id":"bd-2c8","title":"Fix search_messages FTS5 hyphenated tokens (GH #67)","description":"SQLite FTS5 interprets hyphens as syntax, causing searches for POL-358 to fail. Need to auto-quote hyphenated tokens or handle them as literals.","n

{"id":"bd-2n9","title":"Fix file reservation conflict detection for glob patterns","status":"closed","priority":2,"issue_type":"bug","created_at":"2026-01-20T04:37:34.076249871Z","created_by":"ubuntu","updated_at":"2026-01-20T04:40:23.37484

{"id":"bd-2sc","title":"Support datetime created_ts in write_message_bundle","description":"write_message_bundle only honors string timestamps; datetime inputs are ignored and replaced with now. Accept datetime inputs (and handle tz/naive) 

{"id":"bd-2xu","title":"Resolve symlinks to canonical paths in project_key (GH #66)","description":"Agent Mail should resolve symlinks (e.g., /dp/ntm -> /data/projects/ntm) to canonical paths before storing/matching project keys.","notes":"

{"id":"mcp_agent_mail-5cx","title":"Unit Tests: app.py - Core Helpers","description":"priority: 2","status":"tombstone","priority":2,"issue_type":"task","created_at":"2026-01-06T01:56:40.468876Z","updated_at":"2026-01-06T02:00:48.514677Z","

{"id":"mcp_agent_mail-5s5","title":"[RESEARCH] Investigate GlobTrie data structure for pattern matching","description":"# Research: Specialized GlobTrie Data Structure\n\n## Context\n\nDuring performance analysis, a prototype GlobTrie was t

[Credential-related source omitted]

{"id":"mcp_agent_mail-ipa","title":"P2 - Error Handling Tests","description":"Test that errors are handled gracefully with clear messages.","status":"tombstone","priority":2,"issue_type":"task","created_at":"2026-01-06T02:02:17.846757Z","up

{"id":"mcp_agent_mail-irp","title":"Guards: Pre-commit Enforcement","description":"priority: 2","status":"closed","priority":2,"issue_type":"task","created_at":"2026-01-06T02:02:17.867804Z","updated_at":"2026-01-06T04:24:02.101521Z","closed

{"id":"mcp_agent_mail-jto","title":"Bug: File handle exhaustion (EMFILE) under heavy load","description":"GitHub Issue #59 - After extended sessions, 'Too many open files' error occurs.\n\n**Root Cause Analysis:**\n- LRU repo cache (maxsize

{"id":"mcp_agent_mail-jts","title":"P1 - MCP Protocol Tests","description":"Test all MCP tools and resources work correctly.","status":"tombstone","priority":2,"issue_type":"task","created_at":"2026-01-06T02:02:17.840562Z","updated_at":"202

{"id":"mcp_agent_mail-jxj","title":"Fix N+1 query pattern in _list_outbox() recipient fetching","description":"# Fix N+1 Query Pattern in _list_outbox()\n\n## Problem\nOutbox listing fetches recipients per message in a loop:\n```\nfor msg i

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

"mcp-agent-mail": {       "type": "http",       "url": "http://127.0.0.1:8765/mcp/",

[Credential-related source omitted]

"url": "http://127.0.0.1:8765/mcp/",

# MCP servers configuration [mcp_servers.mcp_agent_mail] url = "http://127.0.0.1:8765/api/"

[mcp_servers.mcp_agent_mail] url = "http://127.0.0.1:8765/api/" # headers can be added if needed; localhost allowed without Authorization

url = "http://127.0.0.1:8765/api/"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

shell: bash         run: |           curl -LsSf https://astral.sh/uv/install.sh | sh

run: |           curl -LsSf https://astral.sh/uv/install.sh | sh           echo "$HOME/.local/bin" >> $GITHUB_PATH

curl -LsSf https://astral.sh/uv/install.sh | sh

curl -LsSf https://astral.sh/uv/install.sh | sh

allow-prereleases: true       - name: Install uv         run: curl -Ls https://astral.sh/uv/install.sh | sh

- name: Install uv         run: curl -Ls https://astral.sh/uv/install.sh | sh       - name: Add uv to PATH

run: curl -Ls https://astral.sh/uv/install.sh | sh

run: curl -Ls https://astral.sh/uv/install.sh | sh

run: sudo apt-get update && sudo apt-get install -y shellcheck

- name: Install uv         run: curl -Ls https://astral.sh/uv/install.sh | sh

run: curl -Ls https://astral.sh/uv/install.sh | sh

run: curl -Ls https://astral.sh/uv/install.sh | sh

[Credential-related source omitted]

[Credential-related source omitted]

"mcp-agent-mail": {       "type": "http",       "url": "http://127.0.0.1:8765/api/",

"type": "http",       "url": "http://127.0.0.1:8765/api/",       "headers": {

"url": "http://127.0.0.1:8765/api/",

Use [DSR (Doodlestein Self-Releaser)](https://github.com/Dicklesworthstone/doodlestein_self_releaser) directly for CI, checks, builds, tests, releases, deployment automation, scheduled jobs, and other automation. DSR is the execution path, 

1. **Absolutely forbidden commands:** `git reset --hard`, `git clean -fd`, `rm -rf`, or any command that can delete or overwrite code/data must never be run unless the user explicitly provides the exact command and states, in the same messa

[Credential-related source omitted]

[Credential-related source omitted]

# Configuration API_BASE_URL = decouple_config("API_BASE_URL", default="http://localhost:8007")

API_BASE_URL = decouple_config("API_BASE_URL", default="http://localhost:8007")

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

All notable changes to [MCP Agent Mail](https://github.com/Dicklesworthstone/mcp_agent_mail) are documented here.

- **Persistent window-based agent identity** -- agents get a stable identity tied to their terminal pane, surviving restarts ([32afeab](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/32afeabaa2350ec7a133235c8e2b99141858bbb0))

- **Canonical per-pane agent identity file contract** -- formalized the on-disk identity file protocol for multi-agent environments ([6715be6](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/6715be67b9982abe2611c3e466f98a2946cd0f

- **Sender identity verification and safe defaults** -- verify message sender identity with secure-by-default configuration ([56dce9e](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/56dce9e9b991581feaa73a905b5245461e608f1a))

- **Agent retire and project archive soft-delete** -- lifecycle management for winding down agents and archiving projects (#102, #103) ([8f3d627](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/8f3d6275d4ddf7b4ff1b914504459b2305b

- **Hard delete with "I UNDERSTAND" confirmation** -- permanent deletion requiring explicit confirmation string (#105) ([74caaeb](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/74caaeb3d86c01c2877ece5cbc5ab7c7bad73f7e))

- **`unread_only` filter on `fetch_inbox`, `fetch_topic`, and `fetch_inbox_product`** -- new boolean parameter that restricts results to messages this recipient has not yet explicitly marked read via `mark_message_read` or `acknowledge_mess

- **Broadcast and topic threads** -- all-agent visibility messaging with topic-based threading for coordination ([b4ad9fc](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/b4ad9fc82070efd59f315807a83ca56ea345c616))

- **On-demand project-wide message summarization** -- generate summaries across an entire project's message history ([ee53048](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/ee5304819ef6316acaa17a1d721dd026841d1fc5))

- **Contact enforcement optimization** -- batch queries for contact policy checks, SPA support ([8b6e67c](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/8b6e67c574725e8304b44b11820287b25717547f))

- **TOON output format support** -- optional TOON-encoded output for tools and resources using the `tru` encoder ([49beea8](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/49beea847145b2095eb337d2d7aad413ba9e05d9))

- **`/mcp` endpoint alias** -- mount `/mcp` alongside `/api` for client compatibility, increase SQLite pool to 50 ([8d6a12d](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/8d6a12d9c42150abcba9087202da3a96794bd96b))

- **Periodic FD health monitor** -- background watchdog for file descriptor exhaustion in multi-agent deployments ([81dd55f](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/81dd55f48125c8a50453a89d168b3802afce5723))

- **Rewrite `run_server_with_token` to use Rust `am` binary** -- server launcher now delegates to the compiled Rust binary with config.env ([1fca641](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/1fca641f3aff47f9c198a81e8f7e863

- **ExpectedErrorFilter** -- suppress verbose tracebacks for expected operational errors ([d2a3f4f](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/d2a3f4f02b45222800b31f86da12f97a4035dee5))

- **Virtual namespace support for tool/resource reservations** -- extend file reservation semantics to abstract namespaces ([b1c2051](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/b1c20517e29ecdac7b42f0b08b9f7d89e1d41747))

- **Commit queue and archive locking** -- serialized Git commit queue for high-concurrency multi-agent scenarios ([4fb2f38](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/4fb2f3801c46be6f6763dd0bd46927168ddd4642))

- **Git index.lock retry with exponential backoff** -- resilient Git operations when concurrent agents contend on the index ([5969db9](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/5969db9ab19363764cf23c200060c48fa3b66187))

- **Installer hardening** -- robust TOML URL upsert, Codex integration exports, improved token handling ([535d8aa](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/535d8aaa3ecd4d6e60b711e545ad5de945148fec), [f5bcd0a](https://githu

- **Avoid nested curl|bash** for br/bv installation ([b2fd4b8](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/b2fd4b89543c013e96ae2151e13a60a595090495))

- **Avoid nested curl|bash** for br/bv installation ([b2fd4b8](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/b2fd4b89543c013e96ae2151e13a60a595090495))

- **Integration settings merge** -- merge settings instead of overwriting (#76) ([9ee83f3](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/9ee83f33a8bcd05a161ec9d57c3d396474a186b4))

- **AsyncFileLock FD leaks** -- prevent file descriptor exhaustion under sustained load ([51524ae](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/51524ae3ae47c64cbb31be8e1fee33290584bbfd))

- **Lightweight `/api/health` bypass** -- health checks no longer blocked when the MCP layer is saturated ([14889f3](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/14889f30e3fb68b699facdc44e5eed8aaf706c44))

- **LIKE escape character ambiguity** -- switch to `!` as the LIKE ESCAPE char to avoid backslash escaping issues across SQLite/PostgreSQL ([1fddd32](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/1fddd3270989d7fa324437403a2a7d6

- **Missing schema migrations** -- add migrations for `registration_token` and `topic` columns (#106) ([caf4826](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/caf48261b892b2a2071f9f59a119152b70b91ffb))

- **Cross-project git_paths_removed leak, falsy-0 id checks, XSS in confirmation dialog, missing auth on archive tools** -- four bugs fixed in one pass ([84442d3](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/84442d3c23265c1167

- **Unbound variable in Gemini CLI integration** + permanent message deletion (#101, #104) ([ba25242](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/ba25242d3efd87bd01bf24a4bcc84dddc2b2c9d2))

- **OAuth metadata paths** -- normalize trailing-slash behavior and return consistent 404s for disabled OAuth ([79b25db](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/79b25db8738dc8526545197e3223633b359b55a0), [35529e7](https:/

- **Installer `exec` issue** -- remove `exec` before `run_server_with_token.sh` so the calling script resumes ([7019585](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/7019585dd5a55af57060180d80c27c68cff2897d))

- **Identity script hardening** -- parent directory permissions, path validation, TOCTOU race protection ([ddcef4f](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/ddcef4ff886548a94c19c14b083c4ec53a4955ad))

- **Storage cleanup** -- replace unreliable refcount eviction with time-based cleanup, close EMFILE-recovery repo handles ([61bb6d1](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/61bb6d1e210b0e83e9b1adcd16fa6703c91a672c), [f2b0

- **Hardcoded bearer tokens** -- replace with placeholders in `.mcp.json` files ([50c34cc](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/50c34cc62b2e46470b639aa24ef422212219e9b1))

- **CLI default subcommand** -- default to `serve-http` when no subcommand given ([061435c](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/061435c07455aa3fb3ac83367344ac749feedfdc))

- **send_message silent exceptions** -- replace silent exception handlers with logging ([ed078e1](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/ed078e1dd30d38fe113f1b8f1910ca0702b9976d))

- **Identity race condition** -- fix race condition and redundant DB lookups in window identity ([e9424be](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/e9424be3a743a92d2927afa128798562c9a93e12))

- **CLI exit hang** -- prevent CLI commands from hanging on exit (#68) ([7ed9708](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/7ed97081383d35de7fac05c6fc2382a40b0b2c67))

- **CLI connection leak** -- reset database state after startup banner ([d32caea](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/d32caeadd0e12cbf00885659b8b624725a345e8c))

- **SQLAlchemy GC warnings** -- configure `pool_reset_on_return` ([cfc22be](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/cfc22be9f097ab074ee13ff70bc5e0de9464a5da))

- **Python requirement** -- downgrade from 3.14 to 3.12 for broader compatibility ([6f61bc0](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/6f61bc0e6873fc38dfc269846cfa514bfa448031))

- **asyncio deprecation** -- use `get_running_loop` instead of `get_event_loop` ([0f45b17](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/0f45b17b25da552f24d27a3102d987598a34d117))

- **pathspec deprecation** -- switch to gitignore pattern type ([4ccdfdc](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/4ccdfdcd8d8c749d2cd9b838de33f62aa82e006a))

- **Thread digest appends** -- lock thread digest appends to prevent corruption ([2e4b810](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/2e4b81087120d2efc57bc3ab4920a3b88759c45a))

- **Search session leak** -- use fresh session for LIKE fallback in `search_messages` ([1dcbe84](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/1dcbe841e1ca187839b25065bae3a0a1943409fa))

- **Backup path resolution** -- add `expanduser().resolve()` to all backup-related paths ([f2ed9ae](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/f2ed9ae87e4781558a6b2c53d09c41ffeededb48))

- **.mcp.json endpoint URL** -- correct endpoint URL and restore `am` alias ([59301bc](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/59301bc1ad2b8a4e7a72675f59f6cdf0880968ce))

- **Hook dedup collision** -- use unique hook identifiers to prevent deduplication collision ([ac8d968](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/ac8d9681e345cd67fed8eb9d4e16f31c4416c922))

- **4 additional bugs from code review** ([12b9d87](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/12b9d878bc2d0959e5ec55cf9451fb7e88bfa45f))

- **Constant-time bearer token comparison** -- prevent timing side-channels in auth ([7c298d4](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/7c298d4e3df065ecf71035654e214c5a6cd48f4b))

- **Localhost bypass prevention** -- block spoofed localhost headers behind reverse proxies ([c911f7c](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/c911f7cf70465819773dfa25b3f2b4d0b0c4100f))

- **Gate absolute attachment paths** -- prevent path traversal through attachment references ([fc57155](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/fc57155e9e3210e702bfed54cd016d81dd42b626))

- **Remove `ack_required` bypass** in contact policy enforcement ([d947651](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/d9476518a0d27ee6811d39224df2213b49e1e496))

- **License updated** to MIT with OpenAI/Anthropic Rider ([dd79b83](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/dd79b83b482a3cafdb32bbb5ac9b4a48d9fc08bc))

- Ruff auto-fixes applied (collapsed nested if, unused variables, import sorting) ([130e3cd](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/130e3cdfdd51ff6c4681de3cf60e6b99f55bea63))

- GitHub social preview image added ([558c0b6](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/558c0b67ddfe2c540574c69e94e457929e62411c))

- ACFS notification workflow for installer changes ([950fa31](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/950fa3175a98edb80271f1224e914333790530b2))

[Release page](https://github.com/Dicklesworthstone/mcp_agent_mail/releases/tag/v0.3.0) | [Compare v0.2.1...v0.3.0](https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.2.1...v0.3.0)

Tagged at [19c18f4](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/19c18f42750fcadef95a558fc2841fc76f93c253). 18 commits since v0.2.1.

- **Stdio transport** (`am serve-stdio`) -- run the MCP server over stdin/stdout for direct CLI integration with Claude Code and similar tools. All logging redirected to stderr to preserve protocol integrity ([07b685c](https://github.com/Di

- **Stdio protocol corruption fixes** -- rich console output and tool debug panels were writing to stdout, corrupting the stdio protocol ([ad350e9](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/ad350e99e69d1a1c9e0ef07e6989e27dd

- **Tool filtering profiles** -- reduce token overhead by exposing only needed tools via `TOOLS_FILTER_PROFILE` (full, core, minimal, messaging, custom). The "minimal" profile cuts context by ~70% ([a952e21](https://github.com/Dicklesworths

- **Push notification signals** -- file-system signal files that agents can watch with inotify/FSEvents/kqueue for instant notification without polling ([250567d](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/250567dd3f4bfb55e9

- **EMFILE recovery** -- automatic cache cleanup when hitting "too many open files" limit; prevent Repo handle leak in commit path ([50e7e45](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/50e7e454ad3e2cdb5a61e7df9f9b6a6fecf2a5b

- **Python 3.14 cancellation safety** -- async session management compatible with `CancelledError` as `BaseException` ([8758df1](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/8758df15f78a4d84f9fcc7e7a8b26e16e4f2a4c3))

- **SQLite pool tuning** -- improved concurrent access reliability ([da35417](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/da354176d65e7e2a0d0e2b57cfac8b120ae86ba2))

- **Viewer SRI fix** -- excluded HTML from integrity map to fix asset loading ([0f8036b](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/0f8036b6b4dda78e54f43bce9f7f9c27c8f0db10))

- **SQLAlchemy where clause casting** -- use `cast(Any, ...)` for type-safe WHERE clauses ([e480650](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/e4806505bb4a84dcb1bb6d62c1a2af78a4e2e4bc))

- Comprehensive tests for tool filtering and notifications ([6104fbd](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/6104fbd34eb67c59c9af7f5cae2bf9fc6f921a7e))

- E2E test updates for advisory file reservation model ([c461fa1](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/c461fa1f0df4c5a6a0b6be11d2e43dc1ec18a3ac))

- Global resource cleanup fixture for FD leak prevention ([4c9f5b2](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/4c9f5b2de65bbac39e7c21f0e87e2c9a9988f62b))

- Fix flaky tests for CI reliability ([c715048](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/c715048e2c53be98c0b5b7f69f38b40ce3d4bfab))

[Release page](https://github.com/Dicklesworthstone/mcp_agent_mail/releases/tag/v0.2.1) | [Compare v0.2.0...v0.2.1](https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.2.0...v0.2.1)

Tagged at [6e0e3a8](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/6e0e3a874ac94897f8a62e2479be23135a74ee83). 20 commits since v0.2.0.

- **`am doctor` diagnostic and repair CLI commands** -- new CLI commands for diagnosing and repairing Agent Mail installations ([3ff1241](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/3ff1241dc3d3c09e5c4f1a39c40fa19e5f93b1e5))

- **Thread ID format validation** -- new `validate_thread_id_format()` utility prevents malicious thread IDs ([01ac7f0](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/01ac7f05b3f98d3db29bb4ab3daac5f1f69e4d94))

- **Path traversal prevention** -- `_resolve_archive_relative_path()` blocks directory traversal in attachment paths with `Path.resolve().relative_to()` defense-in-depth against symlink escapes ([91ea1a9](https://github.com/Dicklesworthston

- **Cancellation safety** -- `asyncio.shield()` wraps all async cleanup (session close, engine dispose, AsyncFileLock, archive_write_lock) now that `CancelledError` is a `BaseException` in Python 3.14 ([327e8cb](https://github.com/Dickleswo

- **FD exhaustion prevention** -- SQLite now uses `NullPool` to prevent file descriptor exhaustion on macOS; PostgreSQL and other backends retain standard pooling ([327e8cb](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/327e8cb

- **Proactive FD cleanup** -- integrate cleanup into repo creation path ([f814f8d](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/f814f8d86e9bcbc19d27a5f2f2b1b39df56ac3bc))

- **Git blob resource leak** -- close `data_stream` after reading blob contents ([1e42952](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/1e42952b3d3f3ed24e3eb0c3e7dcdae3d44d3bcf))

- **Storage race condition** -- fix `_ensure_repo` cache put race ([61df73b](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/61df73bf8b5f2f4d09ed6e3f3af1de4220e31f13))

- **Idempotent concurrent creation** -- `ensure_project()` and `_get_or_create_agent()` handle `IntegrityError` for truly idempotent concurrent creation ([0e15860](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/0e1586017a0f5e2a1

- **Guard chain-runner preservation** -- preserve existing pre-commit chain when other plugins are installed ([9510799](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/95107998b2ff9a2c2bd2e5c0e38c14ded22e20ed))

- **SRI computation** -- include HTML files in integrity computation ([4bbce02](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/4bbce0242929e6de1a99e28c25b2b6a5ded4b3a8))

[Release page](https://github.com/Dicklesworthstone/mcp_agent_mail/releases/tag/v0.2.0) | [Compare v0.1.5...v0.2.0](https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.1.5...v0.2.0)

Tagged at [580e684](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/580e684a49ad8337fecf9fad6c6fd63deb1926ab). 65 commits since v0.1.5. Completion of all 30 beads in the testing-tasks-v2 initiative. 424+ tests passing across all 

- **Datetime handling** -- naive/aware datetime regression tests for SQLite compatibility ([1c34c5d](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/1c34c5d))

- **Session context persistence** -- verify session context survives across operations ([0750db0](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/0750db0))

- **Agent name validation** -- ensure agent name format constraints are enforced ([2aefc55](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/2aefc55))

- **Contact management workflow** -- contact request/approval lifecycle ([0a7e78a](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/0a7e78a))

- **Message delivery** -- end-to-end message delivery verification ([2aefc55](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/2aefc55))

- **File reservation lifecycle** -- file reservation CRUD operations ([91409eb](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/91409eb))

- **Project and agent setup** -- initialization and registration flows ([324428c](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/324428c))

- **MCP resources read access** -- resource endpoint validation ([7c61715](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/7c61715))

| Category | Tests | Commits | |----------|-------|---------| | CLI: Mail commands | 29 | [aeb3dd9](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/aeb3dd9) |

|----------|-------|---------| | CLI: Mail commands | 29 | [aeb3dd9](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/aeb3dd9) | | CLI: Archive commands | 24 | [74cc9de](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/7

| CLI: Mail commands | 29 | [aeb3dd9](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/aeb3dd9) |

| CLI: Archive commands | 24 | [74cc9de](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/74cc9de) |

| CLI: Guard commands | 20 | [89cc754](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/89cc754) |

| HTTP: Authentication | 15 | [f755d3a](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/f755d3a) |

| HTTP: Rate limiting | 13 | [07f2742](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/07f2742), [9b91d09](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/9b91d09) |

| HTTP: Server/transport | 12 | [fb30031](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/fb30031) |

| Guards: Pre-commit | 14 | [2df583d](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/2df583d) |

| Guards: Pre-push | 20 | [4a264e4](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/4a264e4) |

| Error: Database | 10 | [9f5a410](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/9f5a410) |

| Error: Git archive | 21 | [1440559](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/1440559) |

| Error: Invalid inputs | 12 | [b19a19c](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/b19a19c) |

- **Security** -- path traversal prevention, input sanitization ([5d9ccec](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/5d9ccec), [a4c4daa](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/a4c4daa))

- **Concurrency** -- multi-agent stress testing with 70% success thresholds ([0bf3d2e](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/0bf3d2e))

- **Performance** -- MCP tool latency benchmarks ([e940502](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/e940502))

- **Multi-agent development workflow** -- full multi-agent development simulation ([0af744f](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/0af744f))

- **Disaster recovery** -- backup/restore cycle verification ([a9e9e0d](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/a9e9e0d))

- **Broken double-checked locking** in LLM initialization -- race condition causing duplicate LiteLLM setup ([e3689a0](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/e3689a0))

- **Naive/aware datetime mixing** for SQLite compatibility ([53f5062](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/53f5062))

- **LRU repo cache EMFILE errors** under high concurrency ([18f395f](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/18f395f))

- **Project identity and rate limit handling** improvements ([6221843](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/6221843))

[Release page](https://github.com/Dicklesworthstone/mcp_agent_mail/releases/tag/v0.1.5) | [Compare v0.1.4...v0.1.5](https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.1.4...v0.1.5)

Tagged at [f941ace](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/f941ace41e4a69ef0b99627a3022fa3befd8d0b8). 6 commits since v0.1.4.

- **Critical datetime comparison fix** -- `_naive_utc()` helper ensures naive UTC datetimes for all SQLite comparisons, eliminating `TypeError: can't compare offset-naive and offset-aware datetimes` in file reservation TTL transitions. `_en

- **Placeholder detection for better DX** -- server, shell hooks, and install scripts now detect common placeholder patterns (`YOUR_*`, `PLACEHOLDER`, `<PROJECT>`, `{PROJECT}`, `$PROJECT`) and return clear `CONFIGURATION_ERROR` messages ins

- **Hook placeholder standardization** -- all hooks silently exit when unconfigured instead of making failed API calls; consistent patterns across server and shell hooks ([5db6ada](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/

[Release page](https://github.com/Dicklesworthstone/mcp_agent_mail/releases/tag/v0.1.4) | [Compare v0.1.3...v0.1.4](https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.1.3...v0.1.4)

Tagged at [c3595c2](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/c3595c2980da35ba8b972b9507a5db74de9d09be). 4 commits since v0.1.3.

- **Gemini CLI integration** -- use `httpUrl` instead of `url` for Streamable HTTP transport; remove invalid `type: http` key that caused Gemini CLI startup failures; clean up legacy config from previous runs ([259c75f](https://github.com/D

- **Codex CLI integration** -- fix TOML structure (top-level keys must appear before section headers); handle notify hook JSON as command-line argument (how Codex actually passes it); remove obsolete `transport = "http"` and `[hooks]` secti

- **File reservation Git artifacts** -- write JSON artifacts on release/expire operations, not just on create; centralized payload building via `_file_reservation_payload()` and `_write_file_reservation_records()` helpers ([ab2ce8f](https:/

[Release page](https://github.com/Dicklesworthstone/mcp_agent_mail/releases/tag/v0.1.3) | [Compare v0.1.2...v0.1.3](https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.1.2...v0.1.3)

Tagged at [da3d0f2](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/da3d0f289284840673f4a4e8cf81e163f3869a32). 2 commits since v0.1.2.

- **Docker build fix** -- copy `README.md` before `uv sync` because hatchling requires it during dependency resolution (`pyproject.toml` references it via `readme = "README.md"`) ([da048e3](https://github.com/Dicklesworthstone/mcp_agent_mai

[Release page](https://github.com/Dicklesworthstone/mcp_agent_mail/releases/tag/v0.1.2) | [Compare v0.1.1...v0.1.2](https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.1.1...v0.1.2)

Tagged at [e2fa471](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/e2fa4718aa2c1e6ebb78955fce13b5be13a0bf75). 2 commits since v0.1.1.

- **CI type checker errors** -- add explicit `cast(Path, ...)` for `rglob()` results in `cli.py` and `storage.py` where the type checker infers `Path | Buffer` but runtime values are always `Path`; remove redundant `cast(str, name)` for `os

[Release page](https://github.com/Dicklesworthstone/mcp_agent_mail/releases/tag/v0.1.1) | [Compare v0.1.0...v0.1.1](https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.1.0...v0.1.1)

Tagged at [3331a07](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/3331a07e06fd2dfeae645204a8b7e2cd577107d8). First published GitHub Release.

- **Agent name namespace exhaustion fix** -- the original word lists only provided 132 possible name combinations (12 adjectives x 11 nouns). Expanded to 62 adjectives and 69 nouns for 4,278 combinations (33x increase), making exhaustion vi

- **Agent identity system** -- auto-generated memorable names in AdjectiveNoun format (e.g., GreenCastle), `register_agent` and `whois` tools, sanitized user-provided names ([fceea84](https://github.com/Dicklesworthstone/mcp_agent_mail/comm

- **Contact enforcement** -- auto-allow heuristics, ACK TTL warnings, ACK escalation, cross-project agent links ([f9f9b3a](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/f9f9b3a5eaf4023de39e3f87ff3dbeb47d6c880d), [617ede0](https

- **Agent name format constraints** -- unified inbox enforces naming conventions ([48274d6](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/48274d6096929d28fdff6b81e79bdf93e619b9b8))

- **Core messaging** -- send, reply, read/acknowledge tools with comprehensive documentation ([e1a634c](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/e1a634c19207ad117fd3d00f49d239e1e367b7df))

- **Search and summarization** -- FTS5-backed `search_messages` and `summarize_thread` tools ([ad04836](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/ad04836c6c68149b73d160383f9eebad62ba2304), [7c90d5e](https://github.com/Dickl

- **Cross-project delivery** -- explicit addressing, overlap detection, reply routing ([d009f72](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/d009f72ba821f688c5c0a5c610d8260346c23ea2), [8b0b812](https://github.com/Dicklesworth

- **LLM integration** -- intelligent model selection with provider auto-detection, enhanced summarization, attachment deduplication ([8418694](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/84186943c6ffd0eb2698dc0bd8347010640e3b

- **Self-send bypass** for contact policies and idempotent recipient timestamp updates ([5d767dc](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/5d767dc7744e6f1155f1c818f630654a01350e26), [920247c](https://github.com/Dickleswort

- **Workflow macros** -- `macro_start_session`, multi-thread digest, capability annotations ([1590f8f](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/1590f8f04b9e22ad7d9e2bed4aabfc7814aaac3d), [582db86](https://github.com/Dickle

- **Advisory file reservation system** -- path claim conflict detection, release tool, TTL-based expiry, Git-auditable JSON artifacts ([3e4fb6f](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/3e4fb6fbf3517dd1a87b1951e1133c603be0

- **Claims-to-file-reservations terminology migration** -- complete rename across docs, tests, core, and UI for clarity ([2f28d9d](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/2f28d9d), [4046f83](https://github.com/Dickleswort

- **Pattern matching improvements** -- switch to advisory model with comprehensive test suite ([c88f1ff](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/c88f1ff1aafa5ea034362e9a9e54d35a9e3515d3))

- **Inbox, outbox, urgent-unread, ack-required, ack-overdue** resource views ([3fd3345](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/3fd3345790f4912d7d605a9928d3f234da5c380a), [cbdad14](https://github.com/Dicklesworthstone/mcp

- **Recent usage resource** and dynamic capability loading ([1590f8f](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/1590f8f04b9e22ad7d9e2bed4aabfc7814aaac3d), [7746e09](https://github.com/Dicklesworthstone/mcp_agent_mail/commit

- **Query string parsing** for view resources with project auto-detection ([6b68bea](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/6b68beab32ef6745c68d43fb54c779eb2fbfd77c), [dfe36a0](https://github.com/Dicklesworthstone/mcp_ag

- **Git commit tracking** in inbox resource ([7a34d1b](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/7a34d1ba3429924a4cd4b0f56471f17f21e47018))

- **Web-based mail interface** -- FTS search, comprehensive agent onboarding docs ([61f3924](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/61f392450ea4839233d5ab934ffc11d2cbed1797))

- **Gmail-style unified inbox** -- split view, advanced filtering, mark-read functionality ([7e4b601](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/7e4b601ef42c51d6128e01c074ec0d9080597275), [48274d6](https://github.com/Dickles

- **Human Overseer messaging UI** -- broadcast messaging for human oversight with auto-start server capability ([ec0d778](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/ec0d77882a76cbb6af32d654b15b342feb559873))

- **Time-travel inbox snapshots** -- archive visualization with commit provenance tracking ([5c216fe](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/5c216fec9baba1b7a0cfd28ad35756cfa7fb0a08), [7b308ff](https://github.com/Dickles

- **Command palette and keyboard shortcuts** -- power-user navigation features ([58dd16b](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/58dd16b9d0ef07603b8a6f2e348a78a08b77237c))

- **AI-powered project sibling discovery** -- relationship management between related projects ([7ae1e1f](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/7ae1e1f))

- **Alpine.js-powered UI** -- HTML sanitization (DOMPurify), dark mode, responsive design, toast notifications, stagger animations ([1ca0cab](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/1ca0cabf1ec4a4252634a42e03e5be343e4a19d

- **FastAPI HTTP wrapper** -- Bearer token auth, health endpoints, rate limiting (token-bucket), MCP response unwrapping ([1bd8d24](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/1bd8d248843c7dd9e33c61b4c9f02683c3023b0a), [7521a

- **JWT/RBAC auth** -- token-bucket rate limiting, cross-project messaging, enhanced deployment ([d009f72](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/d009f72ba821f688c5c0a5c610d8260346c23ea2))

- **CORS middleware** -- configurable cross-origin resource sharing ([64c71c9](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/64c71c9978c35ce2cbcb295d2d5bb3d39c5b17cc), [21a2ae1](https://github.com/Dicklesworthstone/mcp_agent_ma

- **Alembic migrations** -- ACK escalation, multi-thread digest, claim enforcement ([1fa92a6](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/1fa92a698425bc900d310354a7bc389dbf9b3e47))

- **Pure SQLModel approach** -- removed Alembic migrations in favor of pure SQLModel with SQLite concurrency enhancements ([b97c437](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/b97c4379764174b84b675752898617a99995a7a5))

- **Local auth bypass** -- localhost connections can skip auth ([dbea8fa](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/dbea8fa211d926ddcc691a774dd894955fbdbe04))

- **Typer-based CLI** -- subcommands for mail, guard, archive, doctor operations ([9fcd3ae](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/9fcd3ae01550973325537b4bdf9a6a7837e57cc6), [2211854](https://github.com/Dicklesworthstone

- **Rich visual enhancements** -- comprehensive Rich logging, unified console UI ([e6cf595](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/e6cf595ee3ad85bd62a1a9c2e679020891ec3c95), [0c77b78](https://github.com/Dicklesworthstone

- **Pre-commit/pre-push guards** -- conflict detection hooks with bypass support, extracted into dedicated module ([3e4fb6f](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/3e4fb6fbf3517dd1a87b1951e1133c603be0923d), [405c676](htt

- **ACK reminder CLI** with Makefile and logrotate config ([27bed02](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/27bed024c403a42c3995f51cfa2889b7dd911793))

- **Reset command** -- clear and reset everything ([7a0874c](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/7a0874cd0e9d4baeac579619339890120023c7f4))

- **Git-backed storage** -- human-auditable message archive, attachment deduplication, commit trailers, single-repo unification ([8da73eb](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/8da73eb), [418f712](https://github.com/Dic

- **SQLite indexing** -- FTS5 full-text search, performance indexes ([ad04836](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/ad04836c6c68149b73d160383f9eebad62ba2304))

- **SoftFileLock** for Windows compatibility ([57c827e](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/57c827ee79ccd3075237f1d166867d4518122400))

- **Archive visualization** -- Git archive exploration UI with commit provenance ([7b308ff](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/7b308ff), [b7932c1](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/b7932c1))

- **Automated setup scripts** for Claude Code, Codex, Cursor, Gemini CLI, Cline, Windsurf, and OpenCode ([195034d](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/195034dc73cca9462af145431b69189fb429a4b5), [73b9622](https://githu

- **Meta-integration script** -- zero-friction automation with auto-token generation and unified server launcher ([f6f09eb](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/f6f09eb7982a2a4b9987508172b5bee60768ee94), [cd50347](http

- **Shared bash library** (`lib.sh`) -- DRY integration scripts with Gemini CLI registration ([0df1d01](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/0df1d01))

- **Rich logging** -- comprehensive structured logging with `macro_start_session` bug fix ([0c77b78](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/0c77b788c94aad918894b1c4d7a3bb82be4b1996))

- **Tool instrumentation** -- capability annotations, complexity metrics, Prometheus alert rules ([582db86](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/582db8685e60573be0d69e611527a97d89da3d00), [f74a12f](https://github.com/D

- **Path traversal prevention** -- DoS mitigations, XSS sanitization, markup injection protection ([9b0e9ad](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/9b0e9ad), [62c66e9](https://github.com/Dicklesworthstone/mcp_agent_mail/

- **Python 3.14 compatibility** -- patch for `asyncio.iscoroutinefunction` deprecation ([f2a2795](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/f2a27956204f213a18422be2c14209bfdde70272))

- **CI/CD workflows** (GitHub Actions), nightly background claims cleanup ([60b6b6e](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/60b6b6ef215cb146aeead6c8a3685f1233536cfe), [10e7919](https://github.com/Dicklesworthstone/mcp_ag

- **Docker multi-arch builds** -- systemd deployment, logrotate, deployment scripts ([0cd68a5](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/0cd68a51eb00ca1a179b0abc8e202911c0f889f4), [5fa0884](https://github.com/Dicklesworthst

- **One-line `curl | bash` installer** with `am` shell alias ([be695ac](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/be695ac4f51ae133efcaf47698e4dce60e81ff45))

- **One-line `curl | bash` installer** with `am` shell alias ([be695ac](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/be695ac4f51ae133efcaf47698e4dce60e81ff45))

- **Production observability guide** -- MCP design best practices, client bootstrap example ([48da7b8](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/48da7b8e114b3c73375c9f486140cdbd1013b0a9))

- **Comprehensive test suites** -- integration tests, attachment conversion, CLI command coverage, JWT validation ([104eb79](https://github.com/Dicklesworthstone/mcp_agent_mail/commit/104eb790f780f0f2ec17a4c617b2d611ab5fed51), [2564981](htt

[Unreleased]: https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.3.0...main

[v0.3.0]: https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.2.1...v0.3.0

[v0.2.1]: https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.2.0...v0.2.1

[v0.2.0]: https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.1.5...v0.2.0

[v0.1.5]: https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.1.4...v0.1.5

[v0.1.4]: https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.1.3...v0.1.4

[v0.1.3]: https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.1.2...v0.1.3

[v0.1.2]: https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.1.1...v0.1.2

[v0.1.1]: https://github.com/Dicklesworthstone/mcp_agent_mail/compare/v0.1.0...v0.1.1

Executable file

RUN apt-get update && apt-get install -y --no-install-recommends      curl build-essential git ca-certificates pkg-config &&      rm -rf /var/lib/apt/lists/*

RUN apt-get update && apt-get install -y --no-install-recommends \     curl build-essential git ca-certificates pkg-config && \

curl build-essential git ca-certificates pkg-config && \

rm -rf /var/lib/apt/lists/*

CARGO_HOME=/usr/local/cargo \     PATH=/usr/local/cargo/bin:$PATH RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs \

PATH=/usr/local/cargo/bin:$PATH RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs \     | sh -s -- -y --default-toolchain none --profile minimal --no-modify-path

RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs      | sh -s -- -y --default-toolchain none --profile minimal --no-modify-path

RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs \

ARG TOON_RUST_REPO=https://github.com/Dicklesworthstone/toon_rust.git

RUN apt-get update && apt-get install -y --no-install-recommends      curl git ca-certificates &&      rm -rf /var/lib/apt/lists/*

RUN apt-get update && apt-get install -y --no-install-recommends \     curl git ca-certificates && \

curl git ca-certificates && \

rm -rf /var/lib/apt/lists/*

RUN curl -LsSf https://astral.sh/uv/install.sh | UV_UNMANAGED_INSTALL=/usr/local/bin sh

# dynamically-created subdirectories. This is safe here because the user has # explicitly mounted the volume into this dedicated container. # See: https://github.com/Dicklesworthstone/mcp_agent_mail/issues/143

# See: https://github.com/Dicklesworthstone/mcp_agent_mail/issues/143

HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=5 \   CMD curl -fsS http://127.0.0.1:8765/health/liveness || exit 1

CMD curl -fsS http://127.0.0.1:8765/health/liveness || exit 1

Executable file

> **Superseded by [mcp_agent_mail_rust](https://github.com/Dicklesworthstone/mcp_agent_mail_rust).** This Python version is no longer maintained; use the Rust version for new installs.

Status: Maintenance mode. This Python implementation is superseded by the Rust rewrite and is no longer actively developed; new installs should use [mcp_agent_mail_rust](https://github.com/Dicklesworthstone/mcp_agent_mail_rust). The origina

Watch the full 23-minute walkthrough (https://youtu.be/68VVcqMEDrs?si=pCm6AiJAndtZ6u7q) to see the loop in action.

curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh?$(date +%s)" | bash -s -- --yes

curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh?$(date +%s)" | bash -s -- --yes

- Creates helper scripts under `scripts/` (including `run_server_with_token.sh`) - Adds an `am` shell alias to your `.zshrc` or `.bashrc` for quick server startup (just type `am` in a new terminal!) - Installs **Beads Rust (`br`)**, a Rust 

- Adds an `am` shell alias to your `.zshrc` or `.bashrc` for quick server startup (just type `am` in a new terminal!) - Installs **Beads Rust (`br`)**, a Rust reimplementation of the Beads task tracker, and creates a `bd` shell alias pointi

- Installs **Beads Rust (`br`)**, a Rust reimplementation of the Beads task tracker, and creates a `bd` shell alias pointing to `br` for backwards compatibility. This replaces any existing `bd` (Go) installation. Pass `--skip-beads` to opt 

To opt out of this replacement, pass `--skip-beads` to the installer. See the [beads_rust repository](https://github.com/Dicklesworthstone/beads_rust) for detailed documentation on CLI differences.

curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh?$(date +%s)" | bash -s -- --port 9000 --yes

curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh?$(date +%s)" | bash -s -- --port 9000 --yes

curl -LsSf https://astral.sh/uv/install.sh | sh

curl -LsSf https://astral.sh/uv/install.sh | sh

# Clone the repo git clone https://github.com/Dicklesworthstone/mcp_agent_mail

git clone https://github.com/Dicklesworthstone/mcp_agent_mail

**Note on implementations:** The MCP Agent Mail installer installs [Beads Rust (`br`)](https://github.com/Dicklesworthstone/beads_rust), a Rust reimplementation, and creates a `bd` alias for backwards compatibility. The original Go implemen

Beads provides a lightweight, dependency-aware issue database and a CLI (`bd`) for selecting "ready work," setting priorities, and tracking status. It complements MCP Agent Mail's messaging, audit trail, and file-reservation signals. Projec

The Beads Viewer (`bv`) is a fast terminal UI for Beads projects that also provides **robot flags** designed specifically for AI agent integration. Project: [Dicklesworthstone/beads_viewer](https://github.com/Dicklesworthstone/beads_viewer)

scripts/run_server_with_token.sh # then open http://127.0.0.1:8765/mail

# then open http://127.0.0.1:8765/mail

# Skip confirmation prompt

Using port 9001 (Ctrl+C to stop server) Waiting for server to start... ✓ Server ready, opening browser at http://127.0.0.1:9001

✓ Server ready, opening browser at http://127.0.0.1:9001

This launches a lightweight HTTP server that serves the static files. Open `http://127.0.0.1:9000/viewer/` in your browser to explore the archive.

The `age` encryption tool (https://age-encryption.org/) provides modern, secure file encryption. When you provide recipient public keys, the export process encrypts the final ZIP archive. Only holders of the corresponding private keys can d

# Your site is live at: https://project-archive.pages.dev

# Access via CloudFront # https://d123abc.cloudfront.net/archives/project-2024/

# https://d123abc.cloudfront.net/archives/project-2024/

# Host on internal web server cp -r ./exec-summary /var/www/exec-archives/2024-12/ # Share link: https://internal.example.com/exec-archives/2024-12/

# Share link: https://internal.example.com/exec-archives/2024-12/

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh?$(date +%s)" | bash -s -- --port 9000 --yes

curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh?$(date +%s)" | bash -s -- --port 9000 --yes

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

| `LOG_LEVEL` | `INFO` | Server log level | | `HTTP_CORS_ENABLED` | `false` | Enable CORS middleware when true | | `HTTP_CORS_ORIGINS` |  | CSV of allowed origins (e.g., `https://app.example.com,https://ops.example.com`) |

| `HTTP_CORS_ENABLED` | `false` | Enable CORS middleware when true | | `HTTP_CORS_ORIGINS` |  | CSV of allowed origins (e.g., `https://app.example.com,https://ops.example.com`) | | `HTTP_CORS_ALLOW_CREDENTIALS` | `false` | Allow credentials

| `HTTP_CORS_ORIGINS` |  | CSV of allowed origins (e.g., `https://app.example.com,https://ops.example.com`) |

ssl_certificate /etc/letsencrypt/live/mcp.example.com/fullchain.pem;       ssl_certificate_key /etc/letsencrypt/live/mcp.example.com/privkey.pem;       location /mcp/ { proxy_pass http://mcp_mail; proxy_set_header Host $host; proxy_set_head

ssl_certificate_key /etc/letsencrypt/live/mcp.example.com/privkey.pem;       location /mcp/ { proxy_pass http://mcp_mail; proxy_set_header Host $host; proxy_set_header X-Forwarded-Proto https; }     }

location /mcp/ { proxy_pass http://mcp_mail; proxy_set_header Host $host; proxy_set_header X-Forwarded-Proto https; }

sudo systemctl daemon-reload

sudo systemctl enable mcp-agent-mail

sudo systemctl start mcp-agent-mail

sudo systemctl status mcp-agent-mail

- A rate-limited hook script (`scripts/hooks/check_inbox.sh`) runs after certain tool invocations - It checks the inbox via a fast curl call (avoids Python import overhead) with `unread_only=true`, so mail the agent has already read or ackn

- It checks the inbox via a fast curl call (avoids Python import overhead) with `unread_only=true`, so mail the agent has already read or acknowledged is never re-announced

| `AGENT_MAIL_PROJECT` | Project key (absolute path) | *required* | | `AGENT_MAIL_AGENT` | Agent name | *required* | | `AGENT_MAIL_URL` | Server URL | `http://127.0.0.1:8765/mcp/` |

| `AGENT_MAIL_AGENT` | Agent name | *required* | | `AGENT_MAIL_URL` | Server URL | `http://127.0.0.1:8765/mcp/` | | `AGENT_MAIL_TOKEN` | Bearer token | *none* |

| `AGENT_MAIL_URL` | Server URL | `http://127.0.0.1:8765/mcp/` |

Default: `http://127.0.0.1:8765`

Web UI for humans: `http://127.0.0.1:8765/mail`

Browse at `http://127.0.0.1:8765/mail`:

# One-liner (recommended) curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh?$(date +%s)" | bash -s -- --yes

curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh?$(date +%s)" | bash -s -- --yes

curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh?$(date +%s)" | bash -s -- --yes

# Custom port curl -fsSL ... | bash -s -- --port 9000 --yes

curl -fsSL ... | bash -s -- --port 9000 --yes

curl -fsSL ... | bash -s -- --port 9000 --yes

"mcp-agent-mail": {       "type": "http",       "url": "http://127.0.0.1:8765/api/",

[Credential-related source omitted]

"url": "http://127.0.0.1:8765/api/",

"mcp-agent-mail": {       "type": "http",       "url": "http://127.0.0.1:8765/api/",

[Credential-related source omitted]

"url": "http://127.0.0.1:8765/api/",

[Credential-related source omitted]

"mcp-agent-mail": {       "type": "http",       "url": "http://127.0.0.1:8765/api/",

[Credential-related source omitted]

"url": "http://127.0.0.1:8765/api/",

Executable file

The base directory `~/.local/state/` follows the [XDG Base Directory Specification](https://specifications.freedesktop.org/basedir-spec/latest/) for runtime state that should persist across reboots but is not essential configuration.

- [PyO3 User Guide](https://pyo3.rs/)

- [Maturin Documentation](https://www.maturin.rs/)

- [Rust globset crate](https://docs.rs/globset/latest/globset/)

- [Python pathspec library](https://github.com/cpburnz/python-pathspec)

- [Git wildmatch specification](https://git-scm.com/docs/gitignore)

- [Michael Nygard's ADR template](https://github.com/joelparkerhenderson/architecture-decision-record/blob/main/templates/decision-record-template-by-michael-nygard/index.md)

- [ADR GitHub organization](https://adr.github.io/)

- **Netlify `_headers`:** same values under `/*`. - **GitHub Pages:** add `viewer/coi-serviceworker.js` from https://github.com/gzuidhof/coi-serviceworker and register before app bootstrap to emulate isolation.

- **GitHub Pages:** add `viewer/coi-serviceworker.js` from https://github.com/gzuidhof/coi-serviceworker and register before app bootstrap to emulate isolation.

[Credential-related source omitted]

[Credential-related source omitted]

def _norm_remote(url: str) -> str|None:     # ssh: git@github.com:org/repo.git ; https: https://github.com/org/repo.git ; ssh://git@...

# ssh: git@github.com:org/repo.git ; https: https://github.com/org/repo.git ; ssh://git@...

11. **Feed the agents with a proven cadence.** Historically this meant broadcasting canned prompts through tmux (see the sample zsh loop in the tweet thread) so every Codex session stays busy for an hour at a time: pick the next bead, keep 

13. **See it live.** The 23-minute walkthrough video shows the full loop in action for the Markdown Web Browser sample project: https://youtu.be/68VVcqMEDrs?si=pCm6AiJAndtZ6u7q. The underlying plan doc is public here: https://github.com/Dic

[Credential-related source omitted]

[Credential-related source omitted]

uv pip install -e . python server.py # server at http://localhost:8000/mcp/

# server at http://localhost:8000/mcp/

- [Git gitignore documentation](https://git-scm.com/docs/gitignore)

- [Python pathspec library](https://pypi.org/project/pathspec/)

- [PathSpec documentation](https://python-path-specification.readthedocs.io/en/stable/readme.html)

- [Rust globset crate](https://docs.rs/globset/latest/globset/)

Executable file

async with Client("http://127.0.0.1:8765/api/") as client:

"mcpServers": {     "mcp-agent-mail": {       "httpUrl": "http://127.0.0.1:8765/api/",

[Credential-related source omitted]

"httpUrl": "http://127.0.0.1:8765/api/",

[project.urls] Homepage = "https://example.com/mcp-agent-mail"

Homepage = "https://example.com/mcp-agent-mail"

Repository = "https://example.com/mcp-agent-mail"

#!/usr/bin/env bash

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

eval "$(uv run python - <<'PY'

eval "$(uv run python - <<'PY'

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

if ! command -v uv >/dev/null 2>&1; then   echo "uv is required. Install via https://github.com/astral-sh/uv" >&2

echo "uv is required. Install via https://github.com/astral-sh/uv" >&2

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env python3

[Credential-related source omitted]

#!/usr/bin/env bash

if ! command -v uv >/dev/null 2>&1; then   echo "uv is required. Install via https://github.com/astral-sh/uv" >&2

echo "uv is required. Install via https://github.com/astral-sh/uv" >&2

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

echo "Next steps:" echo "  - Run server: uv run python -m mcp_agent_mail.cli serve-http" echo "  - Verify health: curl -sS http://$HTTP_HOST:$HTTP_PORT/health/readiness | jq ."

echo "  - Run server: uv run python -m mcp_agent_mail.cli serve-http" echo "  - Verify health: curl -sS http://$HTTP_HOST:$HTTP_PORT/health/readiness | jq ." echo "==> Deploy bootstrap complete"

echo "  - Verify health: curl -sS http://$HTTP_HOST:$HTTP_PORT/health/readiness | jq ."

#!/usr/bin/env bash

# - Only counts UNREAD mail (fetch_inbox unread_only=true), so a message the #   agent has already read or acknowledged never triggers another reminder # - Uses curl directly (avoids Python import overhead)

#   agent has already read or acknowledged never triggers another reminder # - Uses curl directly (avoids Python import overhead) # - Supports both plain-text (default) and Claude-Code JSON envelope output

# - Uses curl directly (avoids Python import overhead)

#   AGENT_MAIL_PROJECT             - Project key (absolute path) #   AGENT_MAIL_AGENT               - Agent name #   AGENT_MAIL_URL                 - Server URL (default: http://127.0.0.1:8765/api/)

#   AGENT_MAIL_AGENT               - Agent name #   AGENT_MAIL_URL                 - Server URL (default: http://127.0.0.1:8765/api/) #   AGENT_MAIL_TOKEN               - Principal bearer token (HTTP Authorization header)

#   AGENT_MAIL_URL                 - Server URL (default: http://127.0.0.1:8765/api/)

#                                    when the call is made outside an authenticated MCP #                                    session (which is always the case for hook invocations, #                                    since each hook fires 

#                                    session (which is always the case for hook invocations, #                                    since each hook fires its own curl POST). Without this, #                                    fetch_inbox retur

#                                    since each hook fires its own curl POST). Without this,

PROJECT="${AGENT_MAIL_PROJECT:-}" AGENT="${AGENT_MAIL_AGENT:-}" URL="${AGENT_MAIL_URL:-http://127.0.0.1:8765/api/}"

[Credential-related source omitted]

URL="${AGENT_MAIL_URL:-http://127.0.0.1:8765/api/}"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

# Build curl command with proper auth

CURL_ARGS=(-s --max-time 3 -X POST "${URL}" -H "Content-Type: application/json")

RESPONSE=$(curl "${CURL_ARGS[@]}" \

#!/usr/bin/env bash

#   AGENT_MAIL_PROJECT             - Project key (absolute path) #   AGENT_MAIL_AGENT               - Agent name #   AGENT_MAIL_URL                 - Server URL (default: http://127.0.0.1:8765/api/)

#   AGENT_MAIL_AGENT               - Agent name #   AGENT_MAIL_URL                 - Server URL (default: http://127.0.0.1:8765/api/) #   AGENT_MAIL_TOKEN               - Principal bearer token (HTTP Authorization header)

#   AGENT_MAIL_URL                 - Server URL (default: http://127.0.0.1:8765/api/)

PROJECT="${AGENT_MAIL_PROJECT:-}" AGENT="${AGENT_MAIL_AGENT:-}" URL="${AGENT_MAIL_URL:-http://127.0.0.1:8765/api/}"

[Credential-related source omitted]

URL="${AGENT_MAIL_URL:-http://127.0.0.1:8765/api/}"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

# Build curl command with proper auth

CURL_ARGS=(-s --max-time 3 -X POST "${URL}" -H "Content-Type: application/json")

RESPONSE=$(curl "${CURL_ARGS[@]}" \

#!/bin/sh

rm -f "$_file" && printf '%s\n' "$_file"

#!/bin/sh

cleanup() { rm -f "$TMPFILE" 2>/dev/null; }

#!/usr/bin/env bash

#   ./scripts/install.sh --yes #   ./scripts/install.sh --dir "$HOME/mcp_agent_mail" --yes #   curl -fsSL https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh | bash -s -- --yes

#   curl -fsSL https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh | bash -s -- --yes

#   curl -fsSL https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh | bash -s -- --yes

REPO_URL="https://github.com/Dicklesworthstone/mcp_agent_mail"

# Default clone location follows XDG Base Directory spec so that # `curl | bash` from inside an unrelated project does not drop an

# `curl | bash` from inside an unrelated project does not drop an

# `curl | bash` from inside an unrelated project does not drop an

[Credential-related source omitted]

SKIP_BEADS=0 SKIP_BV=0 BEADS_INSTALL_URL="https://raw.githubusercontent.com/Dicklesworthstone/beads_rust/main/install.sh"

SKIP_BV=0 BEADS_INSTALL_URL="https://raw.githubusercontent.com/Dicklesworthstone/beads_rust/main/install.sh" BV_INSTALL_URL="https://raw.githubusercontent.com/Dicklesworthstone/beads_viewer/main/install.sh"

BEADS_INSTALL_URL="https://raw.githubusercontent.com/Dicklesworthstone/beads_rust/main/install.sh"

BV_INSTALL_URL="https://raw.githubusercontent.com/Dicklesworthstone/beads_viewer/main/install.sh"

[Credential-related source omitted]

./scripts/install.sh --port 9000 --yes   ./scripts/install.sh --dir "\$HOME/mcp_agent_mail" --yes   curl -fsSL https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh | bash -s -- --yes

./scripts/install.sh --dir "\$HOME/mcp_agent_mail" --yes   curl -fsSL https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh | bash -s -- --yes   curl -fsSL https://raw.githubusercontent.com/Dicklesworths

curl -fsSL https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh | bash -s -- --yes

curl -fsSL https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh | bash -s -- --yes

curl -fsSL https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh | bash -s -- --port 9000 --yes

curl -fsSL https://raw.githubusercontent.com/Dicklesworthstone/mcp_agent_mail/main/scripts/install.sh | bash -s -- --port 9000 --yes

rm -f "${tmp}"

rm -f "${tmp}"

rm -f "${tmp}"

fi   info "Installing uv (Astral)"   if ! need_cmd curl; then err "curl is required to install uv"; exit 1; fi

info "Installing uv (Astral)"   if ! need_cmd curl; then err "curl is required to install uv"; exit 1; fi   curl -LsSf https://astral.sh/uv/install.sh | sh

if ! need_cmd curl; then err "curl is required to install uv"; exit 1; fi

curl -LsSf https://astral.sh/uv/install.sh | sh

curl -LsSf https://astral.sh/uv/install.sh | sh

if sudo apt-get update -qq >/dev/null 2>&1 && sudo apt-get install -y -qq jq >/dev/null 2>&1; then

if sudo dnf install -y -q jq >/dev/null 2>&1; then

if sudo yum install -y -q jq >/dev/null 2>&1; then

if sudo apk add --quiet jq >/dev/null 2>&1; then

warn "  Ubuntu:  sudo apt install jq"

warn "  Fedora:  sudo dnf install jq"

info "Cloning ${REPO_URL} (branch=${BRANCH}) to ${CLONE_DIR}"

need_cmd git || { err "git is required to clone"; exit 1; }   git clone --depth 1 --branch "${BRANCH}" "${REPO_URL}" "${CLONE_DIR}"   REPO_DIR="${CLONE_DIR}"

git clone --depth 1 --branch "${BRANCH}" "${REPO_URL}" "${CLONE_DIR}"

[Credential-related source omitted]

[Credential-related source omitted]

trap "rm -f \"${tmp}\" 2>/dev/null" EXIT INT TERM

[Credential-related source omitted]

[Credential-related source omitted]

rm -f "${tmp}" 2>/dev/null

[Credential-related source omitted]

rm -f "${tmp}" 2>/dev/null

[Credential-related source omitted]

rm -f "${tmp}" 2>/dev/null

[Credential-related source omitted]

rm -f "${tmp}" 2>/dev/null

[Credential-related source omitted]

rm -f "${tmp}" 2>/dev/null

[Credential-related source omitted]

[Credential-related source omitted]

info "Installing Beads Rust (br) CLI"   if ! need_cmd curl; then     err "curl is required to install Beads Rust automatically"

if ! need_cmd curl; then     err "curl is required to install Beads Rust automatically"     exit 1

err "curl is required to install Beads Rust automatically"

# Download first, then execute — avoids nested curl|bash stdin corruption

local br_tmp_script   br_tmp_script=$(mktemp "${TMPDIR:-/tmp}/br-install.XXXXXX.sh")   if ! curl -fsSL "${BEADS_INSTALL_URL}?$(date +%s)" -o "${br_tmp_script}"; then

br_tmp_script=$(mktemp "${TMPDIR:-/tmp}/br-install.XXXXXX.sh")   if ! curl -fsSL "${BEADS_INSTALL_URL}?$(date +%s)" -o "${br_tmp_script}"; then     rm -f "${br_tmp_script}"

if ! curl -fsSL "${BEADS_INSTALL_URL}?$(date +%s)" -o "${br_tmp_script}"; then

rm -f "${br_tmp_script}"

rm -f "${br_tmp_script}"     err "Failed to download Beads Rust installer. You can install manually via: curl -fsSL ${BEADS_INSTALL_URL} | bash"     exit 1

err "Failed to download Beads Rust installer. You can install manually via: curl -fsSL ${BEADS_INSTALL_URL} | bash"

err "Failed to download Beads Rust installer. You can install manually via: curl -fsSL ${BEADS_INSTALL_URL} | bash"

if ! bash "${br_tmp_script}"; then     rm -f "${br_tmp_script}"     err "Failed to install Beads Rust automatically. You can install manually via: curl -fsSL ${BEADS_INSTALL_URL} | bash"

rm -f "${br_tmp_script}"

rm -f "${br_tmp_script}"     err "Failed to install Beads Rust automatically. You can install manually via: curl -fsSL ${BEADS_INSTALL_URL} | bash"     exit 1

err "Failed to install Beads Rust automatically. You can install manually via: curl -fsSL ${BEADS_INSTALL_URL} | bash"

err "Failed to install Beads Rust automatically. You can install manually via: curl -fsSL ${BEADS_INSTALL_URL} | bash"

rm -f "${br_tmp_script}"

║                                                                              ║ ║   📚 For documentation, see:                                                 ║ ║      https://github.com/Dicklesworthstone/mcp_agent_mail                    ║

║   📚 For documentation, see:                                                 ║ ║      https://github.com/Dicklesworthstone/mcp_agent_mail                    ║ ║                                                                              ║

║      https://github.com/Dicklesworthstone/mcp_agent_mail                    ║

info "Installing Beads Viewer (bv) TUI (optional)"   if ! need_cmd curl; then     warn "curl not available; skipping Beads Viewer installation"

if ! need_cmd curl; then     warn "curl not available; skipping Beads Viewer installation"     record_summary "Beads Viewer: skipped (no curl)"

warn "curl not available; skipping Beads Viewer installation"

# Download first, then execute — avoids nested curl|bash stdin corruption

local bv_tmp_script   bv_tmp_script=$(mktemp "${TMPDIR:-/tmp}/bv-install.XXXXXX.sh")   if ! curl -fsSL "${BV_INSTALL_URL}" -o "${bv_tmp_script}" || ! bash "${bv_tmp_script}"; then

bv_tmp_script=$(mktemp "${TMPDIR:-/tmp}/bv-install.XXXXXX.sh")   if ! curl -fsSL "${BV_INSTALL_URL}" -o "${bv_tmp_script}" || ! bash "${bv_tmp_script}"; then     rm -f "${bv_tmp_script}"

if ! curl -fsSL "${BV_INSTALL_URL}" -o "${bv_tmp_script}" || ! bash "${bv_tmp_script}"; then

rm -f "${bv_tmp_script}"

rm -f "${bv_tmp_script}"     warn "Beads Viewer installation failed (non-fatal). You can install manually via: curl -fsSL ${BV_INSTALL_URL} | bash"     record_summary "Beads Viewer: installation failed (optional)"

warn "Beads Viewer installation failed (non-fatal). You can install manually via: curl -fsSL ${BV_INSTALL_URL} | bash"

warn "Beads Viewer installation failed (non-fatal). You can install manually via: curl -fsSL ${BV_INSTALL_URL} | bash"

rm -f "${bv_tmp_script}"

warn "Beads Viewer installer finished but 'bv' was not detected. You can install manually via: curl -fsSL ${BV_INSTALL_URL} | bash"

warn "Beads Viewer installer finished but 'bv' was not detected. You can install manually via: curl -fsSL ${BV_INSTALL_URL} | bash"

# 1. Direct: ./install.sh → BASH_SOURCE[0] == $0 → run main # 2. Sourced: . install.sh → BASH_SOURCE[0] != $0 → skip main # 3. Piped: curl ... | bash -s → BASH_SOURCE[0] is unset → run main

# 3. Piped: curl ... | bash -s → BASH_SOURCE[0] is unset → run main

# 3. Piped: curl ... | bash -s → BASH_SOURCE[0] is unset → run main

#!/usr/bin/env bash

require_cmd uv require_cmd curl require_cmd jq  # Required for safe JSON merging (avoids quote injection vulnerabilities)

eval "$(uv run python - <<'PY'

_URL="http://${_HTTP_HOST}:${_HTTP_PORT}${_HTTP_PATH}"

log_ok "Detected MCP HTTP endpoint: ${_URL}"

[Credential-related source omitted]

[Credential-related source omitted]

if curl -fsS --connect-timeout 2 --max-time 5 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

-d "{\"jsonrpc\":\"2.0\",\"id\":\"1\",\"method\":\"tools/call\",\"params\":{\"name\":\"ensure_project\",\"arguments\":{\"human_key\":${_HUMAN_KEY_ESCAPED}}}}" \       "${_URL}" >/dev/null 2>&1; then     log_ok "Ensured project on server"

"${_URL}" >/dev/null 2>&1; then

exit 1   }   _REGISTER_RESPONSE=$(curl -sS --connect-timeout 2 --max-time 5 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

}   _REGISTER_RESPONSE=$(curl -sS --connect-timeout 2 --max-time 5 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \       -d "{\"jsonrpc\":\"2.0\",\"id\":\"2\",\"method\":\"tools/call\",\"params\":{\"name\":\"register_agen

_REGISTER_RESPONSE=$(curl -sS --connect-timeout 2 --max-time 5 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

"${_URL}" 2>/dev/null || echo "")

# # AGENT_MAIL_REGISTRATION_TOKEN is required for fetch_inbox to authenticate # from a PostToolUse hook (each hook fires its own curl POST and bypasses

# AGENT_MAIL_REGISTRATION_TOKEN is required for fetch_inbox to authenticate # from a PostToolUse hook (each hook fires its own curl POST and bypasses # any persistent MCP-session state). AGENT_MAIL_HOOK_FORMAT=json makes the

# from a PostToolUse hook (each hook fires its own curl POST and bypasses

[Credential-related source omitted]

) POST_TOOL_USE_BASH_HOOK=$(cat <<HOOKJSON { "matcher": "Bash", "hooks": [ { "type": "command", "command": "${INBOX_CHECK_CMD}" } ] }

POST_TOOL_USE_BASH_HOOK=$(cat <<HOOKJSON { "matcher": "Bash", "hooks": [ { "type": "command", "command": "${INBOX_CHECK_CMD}" } ] } HOOKJSON

{ "matcher": "Bash", "hooks": [ { "type": "command", "command": "${INBOX_CHECK_CMD}" } ] }

{   "type": "http",   "url": "${_URL}",

"type": "http",   "url": "${_URL}",   "headers": {

"url": "${_URL}",

[Credential-related source omitted]

trap 'rm -f "$TMP_MERGE" 2>/dev/null' EXIT INT TERM

umask 077  # Bug 1 fix: secure permissions for temp file   if jq --arg url "${_URL}" \

if jq --arg url "${_URL}" \

[Credential-related source omitted]

[Credential-related source omitted]

rm -f "$TMP_MERGE" 2>/dev/null

rm -f "$TMP_MERGE" 2>/dev/null

"mcp-agent-mail": {       "type": "http",       "url": "${_URL}",

"type": "http",       "url": "${_URL}",       "headers": {${AUTH_HEADER_LINE}}

"url": "${_URL}",

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env bash

eval "$(uv run python - <<'PY'

_URL="http://${_HTTP_HOST}:${_HTTP_PORT}${_HTTP_PATH}"

log_ok "Detected MCP HTTP endpoint: ${_URL}"

"mcp-agent-mail": {       "type": "http",       "url": "${_URL}",

"type": "http",       "url": "${_URL}", ${AUTH_HEADER_LINE}

"url": "${_URL}",

if curl -fsS --connect-timeout 1 --max-time 2 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

-d "{\"jsonrpc\":\"2.0\",\"id\":\"1\",\"method\":\"tools/call\",\"params\":{\"name\":\"ensure_project\",\"arguments\":{\"human_key\":${_HUMAN_KEY_ESCAPED}}}}" \       "${_URL}" >/dev/null 2>&1; then     log_ok "Ensured project on server"

"${_URL}" >/dev/null 2>&1; then

if curl -fsS --connect-timeout 1 --max-time 2 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

-d "{\"jsonrpc\":\"2.0\",\"id\":\"2\",\"method\":\"tools/call\",\"params\":{\"name\":\"register_agent\",\"arguments\":{\"project_key\":${_HUMAN_KEY_ESCAPED},\"program\":\"cline\",\"model\":\"default\",\"name\":${_AGENT_ESCAPED},\"task_descr

"${_URL}" >/dev/null 2>&1; then

_print "Open Cline's MCP settings and add this server:" _print "  - Type: http" _print "  - URL: ${_URL}"

_print "  - Type: http" _print "  - URL: ${_URL}" if [[ -n "${_TOKEN}" ]]; then

_print "  - URL: ${_URL}"

#!/usr/bin/env bash

eval "$(uv run python - <<'PY'

_URL="http://${_HTTP_HOST}:${_HTTP_PORT}${_HTTP_PATH}"

log_ok "Detected MCP HTTP endpoint: ${_URL}"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

"mcp-agent-mail": {       "type": "http",       "url": "${_URL}",

"type": "http",       "url": "${_URL}",       "headers": {${AUTH_HEADER_LINE}}

"url": "${_URL}",

if curl -fsS --connect-timeout 2 --max-time 5 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

-d "{\"jsonrpc\":\"2.0\",\"id\":\"1\",\"method\":\"tools/call\",\"params\":{\"name\":\"ensure_project\",\"arguments\":{\"human_key\":${_HUMAN_KEY_ESCAPED}}}}" \       "${_URL}" >/dev/null 2>&1; then     log_ok "Ensured project on server"

"${_URL}" >/dev/null 2>&1; then

_REGISTER_RESPONSE=$(curl -sS --connect-timeout 2 --max-time 5 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

"${_URL}" 2>/dev/null || echo "")

export AGENT_MAIL_PROJECT='${TARGET_DIR}' export AGENT_MAIL_AGENT='${_AGENT}' export AGENT_MAIL_URL='${_URL}'

[Credential-related source omitted]

export AGENT_MAIL_URL='${_URL}'

[Credential-related source omitted]

[Credential-related source omitted]

_UPDATED_USER_TOML="$(uv run python - "$USER_TOML" "$_URL" "$_MORPH_API_KEY" "$_MORPH_ENABLED_TOOLS" <<'PY'

[Credential-related source omitted]

[Credential-related source omitted]

[mcp_servers.mcp_agent_mail] url = "${_URL}"

url = "${_URL}"

[Credential-related source omitted]

#!/usr/bin/env bash

eval "$(uv run python - <<'PY'

_URL="http://${_HTTP_HOST}:${_HTTP_PORT}${_HTTP_PATH}"

"mcp-agent-mail": {       "type": "http",       "url": "${_URL}",

"type": "http",       "url": "${_URL}",       "headers": {${AUTH_HEADER_LINE}}

"url": "${_URL}",

"mcp-agent-mail": {       "type": "http",       "url": "${_URL}"

"type": "http",       "url": "${_URL}"     }

"url": "${_URL}"

if curl -fsS --connect-timeout 1 --max-time 2 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

-d "{\"jsonrpc\":\"2.0\",\"id\":\"1\",\"method\":\"tools/call\",\"params\":{\"name\":\"ensure_project\",\"arguments\":{\"human_key\":${_HUMAN_KEY_ESCAPED}}}}" \       "${_URL}" >/dev/null 2>&1; then     log_ok "Ensured project on server"

"${_URL}" >/dev/null 2>&1; then

if curl -fsS --connect-timeout 1 --max-time 2 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

-d "{\"jsonrpc\":\"2.0\",\"id\":\"2\",\"method\":\"tools/call\",\"params\":{\"name\":\"register_agent\",\"arguments\":{\"project_key\":${_HUMAN_KEY_ESCAPED},\"program\":\"cursor\",\"model\":\"cursor\",\"name\":${_AGENT_ESCAPED},\"task_descr

"${_URL}" >/dev/null 2>&1; then

#!/usr/bin/env bash

eval "$(uv run python - <<'PY'

_URL="http://${_HTTP_HOST}:${_HTTP_PORT}${_HTTP_PATH}"

"mcpServers": {     "mcp-agent-mail": {       "url": "${_URL}",

"mcp-agent-mail": {       "url": "${_URL}",       "headers": {${AUTH_HEADER_LINE}}

"url": "${_URL}",

"mcpServers": {     "mcp-agent-mail": {       "url": "${_URL}"

"mcp-agent-mail": {       "url": "${_URL}"     }

"url": "${_URL}"

if curl -fsS --connect-timeout 2 --max-time 5 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

-d "{\"jsonrpc\":\"2.0\",\"id\":\"1\",\"method\":\"tools/call\",\"params\":{\"name\":\"ensure_project\",\"arguments\":{\"human_key\":${_HUMAN_KEY_ESCAPED}}}}" \       "${_URL}" >/dev/null 2>&1; then     log_ok "Ensured project on server"

"${_URL}" >/dev/null 2>&1; then

_REGISTER_RESPONSE=$(curl -sS --connect-timeout 2 --max-time 5 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

"${_URL}" 2>/dev/null || echo "")

# Build the inbox check command with environment variables. # AGENT_MAIL_REGISTRATION_TOKEN is required for fetch_inbox to authenticate # from a hook invocation (each hook fires its own curl POST and bypasses

# AGENT_MAIL_REGISTRATION_TOKEN is required for fetch_inbox to authenticate # from a hook invocation (each hook fires its own curl POST and bypasses # any persistent MCP-session state).

# from a hook invocation (each hook fires its own curl POST and bypasses

[Credential-related source omitted]

[Credential-related source omitted]

trap 'rm -f "$TMP_MERGE" 2>/dev/null' EXIT INT TERM

if jq --arg proj "$_PROJ" --arg agent "$_AGENT" --arg inbox_cmd "$INBOX_CHECK_CMD" --arg mcp_dir "$_MCP_DIR" --arg url "$_URL" --arg token "$_TOKEN" '

rm -f "$TMP_MERGE" 2>/dev/null

rm -f "$TMP_MERGE" 2>/dev/null

[Credential-related source omitted]

[Credential-related source omitted]

else       _MCP_SERVER_JSON='"mcp-agent-mail": {"url": "'"${_URL}"'"}'     fi

_MCP_SERVER_JSON='"mcp-agent-mail": {"url": "'"${_URL}"'"}'

{   "mcpServers": {     ${_MCP_SERVER_JSON}

"mcpServers": {     ${_MCP_SERVER_JSON}   },

${_MCP_SERVER_JSON}

]}],     "AfterTool": [       {"matcher": "shell|run_command", "hooks": [{"type": "command", "command": "${INBOX_CHECK_CMD}"}]},

"AfterTool": [       {"matcher": "shell|run_command", "hooks": [{"type": "command", "command": "${INBOX_CHECK_CMD}"}]},       {"matcher": "mcp__mcp-agent-mail__send_message", "hooks": [{"type": "command", "command": "cd '${_MCP_DIR}' && uv 

{"matcher": "shell|run_command", "hooks": [{"type": "command", "command": "${INBOX_CHECK_CMD}"}]},

#!/usr/bin/env bash

eval "$(uv run python - <<'PY'

_URL="http://${_HTTP_HOST}:${_HTTP_PORT}${_HTTP_PATH}"

[Credential-related source omitted]

[Credential-related source omitted]

"mcpServers": {     "mcp-agent-mail": {       "httpUrl": "${_URL}",

"mcp-agent-mail": {       "httpUrl": "${_URL}",       "headers": {${AUTH_HEADER_LINE}}

"httpUrl": "${_URL}",

"mcpServers": {     "mcp-agent-mail": {       "httpUrl": "${_URL}"

"mcp-agent-mail": {       "httpUrl": "${_URL}"     }$(if [[ -n "${_MORPH_API_KEY}" ]]; then cat <<JSONFRAG

"httpUrl": "${_URL}"

[Credential-related source omitted]

if curl -fsS --connect-timeout 2 --max-time 5 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

-d "{\"jsonrpc\":\"2.0\",\"id\":\"1\",\"method\":\"tools/call\",\"params\":{\"name\":\"ensure_project\",\"arguments\":{\"human_key\":${_HUMAN_KEY_ESCAPED}}}}" \       "${_URL}" >/dev/null 2>&1; then     log_ok "Ensured project on server"

"${_URL}" >/dev/null 2>&1; then

_REGISTER_RESPONSE=$(curl -sS --connect-timeout 2 --max-time 5 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

"${_URL}" 2>/dev/null || echo "")

# Build the inbox check command with environment variables. # AGENT_MAIL_REGISTRATION_TOKEN is required for fetch_inbox to authenticate # from a hook invocation (each hook fires its own curl POST and bypasses

# AGENT_MAIL_REGISTRATION_TOKEN is required for fetch_inbox to authenticate # from a hook invocation (each hook fires its own curl POST and bypasses # any persistent MCP-session state).

# from a hook invocation (each hook fires its own curl POST and bypasses

[Credential-related source omitted]

[Credential-related source omitted]

trap 'rm -f "$TMP_MERGE" 2>/dev/null' EXIT INT TERM

if jq --arg proj "$_PROJ" \       --arg agent "$_AGENT" \       --arg inbox_cmd "$INBOX_CHECK_CMD" \

--arg agent "$_AGENT" \       --arg inbox_cmd "$INBOX_CHECK_CMD" \       --arg mcp_dir "$_MCP_DIR" \

--arg inbox_cmd "$INBOX_CHECK_CMD" \

--arg mcp_dir "$_MCP_DIR" \       --arg url "$_URL" \       --arg token "$_TOKEN" \

--arg url "$_URL" \

[Credential-related source omitted]

[Credential-related source omitted]

rm -f "$TMP_MERGE" 2>/dev/null

rm -f "$TMP_MERGE" 2>/dev/null

[Credential-related source omitted]

[Credential-related source omitted]

else       _MCP_SERVER_JSON='"mcp-agent-mail": {"httpUrl": "'"${_URL}"'"}'     fi

_MCP_SERVER_JSON='"mcp-agent-mail": {"httpUrl": "'"${_URL}"'"}'

[Credential-related source omitted]

{   "mcpServers": {     ${_MCP_SERVER_JSON}${_MORPH_SERVER_JSON}

"mcpServers": {     ${_MCP_SERVER_JSON}${_MORPH_SERVER_JSON}   },

${_MCP_SERVER_JSON}${_MORPH_SERVER_JSON}

]}],     "AfterTool": [       {"matcher": "shell|run_command", "hooks": [{"type": "command", "command": "${INBOX_CHECK_CMD}"}]},

"AfterTool": [       {"matcher": "shell|run_command", "hooks": [{"type": "command", "command": "${INBOX_CHECK_CMD}"}]},       {"matcher": "mcp__mcp-agent-mail__send_message", "hooks": [{"type": "command", "command": "cd '${_MCP_DIR}' && uv 

{"matcher": "shell|run_command", "hooks": [{"type": "command", "command": "${INBOX_CHECK_CMD}"}]},

#!/usr/bin/env bash

require_cmd uv require_cmd curl require_cmd jq

eval "$(uv run python - <<'PY'

_URL="http://${_HTTP_HOST}:${_HTTP_PORT}${_HTTP_PATH}"

log_ok "Detected MCP HTTP endpoint: ${_URL}"

trap 'rm -f "$TMP_MERGE" 2>/dev/null' EXIT INT TERM

umask 077   if jq --arg url "${_URL}" --arg token "${_TOKEN}" \

if jq --arg url "${_URL}" --arg token "${_TOKEN}" \

rm -f "$TMP_MERGE" 2>/dev/null

rm -f "$TMP_MERGE" 2>/dev/null

log_step "Creating new mcp.json"   jq -n --arg url "${_URL}" --arg token "${_TOKEN}" '{

jq -n --arg url "${_URL}" --arg token "${_TOKEN}" '{

trap 'rm -f "$TMP_MERGE" 2>/dev/null' EXIT INT TERM

rm -f "$TMP_MERGE" 2>/dev/null

rm -f "$TMP_MERGE" 2>/dev/null

if curl -fsS --connect-timeout 1 --max-time 2 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

-d "{\"jsonrpc\":\"2.0\",\"id\":\"1\",\"method\":\"tools/call\",\"params\":{\"name\":\"ensure_project\",\"arguments\":{\"human_key\":${_HUMAN_KEY_ESCAPED}}}}" \       "${_URL}" >/dev/null 2>&1; then     log_ok "Ensured project on server"

"${_URL}" >/dev/null 2>&1; then

if curl -fsS --connect-timeout 1 --max-time 2 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

-d "{\"jsonrpc\":\"2.0\",\"id\":\"2\",\"method\":\"tools/call\",\"params\":{\"name\":\"register_agent\",\"arguments\":{\"project_key\":${_HUMAN_KEY_ESCAPED},\"program\":\"github-copilot\",\"model\":\"gpt-4\",\"name\":${_AGENT_ESCAPED},\"tas

"${_URL}" >/dev/null 2>&1; then

_print "  Configure MCP servers in your IDE's Copilot settings:" _print "  - Type: HTTP" _print "  - URL: ${_URL}"

[Credential-related source omitted]

_print "  - URL: ${_URL}"

[Credential-related source omitted]

_print "Documentation: https://code.visualstudio.com/docs/copilot/customization/mcp-servers"

#!/usr/bin/env bash

require_cmd uv require_cmd curl require_cmd jq

eval "$(uv run python - <<'PY'

_URL="http://${_HTTP_HOST}:${_HTTP_PORT}${_HTTP_PATH}"

log_ok "Detected MCP HTTP endpoint: ${_URL}"

trap 'rm -f "$TMP_MERGE" 2>/dev/null' EXIT INT TERM

umask 077   if jq --arg url "${_URL}" --arg token "${_TOKEN}" \

if jq --arg url "${_URL}" --arg token "${_TOKEN}" \

rm -f "$TMP_MERGE" 2>/dev/null

rm -f "$TMP_MERGE" 2>/dev/null

log_step "Creating new opencode.json"   jq -n --arg url "${_URL}" --arg token "${_TOKEN}" '{

jq -n --arg url "${_URL}" --arg token "${_TOKEN}" '{

"$schema": "https://opencode.ai/config.json",

log_ok "OpenCode CLI detected. You can also run manually: opencode mcp add"   log_ok "  When prompted, select 'Remote' and enter URL: ${_URL}"

log_ok "  When prompted, select 'Remote' and enter URL: ${_URL}"

if curl -fsS --connect-timeout 1 --max-time 2 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

-d "{\"jsonrpc\":\"2.0\",\"id\":\"1\",\"method\":\"tools/call\",\"params\":{\"name\":\"ensure_project\",\"arguments\":{\"human_key\":${_HUMAN_KEY_ESCAPED}}}}" \       "${_URL}" >/dev/null 2>&1; then     log_ok "Ensured project on server"

"${_URL}" >/dev/null 2>&1; then

if curl -fsS --connect-timeout 1 --max-time 2 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

-d "{\"jsonrpc\":\"2.0\",\"id\":\"2\",\"method\":\"tools/call\",\"params\":{\"name\":\"register_agent\",\"arguments\":{\"project_key\":${_HUMAN_KEY_ESCAPED},\"program\":\"opencode\",\"model\":\"default\",\"name\":${_AGENT_ESCAPED},\"task_de

"${_URL}" >/dev/null 2>&1; then

#!/usr/bin/env bash

eval "$(uv run python - <<'PY'

_URL="http://${_HTTP_HOST}:${_HTTP_PORT}${_HTTP_PATH}"

log_ok "Detected MCP HTTP endpoint: ${_URL}"

"mcp-agent-mail": {       "type": "http",       "url": "${_URL}",

"type": "http",       "url": "${_URL}", ${AUTH_HEADER_LINE}

"url": "${_URL}",

if curl -fsS --connect-timeout 1 --max-time 2 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

-d "{\"jsonrpc\":\"2.0\",\"id\":\"1\",\"method\":\"tools/call\",\"params\":{\"name\":\"ensure_project\",\"arguments\":{\"human_key\":${_HUMAN_KEY_ESCAPED}}}}" \       "${_URL}" >/dev/null 2>&1; then     log_ok "Ensured project on server"

"${_URL}" >/dev/null 2>&1; then

if curl -fsS --connect-timeout 1 --max-time 2 --retry 0 -H "Content-Type: application/json" "${_AUTH_ARGS[@]}" \

-d "{\"jsonrpc\":\"2.0\",\"id\":\"2\",\"method\":\"tools/call\",\"params\":{\"name\":\"register_agent\",\"arguments\":{\"project_key\":${_HUMAN_KEY_ESCAPED},\"program\":\"windsurf\",\"model\":\"default\",\"name\":${_AGENT_ESCAPED},\"task_de

"${_URL}" >/dev/null 2>&1; then

_print "Open Windsurf's MCP settings and add this server:" _print "  - Type: http" _print "  - URL: ${_URL}"

_print "  - Type: http" _print "  - URL: ${_URL}" if [[ -n "${_TOKEN}" ]]; then

_print "  - URL: ${_URL}"

#!/usr/bin/env python3

[Credential-related source omitted]

settings_table.add_column("Value", style="white")     settings_table.add_row("Environment", settings.environment)     settings_table.add_row("HTTP Endpoint", f"http://{settings.http.host}:{settings.http.port}{settings.http.path}")

settings_table.add_row("Environment", settings.environment)     settings_table.add_row("HTTP Endpoint", f"http://{settings.http.host}:{settings.http.port}{settings.http.path}")     settings_table.add_row("Database URL", settings.database.ur

settings_table.add_row("HTTP Endpoint", f"http://{settings.http.host}:{settings.http.port}{settings.http.path}")

#!/usr/bin/env bash

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

trap "rm -f \"$tmp\" 2>/dev/null" EXIT INT TERM

rm -f "$tmp" 2>/dev/null

rm -f "$tmp" 2>/dev/null

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

readiness_poll() {   local host="$1"; local port="$2"; local path="$3"; local tries="$4"; local delay="$5"   local url="http://${host}:${port}${path}"

local host="$1"; local port="$2"; local path="$3"; local tries="$4"; local delay="$5"   local url="http://${host}:${port}${path}"   local n

local url="http://${host}:${port}${path}"

local n   for ((n=0; n<tries; n++)); do     if curl -fsS --connect-timeout 1 --max-time 2 --retry 0 "$url" >/dev/null 2>&1; then

for ((n=0; n<tries; n++)); do     if curl -fsS --connect-timeout 1 --max-time 2 --retry 0 "$url" >/dev/null 2>&1; then       return 0

if curl -fsS --connect-timeout 1 --max-time 2 --retry 0 "$url" >/dev/null 2>&1; then

rm -f "$old_backup" 2>/dev/null && _print "Removed old backup: ${old_backup}"

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

trap "rm -f \"$tmp\" 2>/dev/null" EXIT INT TERM

rm -f "$tmp" 2>/dev/null

rm -f "$tmp" 2>/dev/null

rm -f "$tmp" 2>/dev/null

rm -f "$tmp" 2>/dev/null

rm -f "$tmp" 2>/dev/null

[Credential-related source omitted]

[Credential-related source omitted]

# # Hook scripts (e.g. scripts/hooks/check_inbox.sh) invoke fetch_inbox via direct # curl POSTs that bypass any persistent MCP-session state, so the principal

# Hook scripts (e.g. scripts/hooks/check_inbox.sh) invoke fetch_inbox via direct # curl POSTs that bypass any persistent MCP-session state, so the principal # bearer token alone is insufficient — the server requires the per-agent

# curl POSTs that bypass any persistent MCP-session state, so the principal

#!/usr/bin/env bash

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

#!/usr/bin/env python3

for port in range(start, end + 1):         try:             with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s:

try:             with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s:                 s.bind(("127.0.0.1", port))

with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s:

pkg_mgr = detect_package_manager()     if not pkg_mgr or pkg_mgr == "npm":         console.print("[cyan]Install gh CLI from:[/] https://cli.github.com/")

if not pkg_mgr or pkg_mgr == "npm":         console.print("[cyan]Install gh CLI from:[/] https://cli.github.com/")         return False

console.print("[cyan]Install gh CLI from:[/] https://cli.github.com/")

if pkg_mgr == "apt":         console.print("\n[cyan]To install gh CLI on Ubuntu/Debian:[/]")         console.print("  curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo dd of=/usr/share/keyrings/githubcli-archiv

console.print("\n[cyan]To install gh CLI on Ubuntu/Debian:[/]")         console.print("  curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg")         conso

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

console.print("  sudo apt update")

console.print("  sudo apt install gh -y")

console.print("\n[cyan]To install gh CLI on Fedora/RHEL:[/]")         console.print("  sudo dnf install 'dnf-command(config-manager)'")         console.print("  sudo dnf config-manager --add-repo https://cli.github.com/packages/rpm/gh-cli.r

console.print("  sudo dnf install 'dnf-command(config-manager)'")

console.print("  sudo dnf install 'dnf-command(config-manager)'")         console.print("  sudo dnf config-manager --add-repo https://cli.github.com/packages/rpm/gh-cli.repo")         console.print("  sudo dnf install gh -y")

console.print("  sudo dnf config-manager --add-repo https://cli.github.com/packages/rpm/gh-cli.repo")

console.print("  sudo dnf config-manager --add-repo https://cli.github.com/packages/rpm/gh-cli.repo")

console.print("  sudo dnf install gh -y")

console.print("  sudo dnf install gh -y")     else:         console.print("[cyan]Install gh CLI from:[/] https://cli.github.com/")

console.print("[cyan]Install gh CLI from:[/] https://cli.github.com/")

except (FileNotFoundError, subprocess.CalledProcessError):         console.print("[red]npm is required to install wrangler.[/]")         console.print("[cyan]Install Node.js from:[/] https://nodejs.org/")

console.print("[red]npm is required to install wrangler.[/]")         console.print("[cyan]Install Node.js from:[/] https://nodejs.org/")         return False

console.print("[cyan]Install Node.js from:[/] https://nodejs.org/")

for _attempt in range(max_attempts):             try:                 with socket.create_connection(("127.0.0.1", port), timeout=1):

try:                 with socket.create_connection(("127.0.0.1", port), timeout=1):                     break

with socket.create_connection(("127.0.0.1", port), timeout=1):

console.print(f"[green]✓ Server ready, opening browser at http://127.0.0.1:{port}/viewer/[/]")

webbrowser.open(f"http://127.0.0.1:{port}/viewer/")

remote_url = f"https://github.com/{repo_full_name}.git"

owner, name = repo_full_name.split("/")                 pages_url = f"https://{owner}.github.io/{name}/"

pages_url = f"https://{owner}.github.io/{name}/"

if ".pages.dev" in stripped and not pages_url:                 url_match = re.search(r"https://[^\s]+\.pages\.dev[^\s]*", stripped)

url_match = re.search(r"https://[^\s]+\.pages\.dev[^\s]*", stripped)

pages_url = f"https://{project_name}.pages.dev"

Panel.fit(                     f"[bold green]Deployment Complete![/]\n\n"                     f"Repository: https://github.com/{repo_full_name}\n"

f"[bold green]Deployment Complete![/]\n\n"                     f"Repository: https://github.com/{repo_full_name}\n"                     f"GitHub Pages: {pages_url}\n\n"

f"Repository: https://github.com/{repo_full_name}\n"

else:             console.print("\n[yellow]Repository created but Pages setup failed[/]")             console.print(f"Visit https://github.com/{repo_full_name}/settings/pages to enable manually")

console.print(f"Visit https://github.com/{repo_full_name}/settings/pages to enable manually")

#!/usr/bin/env bash

rm -f "${tmp}"

rm -f "${tmp}"

rm -f "${tmp}"

#!/usr/bin/env bash

BASE_URL=${BASE_URL:-http://127.0.0.1:8765/api/}

local name=$1; shift   local args_json=$1; shift || true   curl -sS -X POST "$BASE_URL" \

local args_json=$1; shift || true   curl -sS -X POST "$BASE_URL" \     -H 'content-type: application/json' \

curl -sS -X POST "$BASE_URL" \

read_resource() {   local uri=$1; shift   curl -sS -X POST "$BASE_URL" \

local uri=$1; shift   curl -sS -X POST "$BASE_URL" \     -H 'content-type: application/json' \

curl -sS -X POST "$BASE_URL" \

#!/usr/bin/env bash

rm -rf "${WORKDIR}" && mkdir -p "${REPO_DIR}"

#!/usr/bin/env python3

#!/usr/bin/env bash

[Credential-related source omitted]

Executable file

RELEASE_TEMPLATE = "https://github.com/sql-js/sql.js/releases/download/{tag}/{filename}"

def _download(url: str, destination: Path) -> None:     destination.parent.mkdir(parents=True, exist_ok=True)     with urllib.request.urlopen(url) as response, destination.open("wb") as handle:

destination.parent.mkdir(parents=True, exist_ok=True)     with urllib.request.urlopen(url) as response, destination.open("wb") as handle:         shutil.copyfileobj(response, handle)

with urllib.request.urlopen(url) as response, destination.open("wb") as handle:

"sql_js": {                 "version": tag.lstrip("v"),                 "source": f"https://github.com/sql-js/sql.js/releases/tag/{tag}",

"version": tag.lstrip("v"),                 "source": f"https://github.com/sql-js/sql.js/releases/tag/{tag}",                 "files": {name: {"sha256": digest} for name, digest in checksums.items()},

"source": f"https://github.com/sql-js/sql.js/releases/tag/{tag}",

Executable file

Executable file

Executable file

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

Executable file

# Register cleanup handler to dispose database connections on exit. # aiosqlite uses background threads that can block Python shutdown if not cleaned up. # See: https://github.com/Dicklesworthstone/mcp_agent_mail/issues/68

# See: https://github.com/Dicklesworthstone/mcp_agent_mail/issues/68

[Credential-related source omitted]

[Credential-related source omitted]

See: https://github.com/Dicklesworthstone/mcp_agent_mail/issues/68

settings = get_settings()     server_url = f"http://{settings.http.host}:{settings.http.port}{settings.http.path}"

server_url = f"http://{settings.http.host}:{settings.http.port}{settings.http.path}"

resp_data: dict[str, Any] = {}     try:         with httpx.Client(timeout=5.0) as client:

try:         with httpx.Client(timeout=5.0) as client:             headers = {}

with httpx.Client(timeout=5.0) as client:

[Credential-related source omitted]

[Credential-related source omitted]

settings = get_settings()     server_url = f"http://{settings.http.host}:{settings.http.port}{settings.http.path}"

server_url = f"http://{settings.http.host}:{settings.http.port}{settings.http.path}"

rows: list[dict[str, Any]] | None = None     try:         with httpx.Client(timeout=5.0) as client:

try:         with httpx.Client(timeout=5.0) as client:             headers = {}

with httpx.Client(timeout=5.0) as client:

[Credential-related source omitted]

[Credential-related source omitted]

settings = get_settings()     server_url = f"http://{settings.http.host}:{settings.http.port}{settings.http.path}"

server_url = f"http://{settings.http.host}:{settings.http.port}{settings.http.path}"

rows: list[dict[str, Any]] | None = None     try:         with httpx.Client(timeout=5.0) as client:

try:         with httpx.Client(timeout=5.0) as client:             headers = {}

with httpx.Client(timeout=5.0) as client:

[Credential-related source omitted]

[Credential-related source omitted]

raise click.ClickException("products summarize-thread requires --agent or $AGENT_NAME.")     settings = get_settings()     server_url = f"http://{settings.http.host}:{settings.http.port}{settings.http.path}"

settings = get_settings()     server_url = f"http://{settings.http.host}:{settings.http.port}{settings.http.path}"     bearer = settings.http.bearer_token or ""

server_url = f"http://{settings.http.host}:{settings.http.port}{settings.http.path}"

try:         with httpx.Client(timeout=8.0) as client:

with httpx.Client(timeout=8.0) as client:

[Credential-related source omitted]

[Credential-related source omitted]

console.rule("[bold]Static Bundle Preview[/bold]")     console.print(f"Serving {bundle_path} at http://{actual_host}:{actual_port}/ (Ctrl+C to stop)")

console.print(f"Serving {bundle_path} at http://{actual_host}:{actual_port}/ (Ctrl+C to stop)")

if open_browser:         with suppress(Exception):             webbrowser.open(f"http://{actual_host}:{actual_port}/viewer/")

webbrowser.open(f"http://{actual_host}:{actual_port}/viewer/")

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

worktrees_enabled = bool(settings.worktrees_enabled)     server_url = f"http://{settings.http.host}:{settings.http.port}{settings.http.path}"     bearer = settings.http.bearer_token or ""

server_url = f"http://{settings.http.host}:{settings.http.port}{settings.http.path}"

[Credential-related source omitted]

use_server = True             try:                 with httpx.Client(timeout=server_request_timeout_seconds) as client:

try:                 with httpx.Client(timeout=server_request_timeout_seconds) as client:                     headers = {}

with httpx.Client(timeout=server_request_timeout_seconds) as client:

[Credential-related source omitted]

conflicts: list[dict[str, Any]] = []                 try:                     with httpx.Client(timeout=server_request_timeout_seconds) as client:

try:                     with httpx.Client(timeout=server_request_timeout_seconds) as client:                         headers = {}

with httpx.Client(timeout=server_request_timeout_seconds) as client:

while not renew_stop.wait(renew_interval_seconds):                         try:                             with httpx.Client(timeout=server_request_timeout_seconds) as client:

try:                             with httpx.Client(timeout=server_request_timeout_seconds) as client:                                 headers = {}

with httpx.Client(timeout=server_request_timeout_seconds) as client:

try:                 with httpx.Client(timeout=server_request_timeout_seconds) as client:

with httpx.Client(timeout=server_request_timeout_seconds) as client:

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

console.print(f"  Port: [bold]{settings.http.port}[/bold]")     console.print(f"  Path: {settings.http.path}")     console.print(f"\n[dim]Full URL: http://{settings.http.host}:{settings.http.port}{settings.http.path}[/dim]")

console.print(f"\n[dim]Full URL: http://{settings.http.host}:{settings.http.port}{settings.http.path}[/dim]")

] = None,     dry_run: bool = typer.Option(False, "--dry-run", help="Preview changes without executing"),     yes: bool = typer.Option(False, "--yes", "-y", help="Skip confirmation prompts"),

dry_run: bool = typer.Option(False, "--dry-run", help="Preview changes without executing"),     yes: bool = typer.Option(False, "--yes", "-y", help="Skip confirmation prompts"),     backup_dir: Annotated[

yes: bool = typer.Option(False, "--yes", "-y", help="Skip confirmation prompts"),

],     dry_run: bool = typer.Option(False, "--dry-run", help="Preview what would be restored"),     yes: bool = typer.Option(False, "--yes", "-y", help="Skip confirmation prompts"),

dry_run: bool = typer.Option(False, "--dry-run", help="Preview what would be restored"),     yes: bool = typer.Option(False, "--yes", "-y", help="Skip confirmation prompts"), ) -> None:

yes: bool = typer.Option(False, "--yes", "-y", help="Skip confirmation prompts"),

Executable file

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

Executable file

"(full-text search via FTS5, schema migrations, PRAGMA-based tuning) "         "assume SQLite. Track support in "         "https://github.com/Dicklesworthstone/mcp_agent_mail/issues/142."

"assume SQLite. Track support in "         "https://github.com/Dicklesworthstone/mcp_agent_mail/issues/142."     )

"https://github.com/Dicklesworthstone/mcp_agent_mail/issues/142."

Executable file

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

Executable file

Executable file

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

Executable file

Executable file

server_table.add_row("🌍 Environment", f"[bold bright_green]{settings.environment}[/bold bright_green]")     server_table.add_row("🔗 Endpoint", f"[bold bright_magenta]http://{host}:{port}{path}[/bold bright_magenta]")

server_table.add_row("🔗 Endpoint", f"[bold bright_magenta]http://{host}:{port}{path}[/bold bright_magenta]")

ui_host_display = "localhost" if host in ("0.0.0.0", "::") else host     ui_url = f"http://{ui_host_display}:{port}/mail"

ui_url = f"http://{ui_host_display}:{port}/mail"

ui_text.append("\n\n", style="white")     ui_text.append("Tip: Per-agent inbox: ", style="dim")     ui_text.append(f"http://{ui_host_display}:{port}/mail/{{project}}/inbox/{{agent}}", style="bright_magenta")

ui_text.append(f"http://{ui_host_display}:{port}/mail/{{project}}/inbox/{{agent}}", style="bright_magenta")

Executable file

[Credential-related source omitted]

sections.append("## Quick Local Preview\n")     sections.append("1. Run `uv run python -m mcp_agent_mail.cli share preview ./` from this bundle directory.")     sections.append("2. Open the printed URL (default `http://127.0.0.1:9000/`).")

sections.append("1. Run `uv run python -m mcp_agent_mail.cli share preview ./` from this bundle directory.")     sections.append("2. Open the printed URL (default `http://127.0.0.1:9000/`).")     sections.append("3. Press Ctrl+C to stop the

sections.append("2. Open the printed URL (default `http://127.0.0.1:9000/`).")

verify_key = VerifyKey(base64.b64decode(key_b64))

signature_bytes = base64.b64decode(signature_b64)

"   uv run python -m mcp_agent_mail.cli share preview .",             "   ```",             "   The command serves the viewer at `http://127.0.0.1:9000/` with hot reload.",

"   ```",             "   The command serves the viewer at `http://127.0.0.1:9000/` with hot reload.",             "4. **Deploy** using GitHub Pages (built into the `share wizard`) or manually follow `HOW_TO_DEPLOY.md`.",

"   The command serves the viewer at `http://127.0.0.1:9000/` with hot reload.",

# Compatible with Cloudflare Pages and Netlify # See: https://web.dev/coop-coep/

# See: https://web.dev/coop-coep/

Executable file

const container = document.getElementById('file-content');         try {           const response = await fetch(`/mail/archive/browser/${projectSegment}/file?path=${encodeURIComponent(entry.path)}`);

try {           const response = await fetch(`/mail/archive/browser/${projectSegment}/file?path=${encodeURIComponent(entry.path)}`);           if (!response.ok) {

const response = await fetch(`/mail/archive/browser/${projectSegment}/file?path=${encodeURIComponent(entry.path)}`);

try {         const response = await fetch(`/mail/api/projects/${encodeURIComponent(project)}/agents`);

const response = await fetch(`/mail/api/projects/${encodeURIComponent(project)}/agents`);

const response = await fetch(`/mail/archive/time-travel/snapshot?${params}`);

<!-- Fonts -->     <link rel="preconnect" href="https://fonts.googleapis.com">

<link rel="preconnect" href="https://fonts.googleapis.com">

<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>

<link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800&display=swap" rel="stylesheet">

<!-- Tailwind CSS -->     <script src="https://cdn.tailwindcss.com"></script>

<script src="https://cdn.tailwindcss.com"></script>

<!-- Alpine.js (collapse plugin must load before core) -->     <script defer src="https://cdn.jsdelivr.net/npm/@alpinejs/collapse@3.x.x/dist/cdn.min.js"></script>

<script defer src="https://cdn.jsdelivr.net/npm/@alpinejs/collapse@3.x.x/dist/cdn.min.js"></script>

<script defer src="https://cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js"></script>

<!-- Lucide Icons -->     <script defer src="https://unpkg.com/lucide@latest"></script>

<script defer src="https://unpkg.com/lucide@latest"></script>

<!-- Prism.js for code highlighting -->     <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.29.0/themes/prism-tomorrow.min.css" />

<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.29.0/themes/prism-tomorrow.min.css" />

<script src="https://cdnjs.cloudflare.com/ajax/libs/prism/1.29.0/prism.min.js"></script>

<script src="https://cdnjs.cloudflare.com/ajax/libs/prism/1.29.0/components/prism-python.min.js"></script>

<script src="https://cdnjs.cloudflare.com/ajax/libs/prism/1.29.0/components/prism-json.min.js"></script>

<script src="https://cdnjs.cloudflare.com/ajax/libs/prism/1.29.0/components/prism-markdown.min.js"></script>

<!-- Marked.js for markdown rendering -->     <script src="https://cdn.jsdelivr.net/npm/marked@11/marked.min.js"></script>

<script src="https://cdn.jsdelivr.net/npm/marked@11/marked.min.js"></script>

<!-- DOMPurify for HTML sanitization (prevent XSS in markdown previews) -->     <script src="https://cdn.jsdelivr.net/npm/dompurify@3/dist/purify.min.js"></script>

<script src="https://cdn.jsdelivr.net/npm/dompurify@3/dist/purify.min.js"></script>

<!-- Day.js for date formatting (lightweight utility) -->     <script src="https://cdn.jsdelivr.net/npm/dayjs@1.11.10/dayjs.min.js"></script>

<script src="https://cdn.jsdelivr.net/npm/dayjs@1.11.10/dayjs.min.js"></script>

<script src="https://cdn.jsdelivr.net/npm/dayjs@1.11.10/plugin/relativeTime.min.js"></script>

<script src="https://cdn.jsdelivr.net/npm/dayjs@1.11.10/plugin/calendar.min.js"></script>

<!-- Tippy.js for beautiful tooltips -->     <script src="https://unpkg.com/@popperjs/core@2"></script>

<script src="https://unpkg.com/@popperjs/core@2"></script>

<script src="https://unpkg.com/tippy.js@6"></script>

<link rel="stylesheet" href="https://unpkg.com/tippy.js@6/dist/tippy.css" />

<link rel="stylesheet" href="https://unpkg.com/tippy.js@6/themes/light.css" />

<link rel="stylesheet" href="https://unpkg.com/tippy.js@6/animations/scale.css" />

<!-- NProgress for loading indicators -->     <script src="https://unpkg.com/nprogress@0.2.0/nprogress.js"></script>

<script src="https://unpkg.com/nprogress@0.2.0/nprogress.js"></script>

<link rel="stylesheet" href="https://unpkg.com/nprogress@0.2.0/nprogress.css" />

<!-- Chart.js for data visualization -->     <script src="https://cdn.jsdelivr.net/npm/chart.js@4.4.1/dist/chart.umd.min.js"></script>

<script src="https://cdn.jsdelivr.net/npm/chart.js@4.4.1/dist/chart.umd.min.js"></script>