@sym-bot/mesh-channel 0.3.17 → 0.3.19

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "sym-mesh-channel",
-  "version": "0.3.17",
+  "version": "0.3.19",
   "description": "Real-time Claude-to-Claude mesh. Agent-to-agent cognitive signals over Bonjour LAN or WebSocket relay.",
   "author": {
     "name": "Hongwei Xu",

package/.mcp.json

@@ -4,7 +4,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@sym-bot/mesh-channel@0.3.17"
+        "@sym-bot/mesh-channel@0.3.19"
       ],
       "env": {
         "SYM_RELAY_URL": "${user_config.relay_url}",

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.3.19
+
+### Added
+
+- **Signed CMBs (MMP §8.3) — authenticity + integrity.** Pins `@sym-bot/sym` to `^0.7.10`: every CMB is now Ed25519-signed by its author and verified receiver-side against the sending peer's handshake-announced identity key **and** its content hash. A forged, tampered, or content-swapped CMB is rejected before it can reach Claude's context (audit-metered). Unsigned CMBs are allowed for interop unless `SYM_REQUIRE_SIGNED_CMB` is set. This is the cryptographic layer above the existing Ed25519 transport identity + SVAF relevance gate + prompt-injection filter. Version-bumped (plugin + `.mcp.json` pin) so installed plugins reinstall and pick up signing on restart.
+
+## 0.3.18
+
+### Added
+
+- **Directed-delivery indicators in the channel header (MMP §9.2.2).** Pins `@sym-bot/sym` to `^0.7.9`, which adds an ingestion flag to surfaced CMBs. A CMB sent directly to this node now reads as `[peer →you]`; if SVAF delivered it but did not store it (`remixed:false`), the header adds `·not-stored` so the agent knows the directed request is transient, not recallable from mesh memory later. Broadcast CMBs are unaffected.
+
 ## 0.3.17
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sym-bot/mesh-channel",
-  "version": "0.3.17",
+  "version": "0.3.19",
   "description": "MCP server — real-time agent-to-agent cognition for Claude Code remote teams via the SYM mesh.",
   "main": "server.js",
   "bin": {
@@ -22,7 +22,7 @@
   ],
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",
-    "@sym-bot/sym": "^0.7.8",
+    "@sym-bot/sym": "^0.7.10",
     "bonjour-service": "^1.3.0"
   },
   "engines": {

package/server.js

@@ -317,8 +317,15 @@ function registerNodeHandlers(n) {
       body = `${body}\n\n---PAYLOAD---\n${serialized}`;
       payloadSuffix = ` [+payload ${serialized.length}b]`;
     }
+    // Directed (peer-bound) delivery indicator (MMP §9.2.2). A directed CMB was
+    // addressed to THIS node — surface it as sent-to-you so the agent knows to
+    // respond. `remixed:false` means SVAF delivered it but did not ingest it
+    // into memory (transient request, not stored) — flag it so the agent does
+    // not assume it is recallable later.
+    const dirTag = entry.directed ? ' →you' : '';
+    const memTag = entry.directed && entry.remixed === false ? ' ·not-stored' : '';
     const msgId = storeMessage(source, body);
-    pushChannel('cmb', `[${source}] ${focus}${moodSuffix}${payloadSuffix} [${msgId}]`);
+    pushChannel('cmb', `[${source}${dirTag}] ${focus}${moodSuffix}${memTag}${payloadSuffix} [${msgId}]`);
   });
 
   n.on('message', (from, content) => {