# Changelog — Extreme endpoint agents

All notable changes to Extreme Cyber Security Test **endpoint agents** (desktop + mobile stubs) are documented here.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

Release tags use the format **`vX.Y.Z`** (for example `v1.0.0`).

## [Unreleased]

### Planned

- Signed Windows MSI / WiX Burn UI per [windows-agent-ui-spec.md](../docs/windows-agent-ui-spec.md)
- macOS notarized pkg

## [1.0.0] — 2026-09-23

### Added

- **Windows Professional** cloud license activation (activation code → seat bind → device fingerprint)
- `POST /api/v1/agents/license/verify` — seat still enrolled; UX keys aligned with wizard/tray string table
- Enroll / activate responses expose `message_key` / `message` / `message_ar` from `wizard.activate.*` and `wizard.finish.body`
- Package `release.stamp.json` — refuse unsigned Windows trees
- Agent CLI: `activate`, `license`; refuse unlicensed heartbeat/fingerprint; refuse `--local-stub` on Windows
- Portal: Windows 1.x professional package, changelog link, Extreme Technology (Ramallah) attribution
- Artifact: `ExtremeAgent-1.0.0-windows-pro.zip`

### Security

- Cloud license only — no offline license files
- Hard bans retained: no remote shell, keylogger, clipboard/screen capture, or exfil surfaces

## [0.2.0] — 2026-09-23

### Added

- Installable Windows / Linux / macOS packages with live enroll → heartbeat → fingerprint
- Branded ZIP + PowerShell / shell installers

## [0.1.0] — 2026-09-23

### Added

- Initial defensive agent stubs: enroll, heartbeat, fingerprint report only
- Canonical `agents/VERSION` + this changelog
- Semver bump script (`npm run agents:version:bump`)
- Download portal surfaces the current agent release tag

### Security

- Hard bans retained: no remote shell, keylogger, clipboard/screen capture, or exfil surfaces