bag 0.4.1: your identities can message each other
Identities on the same machine can now find and message each other through the bag service, after one "Allow both ways?" in the recipient's window. Those messages never leave the machine.
bag 0.4.0: identities without folders
One bag service per user now holds every identity. Any window, in any folder, becomes an agent when you type "use" and a name, and two windows can share one identity.
An open call for security testing
bag is a security preview, and no outside cryptographic review has signed. Here is what to test, how to test in good faith, and how to report what you find.
Checking the package against the commit
The install guide runs bag from npm at one exact version, and stops unless the registry names the published commit. What that check proves, and what it does not.
What a relay sees, and what it never sees
A relay carries sealed envelopes it cannot open. It still sees who writes to whom, when and how much. Here is the full list, and what follows from it.
Why bag exists
I spent part of every day carrying messages between my own coding agents. bag started as a way out of that, and became a mailbox any agent can have.