v0.5.3 — pairing DX improvements, separate install scripts

Author: YairEtzion

CHANGELOG.md

@@ -4,6 +4,23 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [0.5.3] - 2026-04-08
+
+### Fixed
+
+- **`amesh invite`** no longer crashes when the target device is already in the allow list — updates the existing entry with fresh handshake data instead of throwing an unrecoverable error
+- **Handshake timeout errors** now show actionable recovery guidance instead of raw error messages
+- **`amesh grant`** error message explains that grant runs on the target side and suggests `amesh list`
+- **`amesh listen`** SAS prompt now includes Ctrl+C hint and clearer mismatch recovery message
+- **`amesh init`** next-steps text uses plain language instead of controller/target jargon
+- **Separate install scripts** — `authmesh.dev/install` for CLI, `authmesh.dev/install-agent` for daemon
+
+### Added
+
+- **`amesh provision` discoverability** — non-interactive pairing is now surfaced in `listen`, `init`, and README quickstart
+- **Trust model legend** in `amesh list` output — explains what `[controller]` and `[target]` mean
+- **Pairing troubleshooting** section in `docs/guide.md` covering 6 common failure scenarios
+
 ## [0.5.2] - 2026-04-08
 
 ### Added

packages/agent/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authmesh/agent",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "description": "amesh agent daemon + CLI — remote shell target with device-bound identity",
   "type": "module",
   "license": "MIT",
@@ -44,8 +44,8 @@
     "postinstall": "node scripts/postinstall.mjs"
   },
   "dependencies": {
-    "@authmesh/core": "0.5.2",
-    "@authmesh/keystore": "0.5.2",
+    "@authmesh/core": "0.5.3",
+    "@authmesh/keystore": "0.5.3",
     "@noble/ciphers": "2.1.1",
     "@noble/curves": "2.0.1",
     "@noble/hashes": "2.0.1",

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authmesh/cli",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "description": "CLI for amesh device identity management — init, pair, list, revoke",
   "type": "module",
   "license": "MIT",
@@ -40,8 +40,8 @@
     "clean": "rm -rf dist *.tsbuildinfo"
   },
   "dependencies": {
-    "@authmesh/core": "0.5.2",
-    "@authmesh/keystore": "0.5.2",
+    "@authmesh/core": "0.5.3",
+    "@authmesh/keystore": "0.5.3",
     "@noble/ciphers": "2.1.1",
     "@noble/curves": "2.0.1",
     "@noble/hashes": "2.0.1",

packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authmesh/core",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "description": "P-256 ECDSA crypto primitives for device-bound M2M authentication",
   "type": "module",
   "license": "MIT",

packages/keystore/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authmesh/keystore",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "description": "Secure Enclave, macOS Keychain, and TPM 2.0 key storage for amesh",
   "type": "module",
   "license": "MIT",
@@ -37,7 +37,7 @@
     "clean": "rm -rf dist *.tsbuildinfo"
   },
   "dependencies": {
-    "@authmesh/core": "0.5.2",
+    "@authmesh/core": "0.5.3",
     "@noble/curves": "2.0.1",
     "@noble/hashes": "2.0.1",
     "@noble/ciphers": "2.1.1"

packages/relay/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authmesh/relay",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "description": "WebSocket relay server for amesh device pairing handshakes",
   "type": "module",
   "license": "MIT",
@@ -42,7 +42,7 @@
     "start": "bun dist/start.js"
   },
   "dependencies": {
-    "@authmesh/core": "0.5.2"
+    "@authmesh/core": "0.5.3"
   },
   "devDependencies": {
     "@eslint/js": "^9.0.0",

packages/sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authmesh/sdk",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "description": "Signing fetch client and verification middleware for amesh — replace API keys with device identity",
   "type": "module",
   "license": "MIT",
@@ -51,8 +51,8 @@
     "clean": "rm -rf dist *.tsbuildinfo"
   },
   "dependencies": {
-    "@authmesh/core": "0.5.2",
-    "@authmesh/keystore": "0.5.2",
+    "@authmesh/core": "0.5.3",
+    "@authmesh/keystore": "0.5.3",
     "@noble/ciphers": "2.1.1",
     "@noble/hashes": "2.0.1",
     "ioredis": "5.6.1",