chore: release main

[band-release-please-public]

🤖 I have created a release beep boop

band-sdk: 5.0.0

5.0.0 (2026-10-12)

⚠ BREAKING CHANGES

• ACP and Codex room replies require Band tools; remove retired fallback configuration.
• the "sdk" Band MCP backend kind is removed; use kind="http" (with room_bound=True for per-room endpoints). BandMCPBackend drops its server field (use local_server), create_band_mcp_backend drops get_participant_handles/tool_result_hook, and the Claude SDK tool builders in band.integrations.claude_sdk.tools are removed.
• Every SimpleAdapter turn is now judged by band-sdk-core's turn-outcome rule. Adapters that silently dropped a turn (langgraph, anthropic, gemini, google_adk, agno, letta, codex/ACP empty turns, copilot_sdk empty text) now report it and mark it FAILED. An undeclared custom tool counts as observe. settles_turn_reply, is_terminal_success and missing_reply_error are removed from band.runtime.tools. Custom SimpleAdapter subclasses are judged too: post adapter notices with send_notice and call tools.turn.settle(), because a send_message or deliver_reply post counts as the turn's reply. AgentToolsProtocol gains turn and send_notice.
• the "sdk" Band MCP backend kind is removed; use kind="http" (with room_bound=True for per-room endpoints). BandMCPBackend drops its server field (use local_server), create_band_mcp_backend drops get_participant_handles/tool_result_hook, and the Claude SDK tool builders in band.integrations.claude_sdk.tools are removed.

Features

• add gated adapter-owned room retention lifecycle (#708) (989e47a)
• isolate Claude rooms with shared workspace ownership (#696) (36e5b04)
• sdk: let an embedding host opt out of signal handling (#697) (1cf1158)

Bug Fixes

• abort active turns on refused auxiliary message claims (#760) (75f7378)
• advertise ACP session close and cancel active prompts (#755) (5d51810)
• avoid cleaning up replacement ACP runtimes (#714) (3bbed5c)
• bind the room to the Band MCP connection so models never supply chat_id (#723) (d99f642)
• bound room reconciliation and recover missed PLAY (#761) (3e7d5c8)
• centralize default models on cheap current releases (#748) (c3b2296)
• examples: re-lock docker_demo to band-sdk 4.0.0 and clean up its rooms (#721) (6838ecc)
• give the peer-delegation smoke a request the delegate can answer (#744) (a7e69e8)
• honor platform execution gates during stopped-room recovery (#713) (55c70f2)
• Hyphenate provisioned E2E agent names so models echo them verbatim (#728) (fd9245a)
• integrations: pre-approve Cursor Band tools and surface agent crashes (#750) (ded7cd9)
• integrations: stop posting the model's closing text after band_no_reply or band_send_message (#725) (3b00dcc)
• judge every turn with band-sdk-core's turn outcome (#729) (442df95)
• make Band tools authoritative for ACP and Codex replies (#754) (699854a)
• Make OpenCode approval-turn failures diagnosable from CI logs (#726) (cc5dac3)
• normalize empty CrewAI kickoff completions (#745) (e5083ce)
• preserve Strands failed-turn diagnostics (#743) (3ddd01a)
• preserve unaccepted work while keeping active-turn controls reachable (#731) (1904541)
• Redact delimited, spaced-label, and JSON credentials in shared redactor (#724) (ec3182a)
• reject unsafe resource IDs at tool boundaries (#747) (efaa02c)
• repair deterministic nightly E2E failures from 2026-10-08 (#756) (2b72650)
• report model failures returned as data and use single-token E2E markers (#749) (7dd65d8)
• require Codex approval independently of model escalation (#742) (40572fe)
• Root-cause nightly E2E failures in OpenCode, ACP, Copilot and task refs (#715) (84baa62)
• verify native shell commands in host approval policy tests (#740) (e8d7382)

band-mcp: 2.2.5

2.2.5 (2026-10-12)

Bug Fixes

• bump band-mcp's band-sdk floor to 4.0.0 (#720) (d309468)

---

This PR was generated with Release Please. See documentation.

[band-release-please-public]

🤖 Created releases:

• band-sdk-v5.0.0
• band-mcp-v2.2.5

🌻