v0.50.0 - Enhanced Vault Sun Integration and SSH-Enabled Agent Runtimes

This release introduces Sun-backed key-value mirroring with revision history for the vault and enables seamless SSH workflows within agent Docker environments.

Highlights

• Sun-Backed Vault KV: Added per-key KV sync (vault_kv.<scope>/<KEY>) with revision history support via si vault history and improved metadata reporting in status commands.
• SSH-Enabled Agent Runtimes: Docker dyads now include host SSH directory and agent socket mounts, allowing for seamless Git operations and secure remote access within containerized environments.
• Modernized Vault Crypto: Transitioned to dotenvx-style file encryption using Sun-backed keys for improved security and cross-environment portability.
• New CLI Capabilities: Introduced the si viva wrapper command and replaced the browser runtime command with a dedicated surf bridge for better integration.

Fixes

• Vault Command UX: Improved flag parsing to accept trailing flags in get and unset commands and fixed environment inference from .env filenames for production and development flows.
• PaaS Runtime: Resolved issues with remote application by materializing compose runtime environments and projecting namespaced secret keys.
• Release Reliability: Implemented retry logic for NPM publish verification to mitigate failures caused by registry propagation delays.
• Compatibility: Improved decryption compatibility for legacy si-v1 and si-v2 vault formats.

Breaking Changes

• Sun-Only Remote Scopes: The vault now enforces a Sun-only remote scope model for cloud workflows, disabling local materialization in the Sun hydration path to ensure data consistency.
• Legacy Surface Removal: Several legacy command surfaces have been removed to harden the dotenv flow and streamline the vault CLI.