devcontainer-kit v0.3.1

Interface stays 2.

Fixed

• Host accounts keep working across dck up: the env file of [agents] host_profiles
  is now bound through its per-project directory (~/.config/dck/agents/<project>/env,
  in the container ~/.dck/host/agentkit/hostenv/env), not as a single file. Every
  dck up rewrites it atomically, and a single-file bind kept showing the old inode,
  so tokens went stale or unset in a running container until --recreate. The v0.3.0
  file ~/.config/dck/agents/<project>.env is removed on the next dck up.
• A removed state volume no longer breaks dck ssh and dck herdr add (and dck up
  with Herdr on) behind a bare "sshd does not answer": the host key is pinned from the
  container itself through docker exec (new entrypoint helper dck_host_key_pub), and
  a changed key is re-pinned with a note. When the key cannot be read (an older image),
  a mismatch is named with the exact ssh-keygen -R <alias> -f … fix.

Changed

• Pins: herdr-peers v0.2.2 (HERDR_PEERS_TAG, verified by the sha256 of its
  SHA256SUMS): Codex lanes pass --pane, and list shows full machine ids.
• Agent tooling: the vendored deepworkplan skill moves to v7.6.0 and the AI Diff
  Reviewer skill to v3.3.9 (skills-lock.json, .dwp/config.json, AGENTS.md
  provenance), through the pack's own addon planner.
• Docs: no agent keys through Claude's bypass-permissions acknowledgement. A leftover one
  is escalated to the developer, who accepts it once per profile; folder trust is the only
  screen an agent may key through, and only on a pane it launched itself when
  --trust-cwd was unavailable (docs/layers.md, the dck skill, docs/SECURITY.md).

Install

git clone --branch v0.3.1 https://github.com/DailybotHQ/devcontainer-kit
./devcontainer-kit/install.sh

Verify a clone with shasum -a 256 -c SHA256SUMS. Images: ghcr.io/dailybothq/devcontainer-kit-base:{python-3.13,node-24,debian}-v0.3.1 (digests in the images workflow run).