v3.0.0

3.0.0 (2026-08-31)

⚠ BREAKING CHANGES

• docs/QUICKSTART.md and docs/QUICKSTART_SBX.md have moved to docs/howto/acq.md and docs/howto/sbx.md. No redirect stubs are kept (this lands ahead of 3.0.0). External links to the old paths break.
• acq: on a host with both backends installed and no explicit selection, acq now resolves to msb instead of sbx.
• acq: opencode-web.sh is removed. Use the openchamber acq kit to run OpenCode in the browser.

Features

• acq: add a neutral interactive-shell verb — acq shell NAME (#399) (1862b05)
• acq: add backend-agnostic --image/ACQ_IMAGE base image override (#358) (80ae257)
• acq: add per-verb --help for all acq-owned subcommands (#368) (90f2b4b)
• acq: default to msb backend and remove qsbx for 3.0.0 (#266) (21f7901)
• acq: detect stale sandboxes + acq kit check|update (#236) (#241) (f1693aa)
• acq: fix subcommand dispatch hygiene and implement 'secret import' (#283) (5ae27c6)
• acq: sand rough edges off first-run onboarding (PATH self-repair + auto host check) (#281) (71698d7)
• acq: sbx↔msb backend parity, incl. live openchamber-on-msb (omnibus #234) (#233) (32f9ae0)
• acq: scope GitHub token per-sandbox to mounted repos (#229) (b355706)
• install: add auto-selecting curl|sh installer + streamline README (#387) (4d67551)
• install: enable homebrew tap install (#424) (5f04294)
• kits: add neutral volumes vocabulary (sbx v2 5.7 passthrough + msb parity) (#357) (8029d2a)
• kits: synthesize chmod from hybrid/v1 mode fields into generated setup.install (#390) (7a5cb3c)
• msb: collapse gateway-DNS grant to allow@dns and re-verify git-HTTPS secret substitution vs msb 0.6.9 (#318) (491c75c)
• msb: derive default sandbox-template image from agent token (#409) (cc27fa2)
• msb: diagnose+disambiguate msb egress failures (three signatures) (#306) (7a6d371)
• msb: ensure an OCI engine via rootless podman (+ verify-backends fixes, sbx 0.38 floor) (#302) (8088dcc)
• msb: forward the host ssh-agent into the guest via --vsock (#316) (e4e8317)
• msb: mirror the sbx balanced network policy as the msb default egress (#295) (2c056cb)
• msb: neutral ACQ_NETWORK_TIER egress selector + deprecate ACQ_MSB_BALANCED_EGRESS (#310) (2242af4)
• msb: re-run kit startup on restart via acq start/restart (#260) (7bbc999)
• msb: stage kit startup commands as a create-time script (#259) (3ff736b)
• progress: TTY-aware progress feedback during long acq run phases (#290) (ab44206)
• sbx: add actions=read scope to PAT URL (#262) (fbaa291)

Bug Fixes

• acq: accurate git-identity guidance + workspace path pre-flight (#216) (546cc93)
• acq: carry publishedPorts and quote allow hosts in kit-translate (#221) (a36d783)
• acq: don't hang key rotation when sbx needs a login (#211) (#212) (bb0544d)
• acq: enumerate keychain-linux secrets in acq secret ls (#258) (f4e1bb9)
• acq: intercept --kit <ref> on run/create and translate it (#223) (a86d151)
• acq: let secret rm remove any stored entry, not just built-ins (#300) (#301) (ab506ed)
• acq: make kit fetch non-interactive; never prompt for git creds (#207) (#209) (b505336)
• acq: make USAi key rotation backend-neutral (#218) (4a5f8e1)
• acq: persist --kit/extra refs and restore them on start/restart (#328) (78ec68c)
• acq: propagate host git identity to guest (#429) (68a6e59)
• acq: run fails closed on an unresolvable target instead of silent no-op (#257) (c0b155c)
• acq: run github-scope advisory before provision on fresh create (#386) (c066206)
• acq: store USAi key before sandbox create to end 200-vs-401 split (#286) (c68ccb6)
• Add -f to sbx rm command to cleanup rotation validation sandbox (#268) (6a21e48)
• Avoid literal $MSB_ proxy token (#324) (548e314)
• http-test: Ensure the test can install git in alpine (#325) (a11ece2)
• install: handle shallow pinned updates (#428) (2f2eb37)
• kits: mode validator dropped all kit files on mawk (interval regex) (#380) (e46f055)
• kits: Pull in updated USAi kit with fixed opencode.jsonc config (#391) (83e0354)
• msb: detect stale ssh-agent --vsock route after a host reboot (#416) (3568212)
• msb: install/launch the agent + mount workspaces at their host path (#230) (0d2bbd0)
• msb: persist kit environment[] and replay it on agent sessions (#401) (bf89bce)
• msb: re-drive ssh-agent forward on running reattach (#392) (ab84c4c)
• opencode-web: background sbx exec command on host instead of opencode command inside sandbox (#210) (0a2057e)
• opencode-web: use serve command and drop per-run port publish (#204) (5364ffb)
• sbx: correct lifecycle verbs — sbx has no 'start'/'restart' (#285) (b69b5d1)
• sbx: make global secret-set bash-3.2-safe (empty-array under set -u) (#309) (632a656)
• sbx: stop the every-attach re-attach heal-loop noise on sbx 0.38 (#327) (24ceb43)
• secrets: honor explicit --host for built-in services; unbreak rm -g on bash 3.2 (#398) (d247a40), closes #384
• tests: restore real failure detection in the bats suite + repair 56 latent test failures (#393) (28325bf)

Documentation

• rename QUICKSTART*.md to docs/howto/{acq,sbx}.md (#361) (0ead93c)