v0.4.26

Rust runtime release. See MIGRATION.md for Bash → Rust notes.

Install pin:

VAULTED_AGENT_VERSION=v0.4.26 curl -fsSL https://vaultedagent.com/install.sh | bash

What's Changed

• Read every Manifest through one entry parser by @JacobStephens2 in #113
• Write every Refs file through one writer by @JacobStephens2 in #117
• One refresh flow for both Backends over the Refs file writer by @JacobStephens2 in #119
• Spec: deepen Refs file writing into one module both refresh Backends share by @JacobStephens2 in #118
• Match Bitwarden refs through one Bitwarden listing module by @JacobStephens2 in #121
• Walk every Harness through one Inventory module by @JacobStephens2 in #123
• Load the manager token through one Token source by @JacobStephens2 in #125
• Judge and write 1Password refs through one 1Password listing module by @JacobStephens2 in #127
• Judge the Workdir through one module for launch, doctor and setup by @JacobStephens2 in #129
• Route every command line through one Invocation route module (pick takes its Service-user hop) by @JacobStephens2 in #131
• Deepen refresh into a Refresh module with the report as data by @JacobStephens2 in #133
• Read and edit defaults.conf and Harness confs through one Conf file module by @JacobStephens2 in #135
• Return a failed Manifest resolve as a typed Resolve failure by @JacobStephens2 in #137
• Judge every Manifest through one Manifest check by @JacobStephens2 in #139
• Build the Launch plan purely, behind a thin launch adapter by @JacobStephens2 in #141
• Deepen secrets validate into a Pre-flight report module by @JacobStephens2 in #143
• Write every whole-file rewrite through one File replace module by @JacobStephens2 in #145
• Read defaults.conf through one Machine defaults module that fails closed by @JacobStephens2 in #147
• Group a root-written Manager-token file to SUDO_USER when no Service user is set by @JacobStephens2 in #152
• setup wires day-one Harnesses through one Vault wiring module (--wire-only) by @JacobStephens2 in #154
• Installer delegates vault wiring and token storage to the Launcher by @JacobStephens2 in #155
• Spec: one Vault wiring module that setup and the installer share by @JacobStephens2 in #153
• Token capture owns every token door, so setup never stores an unverified token by @JacobStephens2 in #157
• Ask setup's questions through one Setup interview that writes nothing until the answers are in by @JacobStephens2 in #159
• Judge every Manager-token file through one Manager-token file module by @JacobStephens2 in #161
• Uninstall through one Uninstall plan that the Launcher and install.sh share by @JacobStephens2 in #163
• Harness discovery: one module detects agent CLIs for install.sh and va update by @JacobStephens2 in #165
• Bitwarden reference parse returns a typed fault; the Bitwarden listing owns the refs-line grammar by @JacobStephens2 in #167
• setup bitwarden writes the Refs file through the Refresh module by @JacobStephens2 in #169
• Check selected Backend CLI prerequisites before token capture by @JacobStephens2 in #174
• Create va update's download directory exclusively and privately by @JacobStephens2 in #176
• Limit the release build job to read and pin its actions and cross by @JacobStephens2 in #178
• Run the whole release from scripts/release.sh release vX.Y.Z by @JacobStephens2 in #181
• Release v0.4.26 by @JacobStephens2 in #182

Full Changelog: v0.4.25...v0.4.26