Sallyport 0.8.16

Sallyport 0.8.16

Documentation and repository-hygiene release; app behavior is unchanged.

A new messaging and claims policy (docs/15-messaging.md) pins every
product claim to documented behavior in the trust model and lists the
claims Sallyport deliberately does not make. Sample hosts in tests and
the mock management daemon now use RFC 5737 documentation addresses
with neutral names, the public snapshot's leak guard covers more
identifier patterns, and the public README carries the current
positioning and a two-minute quickstart.

Sallyport 0.8.15

Sallyport 0.8.15

Hotfix: the MCP stdio shim (sp mcp) blocked on stdin with
FileHandle.read(upToCount:), which waits for a full buffer or EOF. A
live MCP host writes one small initialize request into an open pipe
and waits for the reply, so the shim never answered and every host —
Claude Code, Claude Desktop, Codex CLI, OpenCode — timed out after 30s
("failed to connect"). 0.8.14 shipped this regression; the agent ->
sp -> vault path was broken with every MCP host. Switch to
availableData so replies flush as requests arrive.

Also hardens the macOS CI lane against a stalled Sparkle binary-artifact
download (fail-fast pre-resolve with retries; persistent SPM scratch
dirs), with no effect on the shipped app.

Sallyport 0.8.14

Sallyport 0.8.14

Transport and trust-context hardening:

• Pin each control-socket connection to one peer process instance
  (connect-time audit token + kernel start time), re-validated on every
  call; connection descriptors are close-on-exec on both ends.
• Approval cards and the sessions list now flag interpreter and
  shell origins whose signature names a runtime rather than one agent,
  and show the requesting process's working directory.
• Known-agents registry (Claude Desktop, Claude Code, Codex CLI) for
  one-click strict allowlist entries with signer cross-check, and
  one-ceremony pin updates when a pinned agent ships a new build.
• Localize all new copy in German, Spanish, French, Brazilian
  Portuguese, Russian, and Simplified Chinese.

Sallyport 0.8.13

Sallyport 0.8.13

Security and trust-boundary hardening:

• Pin HTTP, OAuth, and remote MCP connections to validated DNS snapshots while supporting bounded multi-address failover.
• Persist accept-new SSH host keys only after successful client authentication and retain failure evidence.
• Clarify session authorization and show bounded HTTP request bodies in per-call approvals.
• Remove response-content DLP and exact-echo rewriting so legitimate target results are not corrupted.
• Tighten display bounds, secure-random failure handling, and public release publication checks.

Sallyport 0.8.12

Sallyport 0.8.12

Localize the macOS app in German, Spanish, French, Brazilian Portuguese, Russian, and Simplified Chinese. Add per-app language switching, an About update button, and localized approval and activity copy.

Sallyport 0.8.11

Sallyport 0.8.11

Fix GitHub and Homebrew mirror publication.