v0.2.0-rc.2

Changelog

• 705ef6c Biome format and test types for the r3 web fixes
• adf3f56 CONTRACTS: a default install knows no trusted node address
• 3aa7452 CONTRACTS: compose.get hides the pasted file without env.view
• 26f036c CONTRACTS: node addresses for git, git_proxy_resolves, shared address table
• 6e98cc8 CONTRACTS: per-node LB certificates, peers and what revocation covers
• 50b0cdf CONTRACTS: the LB certificate gaps that remain
• 9fc09b3 CONTRACTS: trusted and reported node addresses, the seed's per-node recheck
• e136396 Format the earlier fixes with Biome
• 72351b6 Internal git hosts count GitHub and provider sources as users of a host
• fe2e683 Join commands install the panel's own release
• a245f86 Members with project access can pick a node in create forms
• 23af902 Panel runs as uid 61000, which no login user has
• f08c4d2 Viewers see a provider source read-only instead of "Connect GitLab first"
• 81ed20b Warn about accounts with the panel's uid on upgrades too
• 1c4bbf8 agent hub: cap the hello and every ServiceStatus a node sends
• c343ba6 agent: automatic UpdateAgent requests wait like the agent's own updates
• 2dc1a3c agent: refuse the node's own addresses for git, and unresolvable names behind the proxy
• 43c778f agent: report up to 64 interface addresses per family
• df2a2c7 agent: service folders on a node are root's only (0700)
• 70ea8db agent: seylo join --force keeps git_proxy_resolves
• c91798f agent: shared mode removes our own seylo-traefik
• 51a6bb9 backups: nodes no longer get the destination's keys
• 5d28e3a boxes: refuse a token in the repository URL, drop one saved before
• 4a19ed0 build: no buildx is a clear build failure, plus a node check for it
• e5a85a1 cli, web: name the keys settings page API keys and MCP
• e23f90a cli: rotate-key refuses a panel image older than 0.2.0-rc.2
• caabd43 cli: seylo panel rotate-key
• 3dd2749 compose: no "build sections are not built" warning for stacks the panel builds
• b822d71 cron: read day-of-week 7 as Sunday on the node
• 2c11e50 dbtools: database web UIs get a login only the edge holds
• 6f0a7f1 docs: master-key rotation through seylo panel rotate-key
• 09a26b8 e2e: RESULTS.md 38/38 on the v0.2.0-rc.2 candidate
• 49fafdb e2e: check 38 expects every migration in the journal, not a fixed 2
• 2bd0fd9 edge: serve maintenance and down pages with a strict CSP and nosniff
• 45d84e7 fs: the file manager creates service folders 0700 too
• 02dd094 handshake: the panel signs HelloRejected; unsigned rejections do not count
• 221a336 installer: never install an older release than the node runs
• 336cd79 lb-tls: node certificates live 30 days instead of 365
• b1fed38 lb-tls: per-node certificates with one-off issuers, peers and revocation
• f175b31 metrics: drop throttle state of removed services and nodes
• de728bb metrics: graphs refetch when a minute is written, not on every node sample
• 572e149 metrics: keep only the latest sample on the node
• fcdfe56 move, cleanup: never sweep a volume a move is copying into the node
• 291df81 move: nothing starts or re-places a service while its volumes copy
• 2aeca51 nodecheck: disk space hint names Settings > Docker cleanup
• d528e9f nodecheck: the Wings fork's proxy holding 80 and 443 passes
• 28a8778 panel.files checks the panel's node only
• 8ef18b5 panel: a Docker update without a result fails after an hour
• 2fc6477 panel: a broken database makes /api/health answer 503, not 200
• 39b8bd6 panel: a deploy trigger URL call joins only a queued trigger URL deploy
• 64d09ff panel: a git host on the nodes' own addresses is internal
• 7080926 panel: a joining node cannot make itself a build node; SECURITY.md states what a builder sees
• 6655bf4 panel: a rotation that never committed no longer stops the panel
• 558bc8c panel: accept only a run's own backup object key, document node bucket access
• 5e288cc panel: agent-reported node addresses only count where an admin records the host
• 2abb837 panel: brake second-factor code guessing per account
• 003c22e panel: build each project's env graph once per desired compile
• c1ca7c3 panel: check Mongo databases over TCP instead of starting mongosh every 10 s
• 12a7217 panel: check WebSocket text frames before Elysia parses them
• d001d41 panel: classify addresses with netguard's ranges
• c6ae831 panel: compress the web app, op results and MCP replies
• 9e90eb9 panel: creating a service no longer hands out env.edit, files.write or services.deploy
• 8a95daf panel: cron.run reads output with logs.view; compose.get hides the pasted file without env.view
• 60aaf75 panel: delete finished jobs once an hour, not only at start
• 5796559 panel: deleting a clone or its source ends the data copy
• 8b9fca5 panel: index deployments and builds in flight for the node scopes
• bbd22f8 panel: internal git hosts with underscores list and can be taken off
• b901a11 panel: join command comments name the install host and --version
• 1600d6b panel: join command pipes the verified install host, pins the release with --version
• 32955e7 panel: keep report totals per node so the hourly prune reads only nodes over a cap
• 8f43244 panel: match alert keys on the event_key index and age out unresolved alerts
• 12d1833 panel: metrics minute close in one transaction with running rollup sums
• 110406f panel: prune finished jobs every hour, not only at start
• ebd7466 panel: rotation output without a dangling "0 sealed values sealed again:"
• 5c66b99 panel: rotation replaces the agents' TLS key and prints exact re-join commands
• 250bf3b panel: services.moveProject carries or checks the service's internal git host
• 3e098aa panel: services.moveProject checks the git host with the caller's address scope
• f4db427 panel: take the certificate retry minute before the DNS and agent awaits
• 7193058 panel: test that ApplyService passes build one env graph per project
• b31c223 panel: the agent version floor uses the running release's minAgent
• 5a34c6c panel: the live socket's session checks no longer slide the session
• 9ab92a1 playwright: demo answers nodes.choices; env-save waits for the editor state
• 5656dad playwright: demo data for a project's internal git hosts
• a8cb3b5 proto: LB certificates name their node, and lb_tls lists the peers
• 9eb489a proxy: each node's LB entry point takes only current nodes' certificates
• dba0439 reconcile: VM test that mounts work under private service folders
• 06a58b0 reconcile: an agent stop or crash mid health check rolls the deploy back
• 30ffb5c reconcile: file mounts per spec hash, so a failed deploy keeps the old files
• bba38f4 release: build in a read-only job, draft and push with no npm code
• 7d9c033 seylo join --force keeps the node's own config.yml settings
• 259dd8b test: a node joined from another panel keeps that panel's service data
• 116de3c test: the LB identity test waits for each node's certificate confirmation
• a3e5ebc tests: an unreadable cleanup schedule is day 8 now
• fc80feb tests: service folder modes with file mounts in per-spec-hash folders
• f25f8bd tests: the Box repository URL test grants services.deploy
• ff58576 ui: CopyField shows keyboard focus on the whole field
• 1817196 ui: LogBuffer search reads only new lines on a repeated query
• fb9a1b9 ui: code blocks wrap by default, and notes' fenced code uses them
• 9a03510 ui: selection pills move only with the selection
• 0e134e5 update: the agent restart waits for deploys in their health check
• 25b4d1c updates: a node that drops mid UpdateAgent waits for its reconnect
• a148d54 updates: cap the agent's wait at a day and half an hour
• 490d35e updates: nodes skipped as offline before rc.2 catch up after the upgrade
• c5db18e updates: panel image from the run's manifest, catch-up waits, fewer jobs
• 5d1d30e updates: release channel, and nodes that were offline during a run catch up
• 5502958 volumes, backup: keep sticky and folder setgid bits on import and restore
• 6a97d9f volumes: the import marker creates service folders root-only
• cd4a874 web: ?redirect= refuses dot segments that collapse to //host
• f9e1915 web: MCP copy says only deleting waits for approval
• 0f15afe web: Monaco keeps URL links and Ctrl+G go to line
• 354f87b web: Move to project follows the project the move went to
• aaa7c1f web: allow an internal git host from the Source tab, a failed deploy and project settings
• 44d7060 web: drop the internal git host note from the provider form
• bb50d72 web: git host note is for members only, with its own text for names that do not resolve
• d91b958 web: internal git hosts without an approver are not only upgrade rows
• f62d575 web: loading placeholders, copy controls, terminal switch slide, view fades
• dadbe93 web: provider sources show "Deploy on push" on the Deployments tab
• d89b830 web: service tabs wrap from md up; sideways rows fade where they hide items
• 2a5201c web: show why a provider's branch list failed
• ced30b8 web: smaller Monaco chunk, and no source maps in dist or the image
• 75d57c4 web: text typed during an env save stays unsaved
• 6516900 web: the Console keeps 10,000 lines of xterm scrollback, not 100,000
• f173c0b web: the GitHub form shows why its branch list failed too
• 4a6bcd2 web: the custom CSS editor keeps its color swatches
• 8c60a3d web: the setup-link command block wraps by default
• cd32855 web: the sidebar's selected background slides to a project row
• 1a27642 wings: Detect no longer leaks a connection per call