v0.0.1

   🚨 Breaking Changes

• Default envFile to .env and rename secretFile to envSecretFile  -  by @antfu and Claude Sonnet 5.5 (741d4)
• Rename control and monitor to dashboard, sync to selfUpgrade  -  by @antfu and Claude Sonnet 5.5 (f5ab4)
• Remove the gpg builtin and add a git-signing example  -  by @antfu and Claude Sonnet 5.5 (b2e25)
• Make GITHUB_TOKEN the github builtin's primary variable  -  by @antfu and Claude Sonnet 5.5 (e3eb8)
• setup: Stop prefilling GH_TOKEN from gh auth token  -  by @antfubot in #5 (11103)

   🚀 Features

• Generate a caged compose stack from a typed config  -  by @antfubot (c2545)
• Report every failure as a diagnostic with a code, fix and docs page  -  by @antfubot (85714)
• Broker github and npm tokens automatically when they are set  -  by @antfubot (d0ade)
• Request rules for brokered secrets, shared service networks and a paseo-browser example  -  by @antfubot in #4 (aa5d4)
• Support a tailscale node per service  -  by @antfubot in #6 (dd80f)
• Support cutomize tailnet port  -  by @antfu (d1c17)
• Rebuild the monitor with Vue, Vite and UnoCSS  -  by @antfu and Claude Sonnet 5.5 (77834)
• Add a daemon that serves the control API and upgrades on a schedule  -  by @antfu and Claude Sonnet 5.5 (220e2)
• Render logs with xterm and add a network request panel to the dashboard  -  by @antfu and Claude Sonnet 5.5 (7d930)
• broker:
  • Swap placeholders for secrets only towards their bound hosts  -  by @antfubot (915fd)
• cli:
  • Add generate, up, compose and serve commands  -  by @antfubot (15a89)
  • Add setup to scaffold config, env files and gitignore  -  by @antfubot (7d6dd)
• control:
  • Expose stack status, stats, logs and restarts over an OpenAPI HTTP API  -  by @antfubot (3e414)
• relay:
  • Publish caged service ports through a socat sidecar  -  by @antfubot (9c9c2)

   🐞 Bug Fixes

• Publish only the broker files the image needs  -  by @antfubot (ee658)
• Reject unsafe ports, volumes and persist paths and disable sidecar forwarding  -  by @antfubot (3434e)
• broker:
  • Pass rules inline so fresh placeholders recreate the broker  -  by @antfubot (1f889)
  • Enforce the allowlist on CONNECT so raw TCP tunnels obey it  -  by @antfubot (687cc)

    View changes on GitHub