v0.7.0

Highlighted Features

• QUIC syncer - a secure, reliable, and efficient sync protocol for the Aranya graph. The syncer leverages the secure rustls PSKs originally developed for AQC to secure all sync requests and responses. Each Aranya team is secured with a different PSK so that devices can only sync commands for teams they have been granted access to.
• Aranya graph command finalization - a way to finalize graph commands so that future commands added to the graph cannot change them.

Coming Soon

• Cryptographically secure IDs for labels and roles to improve security.
• Custom roles that can be defined at runtime rather than hard-coded in the policy.

Using The Quic Syncer

A PSK for the Aranya team must be configured to use the QUIC syncer.

Refer to docs for QuicSyncConfig in the Rust API:
https://docs.rs/aranya-client/0.7.0/aranya_client/struct.QuicSyncConfig.html

Refer to docs for AranyaQuicSyncConfig and AranyaQuicSyncConfigBuilder in the C API:
https://aranya-project.github.io/aranya/capi/v0.7.0/structAranyaQuicSyncConfigBuilder.html

Configuring the daemon to use the QUIC syncer:
https://docs.rs/aranya-daemon/latest/aranya_daemon/config/struct.Config.html#structfield.quic_sync

What's Changed

• QUIC Syncer by @ssweetney-spok, @gknopf-aranya in #258
• daemon: write IPC API public key to file system by @elagergren-spideroak in #295
• daemon: generate fresh IPC API key at startup by @elagergren-spideroak in #303
• daemon: use standardized file system paths by @elagergren-spideroak in #298
• capi-example: use the abs path like the daemon does by @jdygert-spok in #310
• tests: rm obsolete aranya-daemon tests by @gknopf-aranya in #307
• add CLAUDE.md by @elagergren-spideroak in #311
• all: bump core crates by @elagergren-spideroak in #313
• Refactor daemon by @jdygert-spok in #286
• daemon: finalization error handling by @gknopf-aranya in #319
• Update to latest aranya-core with policy text changes by @jdygert-spok in #322
• queries: move from client to team by @gknopf-aranya in #344
• client: mv add_team, remove_team from team to client by @gknopf-aranya in #345
• release: v0.7.0 by @gknopf-aranya in #343

Full Changelog: v0.6.1...v0.7.0