v0.1.0-rc18

Changelog

Features

• 4bc396d: feat(brigd): refuse a connection from another user's uid (@pmoust)
• 2762811: feat(brigd): version the protocol and return stable codes (@pmoust)
• 1d04548: feat(cli): add --json to the read verbs (@pmoust)
• e52b839: feat(cli): add --no-project to run a session without its project (@asapranidis)
• 2ca7497: feat(cli): add brig logs <ref> to read a sandbox's log (@pmoust)
• 352349c: feat(cli): add brig doctor to name the failing prerequisite (@pmoust)
• 79fd7b2: feat(cli): add shell completion for bash, zsh and fish (@asapranidis)
• 2d71bbe: feat(cli): add verbosity levels and the --verbose and -q flags (@asapranidis)
• 9a8abab: feat(cli): collapse the lifecycle verbs onto sh, rm --all and run -d (@asapranidis)
• a62c7ab: feat(cli): collapse the management commands into noun groups (@asapranidis)
• ac63564: feat(cli): give brig's flags a position and read a session ref (@asapranidis)
• ba32eb8: feat(cli): print the session ref in brig ls, and add ls -q (@asapranidis)
• d80a080: feat(cli): read an isolated sandbox's gateway log (@pmoust)
• b90f9e3: feat(cli): read run's project as a positional, and add --home (@asapranidis)
• 6d13bbf: feat(exitcode): add a shared classifier for brig's exit codes (@pmoust)
• 2e3aad8: feat(policy): add CheckCoverage, refuse an unenforceable attach (@marrgko)
• 6ab6d29: feat(policy): add EffectivePolicies, the union of what binds a run (@marrgko)
• 62bea97: feat(policy): add the attach/detach CLI (@marrgko)
• 72a7c14: feat(policy): add the attachments record (@marrgko)
• 9ab8c58: feat(policy): add the brig policy CLI commands (@marrgko)
• d56604e: feat(policy): add the check command (@marrgko)
• db076f7: feat(policy): add the policy document format and directory loading (@marrgko)
• bdaac47: feat(policy): enforce a bound policy at the sandbox's gateway (@ananos)
• 8f39f7a: feat(policy): export CheckName to validate a name before a path exists (@marrgko)
• 44d0b83: feat(policy): hold attach's -n to a session name a run would start (@marrgko)
• edd8a48: feat(policy): name the file when the attachment record will not parse (@marrgko)
• 50b9be8: feat(policy): refuse a policy name the policy directory reserves (@marrgko)
• b222d43: feat(policy): refuse to break a policy binding, unless --force (@marrgko)
• a1ddf88: feat(policy): save an attachment before announcing it (@marrgko)
• e0c98b4: feat(policy): say that a binding is recorded, not enforced (@marrgko)
• 9f20278: feat(policy): show a binding whose policy did not load (@marrgko)
• 3fd2827: feat(policy): show what binds each policy in brig policy ls (@marrgko)
• 1091cef: feat(profile): add an inline policy: field (@marrgko)
• e31a19b: feat(run): run the agent as a child under --json (@pmoust)
• c24622c: feat(runtime): capture the runtime's output and print it on boot failure (@asapranidis)
• b530907: feat(secret): add a Secret Service backend for Linux (@pmoust)
• 73b5233: feat(session): add a session ref that refuses a label it cannot keep (@asapranidis)
• 0cd514a: feat(session): stop shortening a session slug, and drop its cap (@asapranidis)
• bf1a149: feat(wrap): keep verification visible and put the envelope behind --verbose (@asapranidis)
• 5c1d3e1: feat(wrap): key the session index by ref (@asapranidis)
• f3e9e9f: feat(wrap): mount a named project beside the guest home (@asapranidis)

Fixes

• 2d06ec4: Revert "fix(cli): warn about tail flags only on verbs that forward a tail" (@pmoust)
• 1d130fd: fix(agent): refuse a trailing argument in every subcommand (@pmoust)
• 8bacd17: fix(cli): Say brig agent ls in the unknown-profile message (@ananos)
• 5071c81: fix(cli): class a verbless bad ref as a usage error, not failure (@pmoust)
• a3ce070: fix(cli): complete an inline --flag=value in zsh and fish (@asapranidis)
• 85e6ac4: fix(cli): complete at brig's own parsing boundary, not before it (@asapranidis)
• e41207f: fix(cli): diagnose a bare ref as a ref, not an unknown command (@asapranidis)
• c06f9bc: fix(cli): keep reading brig's flags after the project positional (@asapranidis)
• f0f1dd3: fix(cli): make rm and logs exit 3 when the sandbox is absent (@pmoust)
• 6ed914b: fix(cli): read the global flags in the completion test off the table (@pmoust)
• 1fb3036: fix(cli): warn about tail flags only on verbs that forward a tail (@pmoust)
• 4bf5409: fix(cli): warn about tail flags only on verbs that forward a tail (@pmoust)
• 65f92df: fix(completions): survive set -u in bash, and stop caching in fish (@asapranidis)
• 817f3e6: fix(runtime): check BRIG_RUNTIME_BIN before driving it (@pmoust)
• 35275f6: fix(runtime): implement --network isolated on hull (@ananos)
• 01b0e84: fix(runtime): refuse a GUI profile in CanRun so join is covered (@pmoust)
• 8181068: fix(runtime): refuse a GUI profile on the container path (@pmoust)
• 4ef1832: fix(secret): refuse when the keyring has no default collection (@pmoust)
• 7da1279: fix(session): scope the reserved-label refusal to the resolved agent (@pmoust)
• d37b58f: fix(wrap): read an index holding JSON null as empty (@asapranidis)
• b5c20fe: fix(wrap): read the remembered project back like the home (@asapranidis)
• e8761c0: fix(wrap): resolve a project path before ruling out the root (@asapranidis)

Refactors

• 6bf21fd: refactor(brigd): rename the protocol's vm field to sandbox (@asapranidis)
• 14b1005: refactor(policy): pass Bindings its profiles, and reuse the flag helper (@marrgko)

Documentation

• a15712b: docs(brigd): document the protocol version, id, code and peer check (@pmoust)
• 7d47d4f: docs(cli): state intent in comments rather than issue history (@asapranidis)
• 8340bb4: docs(policy): document brig policy in the README and docs/policies.md (@marrgko)
• 340affc: docs(readme): name the session index and what it is for (@asapranidis)
• e2a9543: docs(readme): teach brig agent, and say why secret keeps its verbs (@asapranidis)
• 2ad8a23: docs(readme): teach sh, rm --all and the ref brig ls prints (@asapranidis)
• cabc31b: docs(readme): teach the project positional and --home (@asapranidis)
• 07bc87e: docs(readme): teach the ref form and the flag positions (@asapranidis)
• b98880b: docs(secret): document the Linux Secret Service backend (@pmoust)
• 6f09c5e: docs: Bring the README up to the brig we ship (@ananos)
• 82bc6e6: docs: Fix the claims that no longer hold (@ananos)
• 85c3452: docs: Retire the old profile, env and exec spellings (@ananos)
• 691e2c4: docs: add AI policy (@pmoust)
• bad7110: docs: add a release checklist (@pmoust)
• 731a3cf: docs: add release, CI, coverage, Go and license badges (@pmoust)
• e1e72eb: docs: document shell completion (@asapranidis)
• 7ab68c3: docs: name hull's real build target in the from-source instructions (@pmoust)
• 561b382: docs: say where completion stops, now that it is the parser's boundary (@asapranidis)