v0.5.0

Breaking changes

• cli: Remove the spellings v0.5.0 retires (23e2dd0)
  brig profiles, agents, profile, template, import, export, policies, create, env and reset, the subcommands agent list|save|load, policy list and secret list|rm, the run-line flags -t, -m, -n, --name, -w and --workspace, and -q after the verb are removed.
• profile: Remove the keys v0.5.0 retires (168e543)
  the profile keys forward:, statePaths:, shell: and gui: are removed, and a profile that still has one does not parse. BRIG_TEMPLATE_DIR is removed, and brig refuses to start while it is set and BRIG_PROFILE_DIR is not.

Features

• policy: Add the v1alpha1 policy envelope (35a283c) #302
• policy: Add brokered routes and presets (41eb967) #302
• secret: Add the broker and renewer seams (20418b8) #302
• renew: Refresh the Claude OAuth pair (ad48e99) #302 #275
• broker: Add the route broker (522d26d) #302
• broker: Add the brig-broker injector (6a549e8) #302
• creds: Deliver routes to the guest (36c4721) #302
• broker: Refuse tokens outside their carrier (0c500b5) #302
• renew: Journal each refresh in the store (4c6e0e3) #302
• cli: Show the broker in brig info (c9a046f) #302
• runtime: Route brig.internal to microVMs (8f9ac18) #302 #265
• policy: Add a route mode registry (8e175a3) #302
• envelope: Name the rootfs type and the Linux hypervisor (a2c427d) #30
• profile: Add the herd profile (278b890) #335
• runtime: Boot a Linux generic boot on hvi (0cbe087)
• runtime: Add BRIG_ROOTFS_MODE for an overlay root on two disks (3377c07)
• runtime: Boot overlay roots by default (92c0244)
• doctor: Say if an overlay root is available (b2cdf86)

Fixes

• policy: Allow the betas Claude Code sends (a44c4be) #302
• doctor: Check the image against the host trust policy (b716df5) #283
• doctor: Read the per-agent verify mode the way a run does (4fda2a7) #283
• sh: Describe the argv form in brig sh -h and drop its flag notice (7e61c48)
• runtime: Wait for a gateway to stop listening (9704236)
• verify: Stop suggesting brew for cosign on Linux (bb4f8ea) #540
• verify: Test both cosign hints on any host, and match the docs (89b7f44) #540
• runtime: Consume a pending terminal EOF before the nerdctl handover (2a91d24) #460
• cask: Render the completion stanzas as bash, zsh, fish (29402c9)
• runtime: Boot the urunc monitor BRIG_HYPERVISOR names on Linux (269dc80)
• install: Pin the runtime bundle at rc19 (1d90a40)
• wrap: Say what a guest said when it does not answer (c4d1b92) #533 #534
• wrap: Read a dead guest's log per stream and probe it once (edd047e) #533 #534
• wrap: Stop the guest log tail at a kernel panic (a116534) #534
• wrap: Show the monitor's error beside the guest's console (3f41228) #534
• wrap: Print the guest log as a terminal would show it (b0d9f6c) #534
• runtime: Warn when the bundle's brig runs without its launcher (daa0774) #531 #529
• runtime: Warn about the launcher before the runtime is asked (8059e00) #531

Refactors

• runtime: Keep the launcher sentence in one place (eef5311) #531

Documentation

• broker: Document the injector (c0f561c) #302
• broker: Describe routes on microVMs (37624d1) #302 #265
• broker: Add a figure of one routed request (64ec8b1) #302
• say who writes the exec argv line and where it lands (f006543)
• non-goals: Reopen a rules language for policy (04c9a38)
• herd: Narrow the exec exemption and fail closed on an empty key (4fed3cc)
• Mark the v0.5.0 spellings removed (fc419f4)
• runtimes: Name the urunc branch the bundle builds again (f1b2b1a)
• Describe the overlay root as the default (3288c28)
• troubleshooting: Give the recovery that avoids the bridge collision (d61c89a) #541

Contributors

• @ananos
• @asapranidis
• @pmoust
• @yashrajshuklaaa

New contributors

• @yashrajshuklaaa made their first contribution in #501

Full changelog: v0.4.1...v0.5.0