v0.1.1

Changelog

Features

• cef5134: feat(dist): add Homebrew cask, Scoop, Linux packages, and a curl|sh installer (@sebastianstupak)

Fixes

• 28909db: fix(deps): update vulnerable indirect deps; ignore the openpgp advisory (@sebastianstupak)
• 47802ca: fix(l4): bound RESP array and bulk-string lengths (@sebastianstupak)
• fe734c2: fix(l4): harden upstream auth parsing against panics and DoS (@sebastianstupak)
• f820431: fix(policy): reject path traversal in policy names (@sebastianstupak)
• 1a63607: fix: astro check import conflict in Base.astro and bump Go to 1.25.13 (@sebastianstupak)

v0.1.0

Changelog

Features

• e71c776: feat(audit): forward-compat API — Source field + chain verify (governance Task 3) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 0c53371: feat(audit): tamper-evident secret-free audit store (governance Task 1) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 611f56d: feat(audit): wire the audit spine into the daemon + CLI (governance Task 2) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 5246e9d: feat(autoscale): --autoscale opt-in flag + label (Task 1) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 33ceeb3: feat(autoscale): the reactive memory-grow control loop (Task 3) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• cd4b456: feat(autoscale): wire the loop into poddled + observability (Task 4) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• d9a5c49: feat(broker): Broker facade composing vault+handles+server (1.B) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• c04bcef: feat(broker): Credential + Handle types (task 1.1) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• bc596ed: feat(broker): egress redaction — scrub secrets from outbound bodies (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 9c1c763: feat(broker): git Basic-auth mode in the gateway (connectors, layer 1/4) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• d5ac4d1: feat(broker): handle TTL with injectable clock + ErrExpired (1.H1) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 662b7e3: feat(broker): handle issue/resolve/revoke (task 1.3) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• a64a368: feat(broker): injecting gateway + tests (1.4 / 1.H3) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• e50f9d1: feat(broker): seal vault secrets in memguard enclaves (1.H2) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 8dc934d: feat(broker): serveable gateway — Server.Serve/Stop (1.5) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 2265b75: feat(broker): tenant-scoped in-memory Vault (task 1.2) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 844f3fc: feat(cli): attach + run commands; down revokes handles via poddled (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 788e7ed: feat(cli): root command on cobra (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 440fd8b: feat(cli): target a remote host via PODDLE_HOST (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• cd7f509: feat(config): template loader with extends composition (step 1/3) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 3065dfa: feat(connect): poddle connect CLI + up wires connectors into pods (layer 3/4) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• e6e4803: feat(connector): built-in argocd, jenkins, docker (declarative) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• d199559: feat(connector): built-in gitea, bitbucket, drone, pypi (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 85bb0d5: feat(connector): built-in github, gitlab, npm connectors + default base_url (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• a116eb3: feat(connector): declarative connector engine + connection store (layer 2/4) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• f5e4b90: feat(dashboard): /v1/policies CRUD API — the UI-editable policy contract (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 8165ea3: feat(dashboard): Pods view — live fleet + performance console (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 25e2b09: feat(dashboard): Preact SPA — audit view + policy editor (reusable for cloud) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 7cec059: feat(dashboard): poddle dashboard server over the /v1/audit* contract (governance Task 4) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• e2a434f: feat(dashboard): disciplined sparklines + table density on Pods (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 155e320: feat(dashboard): enrich the pod drill-down with live facts (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• ecf2d55: feat(dashboard): governance console — Overview with attention + secrets (console Task 1) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• ea6a31c: feat(dashboard): real URL routing + Go SPA fallback + pod drill-down (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• f8daf1b: feat(dashboard): restyle to match the poddle web design system (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com)
• 16e0c68: feat(dashboard): segmented controls replace native dropdowns (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 692af49: feat(docs): arrow-key hints in the search footer (#11) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) a9a181f: feat(docs): command-palette search modal (#8) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 1953e0e: feat(docs): deepen docs — Security, Configuration, Headless & CI (#3) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 118ad66: feat(docs): per-command examples + FAQ / troubleshooting (#4) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 397db02: feat(docs): whole-row selectable search results + arrow-key navigation (#10) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 89db4bb: feat(down): remove a sandbox; portable tail keep-alive; provider lifecycle test (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 7843f11: feat(engine): add Create and Attach to the engine + podman provider (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 7ea2244: feat(engine): mounts + env in Create (for identity materialization) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) e54ab97: feat(exec): Runner abstraction with OS and Fake implementations (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) c7c02b4: feat(harness): claude-code harness slice (1.9) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 214b6f5: feat(harness): pod-side runtime abstraction (1.8) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) afedce0: feat(identity): identity add/ls/status/rm commands + up --identity (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 1002055: feat(identity): providers yield a broker.Credential (1.6 + 1.7) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 5dd93f3: feat(identity): store + Provider (auth-vendor) interface + fake (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 4b965ea: feat(identity/anthropic): claude setup-token provider -> CLAUDE_CODE_OAUTH_TOKEN (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 25e154d: feat(l4): Postgres termination proxy (SCRAM/md5/cleartext) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 4789869: feat(l4): Redis TCP broker — swap the handle for the real AUTH, then splice (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 895debd: feat(l4): SCRAM-SHA-256 client (Postgres auth, stdlib only) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 9af6c62: feat(ls): list sandboxes command, registered on root (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 22bf59e: feat(move): inherit the pod spec from its labels (Task 2) (sebastianstupak 100760888+sebastianstupak@users.noreply.github.com) 3b09208: feat(move): make headl...