Skip to content

superself 0.7.0

Choose a tag to compare

View all tags
@tonite31 tonite31 released this 23 Aug 16:25
· 54 commits to main since this release
v0.7.0
ce5f83b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Agent login and mini-app plugins

  • self login — device-flow login for agent credentials (scoped, refresh-rotated, 0600 file storage; self logout, self whoami).
  • self app install <key> / list / update / remove — signed mini-app plugins (wallet, email, landing) served by the rail and verified before a byte runs.
  • Plugin trust model C: the CLI pins two root public keys (fingerprints in the README); which release keys are trusted comes from a signed, expiring trust document fetched from the rail — a leaked signing key is revoked by publishing a new document, no CLI update needed. self app trust [--refresh] shows what this binary currently accepts.
  • --json machine output with one error envelope, exit codes 0/1/2/3 (3 = retryable), idempotent call keys on money-moving commands.

Behavior-preserving for every existing command: a 0.6.x workflow with no credential and no plugins behaves identically.

Assets 2
Loading