Devbox Anywhere v1.1.0

Devbox Anywhere v1.1.0

This release adds the secure, agent-guided installation workflow for Claude Code, Codex, Hermes Agent, and other terminal-capable assistants.

Highlights

• Adds AGENTS.md and a reusable guided-install prompt.
• Adds scripts/install-devbox with a dry-run-first approval flow and explicit --yes for noninteractive installation.
• Requires an exact installer-bearing stable release commit and a clean, root-owned checkout at /opt/devbox-anywhere before privileged Docker operations.
• Sanitizes Git, Docker, and Compose environments and compares checkout bytes with the approved commit.
• Keeps code-server and container SSH loopback-only by default; public SSH requires explicit --expose-ssh and firewall preparation.
• Uses fixed, root-controlled persistent storage under /data/devbox and owner-only atomic secret state.
• Adds canonical acceptance, Compose-model, lifecycle, source-trust, failure-boundary, and mutation tests.
• Clarifies private SSH tunnelling, public/Coolify mappings, and provider handoff guidance.

Verification

The exact release commit passed independent security, functional, usability, privacy, and immutable-artifact review with no known blockers in the reviewed scope. The canonical repository test suite passed before publication.

A complete real Docker image build/runtime installation was not available on the review hosts. Compose semantics and installer lifecycle were validated through exact model checks, mocked lifecycle tests, source-trust probes, and mutation tests; this is not a claim of absolute security.

Upgrade and installation

Follow Agent-guided installation. Existing installations should review the release instructions and preserve backups before changing their deployment.