v0.16.0

0.16.0 - 2026-05-18

Added

• Added provider: exe-dev for exe.dev VM SSH leases through the exe.dev SSH API, including Crabbox sync/run, crabbox ssh, and provider docs.
• Added the Railway delegated provider for redeploying an existing Railway service, streaming build/runtime logs, and reporting deployment status through crabbox run, status, stop, and list. Thanks @zozo123.
• Added direct crabbox doctor readiness for all built-in providers without creating provider resources.
• Added direct crabbox doctor --provider exe-dev readiness through the exe.dev inventory API without creating VMs.
• Added Cloudflare runner readiness to crabbox doctor --provider cloudflare so runner URL, auth, and container bindings are checked without creating a sandbox. Thanks @altaywtf.
• Added crabbox doctor --json, provider error classification and hints, direct-check timeout/API/mutation labels, optional --doctor-probe-ssh, and scripts/live-doctor-smoke.sh for maintainer live coverage checks.
• Added --slug for crabbox warmup, fresh crabbox run leases, and crabbox checkpoint fork, plus --label for human-readable run history/timing metadata.
• Added a light/dark mode toggle to the crabbox portal header that defaults to the system color scheme, persists the choice in local storage, and applies before first paint to avoid a flash.
• Added a reusable macOS developer-tool prep script for image bakes that verifies Command Line Tools, installs Homebrew plus common CLI tooling, activates Node 24/pnpm, and exposes stable SSH-visible tool shims.
• Added an account-guarded EC2 Mac Dedicated Host quota request helper for turning macOS lifecycle smoke quota evidence into a dry-run or explicit AWS Service Quotas request.
• Added a no-spend macOS coordinator remediation audit helper that bundles provider identity, IAM policy, host quota, host allocation dry-run, guarded IAM apply dry-run, and guarded quota request dry-run evidence into summary.json.

Changed

• Changed Actions hydration to run repo workflow setup locally over SSH by default, auto-hydrate crabbox run when actions.workflow is configured, and keep GitHub self-hosted runner registration behind --github-runner fallback.
• Changed AWS macOS AMI selection so newer mac-m* EC2 Mac leases use macOS 15 images while mac2* and legacy mac1.metal continue using launchable macOS 14 images.
• Hardened macOS image lifecycle smoke so source, candidate, and promoted images must expose Command Line Tools-compatible Apple developer tools, Swift, Homebrew, and common Node/pnpm developer tooling before promotion, with stricter macOS 15 and Swift tools 6.2 defaults for mac-m* host families.
• Clarified WebVNC docs to include coordinator-backed AWS macOS desktop leases in the supported portal bridge surface.

Fixed

• Fixed AWS macOS lease bootstrap so EC2 Mac instances explicitly install the Crabbox SSH key, enable Remote Login on configured ports, and treat Screen Sharing as available for WebVNC even when a dedicated host lease predates the desktop=true label.
• Fixed AWS WebVNC reconnects so coordinator lease heartbeats refresh SSH ingress from the caller source before local bridge startup retries.
• Fixed the portal so configured AWS macOS Dedicated Hosts appear as lease-like dedicated rows with host detail pages, attached-lease access actions, and local start/WebVNC commands for host-pinned desktop leases.
• Fixed WebVNC daemon restarts so the background bridge keeps its lease claim after a repo checkout changes.
• Fixed macOS WebVNC bridge churn by using a smaller bridge pool for macOS Screen Sharing instead of opening the default multi-slot VNC pool.
• Fixed macOS WebVNC portal performance by using latency-biased noVNC compression and quality defaults for Screen Sharing sessions.
• Fixed WebVNC portal credential failures so bare or stale macOS links stop with a clear status instead of opening a blank retry loop.
• Fixed WebVNC local bridge startup so resolved SSH fallback ports are reused for the foreground VNC tunnel instead of falling back during probes and then tunneling the stale configured port.
• Fixed Railway crabbox run redeploys to use Railway's deployment redeploy mutation so live Docker-image services return the new deployment ID reliably.
• Fixed pinned AWS macOS host/image launches so region fallback cannot silently route a candidate image proof onto a different region or host.
• Fixed direct AWS AMI checkpoint create, inspect, delete, and fork paths so source instances are validated before host preparation and recorded account/direct-backend metadata is honored even after coordinator configuration changes.
• Fixed direct AWS macOS AMI checkpoint forks so resolved and recorded EC2 Mac Dedicated Host pins are reused after coordinator routing is disabled.
• Fixed AWS macOS native checkpoint selection so brokered and direct macOS checkpoints use AMI-backed snapshots by default instead of raw EBS snapshot forks that EC2 Mac cannot reliably relaunch.
• Fixed macOS image lifecycle smoke checkpoint forks so EC2 Mac host recycle waits require stable availability and retry once after transient host recycle failures.
• Fixed macOS image lifecycle smoke checkpoint forks so forked macOS leases request desktop/WebVNC metadata before collecting WebVNC evidence.
• Fixed macOS image lifecycle smoke summaries so paid EC2 Mac Dedicated Host allocation failures preserve stderr, blocker text, and remediation guidance instead of writing an empty blocker.
• Fixed EC2 Mac Dedicated Host state parsing so live AWS DescribeHosts responses are recognized as reusable by macOS lifecycle smoke instead of falling through to a new host allocation path.
• Fixed existing AWS macOS lease commands so crabbox run --id ... --target macos defaults the irrelevant capacity market to On-Demand instead of failing Spot validation before reaching the lease.
• Fixed recursive run artifact globs so ** works on older Bash without crossing unintended path segments.
• Fixed crabbox doctor local tool checks so providers that do not use local SSH/rsync do not fail on those tools.