v0.8.0

Added

• Added provider: azure for managed Azure Linux and native Windows SSH leases, including direct and brokered provisioning, shared Azure networking, SKU fallback, Azure docs, and cleanup support. Thanks @jwmoss.
• Added provider: e2b for delegated E2B sandbox runs using E2B sandbox REST/envd APIs. Thanks @zozo123.
• Added provider: semaphore for direct Semaphore CI testbox leases over SSH. Thanks @loadez.
• Added an authenticated coordinator control WebSocket for low-latency run attach streams and lease heartbeats, with HTTP polling/heartbeat fallback for older brokers. Thanks @vincentkoc.
• Added rescue-first desktop/WebVNC failure output that names the failing layer and prints exact rescue: or native VNC fallback commands when bridges, viewers, browser launches, VNC targets, or input stacks hang.
• Added collaborative WebVNC observer mode, with one active controller, read-only observers, and a portal takeover button that shows who is controlling the session.
• Added first-class crabbox artifacts commands for desktop screenshots, MP4 recordings, trimmed GIFs, logs, metadata, Mantis/OpenClaw QA templates, and PR-ready publishing through broker-owned artifact storage, AWS S3, or Cloudflare R2.

Changed

• Expanded Semaphore and E2B documentation across provider, configuration, CLI, and command pages so direct providers have first-class setup, auth, lifecycle, and troubleshooting guidance.
• Changed crabbox attach to prefer the coordinator control WebSocket, drain retained backlog pages, and then stream live run output with less polling latency.
• Changed WebVNC portal sharing to open as an in-session modal, added a standalone share-page back action, and simplified collaboration controls into a single stateful control button.
• Raised the Go core coverage gate to 90% and added regression coverage around provider claims, config parsing, bootstrap defaults, run-log previews, and slug fallbacks.

Fixed

• Fixed the portal provider filters so Azure leases show their own filter badge and provider icon. Thanks @stainlu.
• Fixed Azure broker SSH security rules so repeated primary/fallback SSH ports are de-duplicated before writing network security group rules.
• Fixed crabbox run transport chatter by keeping SSH multiplexers alive longer, retrying fallback SSH ports for streaming commands, and batching stdout/stderr preview events into larger coordinator chunks. Thanks @vincentkoc.
• Fixed macOS WebVNC cursor visibility by enabling noVNC's dot-cursor fallback when Screen Sharing sends a transparent or zero-sized cursor.
• Fixed managed AWS macOS bootstrap so VNC password generation does not abort under pipefail before Screen Sharing readiness is installed.
• Fixed WebVNC daemon start-by-slug so coordinator-backed leases use the resolved target OS in the background bridge command.
• Fixed coordinator-backed crabbox list so a stale admin token no longer blocks normal logged-in users; the CLI now falls back to active user-visible leases instead of failing with 401 unauthorized.
• Fixed desktop, screenshot, VNC, and WebVNC SSH helpers so they retry live fallback ports when a coordinator lease advertises an SSH port that is not ready yet.

Fixed

• Fixed stale Code, WebVNC, and egress bridge clients so expired or missing leases stop polling/restarting after terminal coordinator responses. Thanks @vincentkoc.

Fixed

• Fixed Blacksmith Testbox shell command rendering so multiline --shell payloads with trailing blank whitespace do not produce a spurious shell syntax failure after the remote command succeeds.