v0.2.0

Changelog

• 70f4433 Merge pull request #1 from prodioslabs/cursor/setup-dev-environment-9d98
• a69a995 chore(ci): temporarily disable push and pull_request triggers in CI and Release workflows
• 8dedb02 docs(egress): document topology-based egress gateway
• e4bcb36 feat(cli): expose network allow-list, block-all, and essential-services
• 4d8fb52 feat(cluster): expose manager endpoints in CA/heartbeat protos
• 513c335 feat(daemon): rediscover managers and failover worker control dials
• 52f5a24 feat(docs): add Dockerfile and .dockerignore for documentation build
• 80d26e0 feat(egress): add cellar-egress-gateway binary and update installer
• 625f815 feat(egress): add cellard-owned /29 IPAM allocator
• 06bd83f feat(egress): add egress-gateway binary, gRPC control API, and image
• c673927 feat(egress): export DNS/peek helpers and add NXDOMAIN replies
• 1daa175 feat(egress): honor blockall and essential-services in the evaluator
• 33f9865 feat(gateway): dial rediscovered manager_addrs for worker upstreams
• 1cf4f64 feat(grpcapi): forward heartbeats/issue to leader and advertise peers
• bf997d4 feat(sandbox): add background jobs across API, CLI, and SDKs
• dd316e7 feat(sandbox): add blockall mode and flat network allow-list fields
• f6a3357 feat(sdk): add network allow-list fields to Go and Node clients
• 56cfd33 feat: add installation script for Linux
• 9301212 fix(docs): update install script URLs and add redirects
• 30d2cd5 fix(egress): adopt live Docker subnet when reusing sandbox networks
• 1efec03 fix(egress): update directory permissions for control socket
• 47e3bda fix(runtime): update sandbox directory permissions for security
• 3183f93 refactor(egress): authenticate gateway control over TCP
• 3b2517d refactor(egress): switch cellard to topology gateway networking
• 8fbf9e0 refactor(runtime): run sandboxes on hardened runc without guest gRPC