v1.0.4

Highlights

• Safe-bash defaults (#128) — tiered allowlist closes the all-roles-write-bash exposure
• attach-auto-spawn (#129) — armada voyage attach <name> + auto-attach tmux fallback
• Permission matrix (#126) — orchestrator no-trivial + 4-path permission enforcement
• voyage- tmux prefix (#127) — sessions easy to spot in tmux ls
• Absolute voyage-cwd (#125) — drive prompt + tmux new-session -c now absolute
• Strict pickModel (#123) — custom model format whitelisted, no parseInt-greedy fallback
• .devcontainer/ — typescript-node:24 + Chromium + agent-browser, reproducible workspace

Test evidence

• 491/491 unit + CLI e2e pass
• macos + ubuntu × node 20 + 22 CI green
• Manual node:sqlite session archaeology on 100 most recent sessions — no regressions introduced

Install

npm install -g @rafamacalaba/armada

See CHANGELOG.md for the full per-PR breakdown.

What's Changed

• docs(readme): clarify package install and updates by @rafmacalaba in #119
• docs: restore README product narrative by @rafmacalaba in #120
• chore: untrack generated armada ledgers by @rafmacalaba in #121
• fix(questionnaire): accept custom model IDs in pickModel by @rafmacalaba in #123
• chore(release): bump to 1.0.4 by @rafmacalaba in #124
• fix(voyage-cwd): absolute path in default prompt + lane cwd by @rafmacalaba in #125
• feat(orchestrator): tighten no-trivial exception + 4-path permission matrix by @rafmacalaba in #126
• feat: prefix tmux session names with voyage- by @rafmacalaba in #127
• feat: safe-bash defaults for harmless commands by @rafmacalaba in #128
• feat(attach-auto-spawn): tryAttachOrPrint helper — voyage attach and auto-attach tmux fallback by @rafmacalaba in #129

Full Changelog: v1.0.3...v1.0.4