Skip to content

byn 0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Jun 22:39
· 118 commits to main since this release
v0.1.0
This tag was signed with the committer’s verified signature.
sandeepbaynes Sandeep Baynes
SSH Key Fingerprint: JtzbW/O0wnR88A9pC3OgekVmNw+jH343StSt+XcUg2s
Verified
Learn about vigilant mode.
ce854a6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The first feature release after v0.0.1 — per-project .byn workspaces, a richer browser portal, tamper-evident trust, and broader daemon ergonomics.

Features

  • Trust-store tamper hardening — every trusted .byn is bound with a machine-fingerprint and a vault-key MAC, verified at use-time. A trust store copied or forged from another machine is rejected.
  • [exec] env allowlist — byn exec injects only the env-vars a project declares in its .byn. "*" injects all (with a loud warning); empty/absent injects none. Env-vars only — there is no command allowlist yet.
  • Portal "Create .byn" generator — pick a project directory (daemon-backed picker), multi-select which scope vars go in [exec] env, and trust on the spot — passkey-first, falling back to the master password.
  • Bulk trust / untrust — byn trust and byn untrust accept multiple paths, --paths "a,b,c", and --recursive. Files are grouped by their target vault, so each vault's password is asked once (one KDF for the whole group).
  • Top-level daemon lifecycle — byn start / stop / restart / reload (the old byn daemon <verb> forms still work). New byn daemon install / uninstall register a launchd (macOS) / systemd-user (Linux) auto-start service.
  • byn env clear — delete every var in an env in a single, password-gated op.
  • Exec-authorization audit — the audit log records which .byn authorized which command (ok/denied), surfaced in both the CLI and portal audit views.

Fixes

  • Portal: double-clicking an entry name no longer spawns a phantom row; rename/edit are blocked with a clear message while the vault is locked.
  • Fixed a data race in the portal server's Serve/Close during config reload.
  • Bulk trust now sends absolute paths to the daemon, so byn trust --recursive works from any project directory.

Docs & CI

  • New 5-minute quickstart; README, man page, and .byn format docs updated for the new commands and allowlist rules.
  • CI workflows forced onto Node 24; retired the superseded hand-written Homebrew formula.

Install

brew install sandeepbaynes/tap/byn
curl -fsSL https://raw.githubusercontent.com/sandeepbaynes/byn/main/install.sh | sh
go install github.com/sandeepbaynes/byn/cmd/byn@latest

Full Changelog: v0.0.1...v0.1.0

Assets 13
Loading