v0.49.0

Verifying this release

Each binary is signed keylessly with cosign (Sigstore,
GitHub OIDC — no long-lived keys). Verify a download against its bundle:

cosign verify-blob \
  --bundle sail-linux-amd64.cosign.bundle \
  --certificate-identity-regexp '^https://github.com/standardapplied/sail/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sail-linux-amd64

The .sha256 files remain for a plain checksum check.

What's Changed

• sync: a scoped FDE sees exactly its granted projects, on every box by @udaychandra in #309
• ci: the fleet upgrades from v0.48.0 by @udaychandra in #312

Full Changelog: v0.48.0...v0.49.0

v0.48.0

Verifying this release

Each binary is signed keylessly with cosign (Sigstore,
GitHub OIDC — no long-lived keys). Verify a download against its bundle:

cosign verify-blob \
  --bundle sail-linux-amd64.cosign.bundle \
  --certificate-identity-regexp '^https://github.com/standardapplied/sail/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sail-linux-amd64

The .sha256 files remain for a plain checksum check.

What's Changed

• ci: the fleet upgrades from v0.47.0 by @udaychandra in #308
• room: a live member's turn says when it begins by @udaychandra in #310
• test: the every-state walk's runs start on a whole second, so they sort as minted on macOS by @udaychandra in #311

Full Changelog: v0.47.0...v0.48.0

v0.47.0

Verifying this release

Each binary is signed keylessly with cosign (Sigstore,
GitHub OIDC — no long-lived keys). Verify a download against its bundle:

cosign verify-blob \
  --bundle sail-linux-amd64.cosign.bundle \
  --certificate-identity-regexp '^https://github.com/standardapplied/sail/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sail-linux-amd64

The .sha256 files remain for a plain checksum check.

What's Changed

• ci: the fleet upgrades from v0.46.5 by @udaychandra in #304
• Sail says the loop's rules in two prompts; the project says everything else in its own files by @udaychandra in #305
• fde: a box hands its FDE one connect code, and Mast needs nothing else by @udaychandra in #306
• room: an engaged agent is one live process, and every turn streams into the room by @udaychandra in #307

Full Changelog: v0.46.5...v0.47.0

v0.46.5

Verifying this release

Each binary is signed keylessly with cosign (Sigstore,
GitHub OIDC — no long-lived keys). Verify a download against its bundle:

cosign verify-blob \
  --bundle sail-linux-amd64.cosign.bundle \
  --certificate-identity-regexp '^https://github.com/standardapplied/sail/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sail-linux-amd64

The .sha256 files remain for a plain checksum check.

What's Changed

• tests: the upgrade rehearsal drops main's materialized-file seed before the hop, and a late pty attach is quiesced by construction by @udaychandra in #300
• ci: a pull request learns its verdict once, in minutes, from a pipeline that runs each test once by @udaychandra in #301
• docs: the repository documents where it stands, and agents read AGENTS.md by @udaychandra in #302
• sync: the journal decides every local write, so no door can forget by @udaychandra in #303

Full Changelog: v0.46.4...v0.46.5

v0.46.4

Verifying this release

Each binary is signed keylessly with cosign (Sigstore,
GitHub OIDC — no long-lived keys). Verify a download against its bundle:

cosign verify-blob \
  --bundle sail-linux-amd64.cosign.bundle \
  --certificate-identity-regexp '^https://github.com/standardapplied/sail/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sail-linux-amd64

The .sha256 files remain for a plain checksum check.

What's Changed

• test: the incus suite's image bake gets a package-install budget and fails the run once by @udaychandra in #289
• sync: a review's findings sync with it, so every box holds the same review by @udaychandra in #290
• files: a box remembers which version of a shared file it wrote by @udaychandra in #291
• events: an event drives only what its sender may drive by @udaychandra in #292
• loop: every agent run launches, is watched and stops one way, under its lane's limits by @udaychandra in #293
• loop: a waiting review's rescue is tried a bounded number of times, and an agent no kill was tried on exited on its own by @udaychandra in #294
• loop: every wait is recorded, every review ends, every stop says only what happened by @udaychandra in #295
• loop: one function decides every step, one class carries it out, and its tests run in seconds by @udaychandra in #296
• harness: adding a coding harness is adding one adapter by @udaychandra in #297
• project: what runs a project reads it from the catalog, never from a file by @udaychandra in #298
• skills: a project says how each stage works; sail still runs the loop by @udaychandra in #299

Full Changelog: v0.46.3...v0.46.4

v0.46.3

Verifying this release

Each binary is signed keylessly with cosign (Sigstore,
GitHub OIDC — no long-lived keys). Verify a download against its bundle:

cosign verify-blob \
  --bundle sail-linux-amd64.cosign.bundle \
  --certificate-identity-regexp '^https://github.com/standardapplied/sail/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sail-linux-amd64

The .sha256 files remain for a plain checksum check.

What's Changed

• test: the release ITs hop from 0.46.2 as well as from older releases by @udaychandra in #284
• One rule per type, and main decides every pushed revision with it by @udaychandra in #283
• docs: the sync contract, each invariant with the tests that prove it by @udaychandra in #285
• sync: a box's runs carry the handle main knows it by, and a live run is never rewritten by @udaychandra in #286
• sync: quiescent boxes hold exactly what main holds by @udaychandra in #287
• sync: every offer settles, and no round fails for something that will arrive by @udaychandra in #288

Full Changelog: v0.46.2...v0.46.3

v0.46.2

Verifying this release

Each binary is signed keylessly with cosign (Sigstore,
GitHub OIDC — no long-lived keys). Verify a download against its bundle:

cosign verify-blob \
  --bundle sail-linux-amd64.cosign.bundle \
  --certificate-identity-regexp '^https://github.com/standardapplied/sail/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sail-linux-amd64

The .sha256 files remain for a plain checksum check.

What's Changed

• conflicts: a merge applies only to the conflict it was made from, and is never thrown away by @udaychandra in #278
• identity: every write names who is acting, bound per operation and read by the journal by @udaychandra in #279
• sync: a push main refuses on authority settles, and the node keeps syncing by @udaychandra in #280
• identity: one owner rule, and one identity per FDE whichever door they use by @udaychandra in #281
• rooms: made on purpose, and every personal room is erased on upgrade by @udaychandra in #282

Full Changelog: v0.46.1...v0.46.2

v0.46.1

Verifying this release

Each binary is signed keylessly with cosign (Sigstore,
GitHub OIDC — no long-lived keys). Verify a download against its bundle:

cosign verify-blob \
  --bundle sail-linux-amd64.cosign.bundle \
  --certificate-identity-regexp '^https://github.com/standardapplied/sail/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sail-linux-amd64

The .sha256 files remain for a plain checksum check.

What's Changed

• sail upgrade is tested as the command the fleet runs by @udaychandra in #277

Full Changelog: v0.46.0...v0.46.1

v0.46.0

Verifying this release

Each binary is signed keylessly with cosign (Sigstore,
GitHub OIDC — no long-lived keys). Verify a download against its bundle:

cosign verify-blob \
  --bundle sail-linux-amd64.cosign.bundle \
  --certificate-identity-regexp '^https://github.com/standardapplied/sail/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sail-linux-amd64

The .sha256 files remain for a plain checksum check.

What's Changed

• sync: archive keeps, delete restores, prune erases everywhere by @udaychandra in #276

Full Changelog: v0.45.0...v0.46.0

v0.45.0

Verifying this release

Each binary is signed keylessly with cosign (Sigstore,
GitHub OIDC — no long-lived keys). Verify a download against its bundle:

cosign verify-blob \
  --bundle sail-linux-amd64.cosign.bundle \
  --certificate-identity-regexp '^https://github.com/standardapplied/sail/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sail-linux-amd64

The .sha256 files remain for a plain checksum check.

What's Changed

• conflicts: decided on what the box holds now, addressed by type and id by @udaychandra in #272
• sync: delete the protocol-3 fallback by @udaychandra in #273
• Sync content by hash with resumable binary chunks by @udaychandra in #274
• Blobs hardening: one chunk loop, streams that outlive a stopwatch, a lease that means what it says by @udaychandra in #275

Full Changelog: v0.44.3...v0.45.0