v0.1.0

Changelog

• 13f20d4: build(release): Windows CLI archives and mixed binary counts per platform (Antonio toony1908@gmail.com)
• ee965c7: build(tools): INSTALL_KIMI build arg so the tools image builds where code.kimi.com is unreachable (Antonio toony1908@gmail.com)
• 907e380: chore: import boxes-oss 8f7a817 as the base for the single-VM version (Antonio toony1908@gmail.com)
• b8c0224: chore: prepare boxes-oss for tony1908/boxes-oss (Antonio toony1908@gmail.com)
• ea8b850: ci: golangci-lint v2.15.0 (built with Go 1.26) and fix all lint findings (Antonio toony1908@gmail.com)
• fc8b8ef: ci: publish the landing page with GitHub Pages; changelog for 0.1.0 (Antonio toony1908@gmail.com)
• 4f8075c: docs(agents): executor is now Claude Haiku 4.5 at low effort via headless claude -p (replaces Codex/Luna) (Antonio toony1908@gmail.com)
• 00e51e0: docs(agents): executor model is Claude Haiku 5.5 (claude-haiku-5-5), pinned in the agent definition (Antonio toony1908@gmail.com)
• f57b233: docs(agents): executor runs as an in-session Haiku 4.5 subagent in Claude Code, not a separate CLI (Antonio toony1908@gmail.com)
• 984ba2b: feat(cli): --help on every command, safe current pointer, exec --desktop, boxes screenshot (Antonio toony1908@gmail.com)
• 441bd6c: feat(commands): live logs, stdin, kill and listing for detached commands (Antonio toony1908@gmail.com)
• c1e67e9: feat(drives): named persistent volumes mountable under /mnt (Antonio toony1908@gmail.com)
• a8297e6: feat(network): box DNS through an agent forwarder so allowlists open exactly the IPs boxes receive (Antonio toony1908@gmail.com)
• ce6ed31: feat(network): per-box outbound network policy (allow-all, deny-all, allowlist) (Antonio toony1908@gmail.com)
• cc7c0e3: feat(sandboxes): create from a git repo or .tar.gz source (Antonio toony1908@gmail.com)
• 4eb73e0: feat(sandboxes): image per box, CPU/network usage totals, metadata block for all boxes (Antonio toony1908@gmail.com)
• 4548d5e: feat(sandboxes): key-value tags on create, update, fork and list filter (Antonio toony1908@gmail.com)
• 8cd5628: feat(snapshots): per-box keepSnapshots and rollback to a chosen snapshot (Antonio toony1908@gmail.com)
• b1d3840: feat(users): per-box Linux users and shared groups; exec as a user (Antonio toony1908@gmail.com)
• dd3aba3: feat: complete OpenAPI spec with a route/spec drift test; login offers owner setup only when no users exist (/auth/status) (Antonio toony1908@gmail.com)
• 7a34e81: feat: kimi harness uses the Kimi Code CLI (ACP), pinned binary with checksum; drop deprecated kimi-cli and uv (Antonio toony1908@gmail.com)
• 829a8f0: feat: single-VM UI and SDKs: remove Nodes page, add Machine panel; drop docs and research scripts (Antonio toony1908@gmail.com)
• 4d7b904: feat: single-VM backend: remove providers, autoscaling, pools, node API, node-install and registry; add GET /machine (Antonio toony1908@gmail.com)
• 0eefc5f: fix(boxd): pass the provider's real error through OpenCode and Codex failures (Antonio toony1908@gmail.com)
• 668f26c: fix(exec): keep detached commands attached, run named users via setpriv, CLI exit codes (Antonio toony1908@gmail.com)
• b0e000c: fix(install): write BOXES_TOOLS_IMAGE to agent.env again so boxes get the shared tools (Antonio toony1908@gmail.com)
• 32929df: fix(security): setup token for the first owner, login rate limits, webhook SSRF guard at dial time, dashboard security headers (CSP from node host bases), secrets-in-response regression test (Antonio toony1908@gmail.com)
• 8eacd81: fix(tunnel): agent reconnects after server restart; don't block on yamux session teardown (Antonio toony1908@gmail.com)
• ebd47e0: fix(web): API key secret and lists read the server's real response shapes (Antonio toony1908@gmail.com)
• 7539611: fix: reserve box ports 3000/3001/7070 for hosts, redact only secret-looking env values, skill tips for working in a box (Antonio toony1908@gmail.com)
• 2f19685: fix: setup can read its config, writable drives, snapshot retention on every capture, DNS allowlist history (Antonio toony1908@gmail.com)
• 2d64408: merge single-VM frontend (Antonio toony1908@gmail.com)
• 84fa918: perf(web): gzip dashboard via Traefik and cache hashed static assets (Antonio toony1908@gmail.com)