v0.1.0

Changelog

• 871a4f9: A console you can actually sign in to (Ben Meeker ben@bemeek.io)
• 709ad69: A crash-looping container is Running and Restarting at the same time (Ben Meeker ben@bemeek.io)
• 11045fe: A detected repository can now actually be deployed (Ben Meeker ben@bemeek.io)
• 65019a3: A modal that covered one screenful of a scrolling page (Ben Meeker ben@bemeek.io)
• 1c5105b: A rejected password kept rejecting a password you had already replaced (Ben Meeker ben@bemeek.io)
• 8a2d6a8: Accepting a proposal left the console showing a photograph of the app (Ben Meeker ben@bemeek.io)
• f0c7750: Add AGPL-3.0 with a commercial exception, before going public (Ben Meeker ben@bemeek.io)
• d92e35a: An install could create an administrator nobody could ever sign in as (Ben Meeker ben@bemeek.io)
• c835650: Build the thirteen endpoints design 04 documented and nobody wrote (Ben Meeker ben@bemeek.io)
• 99fbf13: CI: use the org CODECOV_TOKEN, and build on main (Ben Meeker ben@bemeek.io)
• 22ac8a6: Close O-15: a host port is an allocation, and Traefik closed the revisit (Ben Meeker ben@bemeek.io)
• 8dbe52e: Close eight open decisions and three unlisted fragilities (Ben Meeker ben@benmeeker.com)
• 71afbca: Close the four design gaps (Ben Meeker ben@benmeeker.com)
• a574f49: Close the last four: rolling backups on demand, and their tests (Ben Meeker ben@bemeek.io)
• f1d8a80: Compose builds as compose, one image per service that needs one (Ben Meeker ben@bemeek.io)
• 4f48899: Correct a stale gap note and the exec usage line (Ben Meeker ben@bemeek.io)
• b9244b1: Design system: make the on-demand fetch instructions match reality (Ben Meeker ben@benmeeker.com)
• 15fc5e4: Endpoints the install verbs were supposed to gate (Ben Meeker ben@bemeek.io)
• 0066564: Environment variables, and the reason every other edit did nothing (Ben Meeker ben@bemeek.io)
• f25a617: Finish phase 8: exec, and a console that needs no internet (Ben Meeker ben@bemeek.io)
• 83af6fb: Fix three acceptance tests I wrote against a label nothing sets (Ben Meeker ben@bemeek.io)
• 276f43c: Give slots, volumes, groups and roles the screens they never had (Ben Meeker ben@bemeek.io)
• 8e9ee7d: Give the last-administrator guard a requirement (R-088) (Ben Meeker ben@bemeek.io)
• e8416b4: Green CI, and "What is Pando?" (Ben Meeker ben@bemeek.io)
• 60b1c3f: Import the Pando design system as a repo-local skill (Ben Meeker ben@benmeeker.com)
• 2aeb8ec: Install-level authorization: an administrator is a grant (O-17) (Ben Meeker ben@bemeek.io)
• 0164aff: Let the acceptance suite take a password instead of scraping the log (Ben Meeker ben@bemeek.io)
• 984e0b9: MYSQL_PWD broke every first MySQL deploy, and I had to run it to find it (Ben Meeker ben@bemeek.io)
• 8941d53: Make "provision one for me" actually provision one (Ben Meeker ben@bemeek.io)
• fb12ac3: Make a fresh clone build, which it did not (Ben Meeker ben@bemeek.io)
• 57ac524: Make the retry backoff configurable, so the suite takes 6 minutes not 43 (Ben Meeker ben@bemeek.io)
• c913d07: Make the teardown test assert teardown, not the runner's environment (Ben Meeker ben@bemeek.io)
• e1b07e2: Merge pull request #2 from bemeek-io/worktree-release-packaging (Ben Meeker ben@bemeek.io)
• 98084b5: Merge pull request #3 from bemeek-io/release-dispatch (Ben Meeker ben@bemeek.io)
• d76abba: Move to Go 1.27.1 (Ben Meeker ben@benmeeker.com)
• cde4a77: No builder implements compose, so every compose app that built was refused (Ben Meeker ben@bemeek.io)
• 48fa188: O-16: bound what logs are promised, not what they accumulate (Ben Meeker ben@bemeek.io)
• cb8ed54: O-17 is a live privilege escalation, not a missing screen (Ben Meeker ben@bemeek.io)
• 7e8826e: Phase 0 verified end to end; correct the audit-immutability mechanism (Ben Meeker ben@benmeeker.com)
• 0fdd8fe: Phase 0: skeleton, with the audit log's immutability actually enforced (Ben Meeker ben@benmeeker.com)
• 6f43c0d: Phase 10: MCP over the same API, with idempotent retries (Ben Meeker ben@bemeek.io)
• 60dc702: Phase 10: Traefik, notifications, and three bugs it exposed (Ben Meeker ben@bemeek.io)
• fb9c4a5: Phase 10: the CLI, and pando deploy ./ (Ben Meeker ben@bemeek.io)
• d38b12e: Phase 1: identity and authorization (Ben Meeker ben@benmeeker.com)
• 4f42f9d: Phase 2: spec and state (Ben Meeker ben@benmeeker.com)
• 75d99ab: Phase 3: adapters and the planner (Ben Meeker ben@benmeeker.com)
• 33990d4: Phase 4: build and deploy — Sequence B passes (Ben Meeker ben@benmeeker.com)
• 7fb1775: Phase 5: the proxy — Sequence C passes (Ben Meeker ben@benmeeker.com)
• a097a28: Phase 6 complete: Sequence A passes against real repositories (Ben Meeker ben@bemeek.io)
• 6bcac42: Phase 6: compose import, and what a rejection has to reach the user as (Ben Meeker ben@bemeek.io)
• 00ab07c: Phase 6: detection, and the three defects the corpus found (Ben Meeker ben@bemeek.io)
• 7ee8513: Phase 6: the trial run — watch the app, don't ask the user (Ben Meeker ben@bemeek.io)
• e1064b7: Phase 7: the reconciler, and a give-up threshold that could never be reached (Ben Meeker ben@bemeek.io)
• 2d9fbb0: Phase 8: the console, and a requirement with nothing behind it (Ben Meeker ben@bemeek.io)
• 4587160: Phase 9: Sequence D passes, and a console screen for it (Ben Meeker ben@bemeek.io)
• d7ab053: Phase 9: backup becomes the eighth adapter category (Ben Meeker ben@bemeek.io)
• c3748ca: Phase 9: backup, verify and restore work end to end (Ben Meeker ben@bemeek.io)
• 0584f22: README and LICENSING for the people who actually read them (Ben Meeker ben@bemeek.io)
• 47344ed: README and LICENSING: plainer language (Ben Meeker ben@bemeek.io)
• a58b0d0: README for people using Pando; CONTRIBUTING for people building it (Ben Meeker ben@bemeek.io)
• e638d9a: README: address teams and organizations as much as individuals (Ben Meeker ben@bemeek.io)
• 9403bb5: README: an open source product readme (Ben Meeker ben@bemeek.io)
• dfc3744: README: say which platforms the Homebrew line covers (Ben Meeker ben@bemeek.io)
• 2e23f8a: Re-detecting kept the repository's answer and threw away yours (Ben Meeker ben@bemeek.io)
• 33b2f47: Reconciler: detect an image that changed, and record the log-retention gap (Ben Meeker ben@bemeek.io)
• c2e6a70: Record an app's storage, and keep a final backup when it is deleted (Ben Meeker ben@bemeek.io)
• b5df7a2: Record design gaps; fix compound requirement refs in the index generator (Ben Meeker ben@benmeeker.com)
• 8b2f15f: Record that Pando stopping does not stop apps (Ben Meeker ben@benmeeker.com)
• d5b1990: Record what phase 10 shipped and what running it found (Ben Meeker ben@bemeek.io)
• 2fed6d6: Record what running the tests found that reading them did not (Ben Meeker ben@bemeek.io)
• d6596d3: Record what the debt pass found, including a phase 9 claim that was false (Ben Meeker ben@bemeek.io)
• 1b1adde: Release: cut one from main without tagging by hand (Ben Meeker ben@bemeek.io)
• 0b2fea1: Release: tag-driven builds, a Homebrew cask, and Linux packages (Ben Meeker ben@bemeek.io)
• 40f08b1: Remove a stray compiled binary (Ben Meeker ben@bemeek.io)
• cca94c2: Resolve O-11: the install topology supplies Postgres (Ben Meeker ben@benmeeker.com)
• e41e0d9: Revise README to clarify app deployment purpose (Ben Meeker ben@bemeek.io)
• cf7d749: Say how to run Pando, and how to get in when you cannot (Ben Meeker ben@bemeek.io)
• 679ac56: Say which build methods this installation actually has (Ben Meeker ben@bemeek.io)
• 4258ec6: Scaffold the repository for implementation (Ben Meeker ben@benmeeker.com)
• edff2e8: Sharing asked people to recognise a ULID (Ben Meeker ben@bemeek.io)
• 9703e79: Static sites build, and the tie-break answer means what it says (Ben Meeker ben@bemeek.io)
• 35d181e: Stop the janitor taking the server off the network (Ben Meeker ben@bemeek.io)
• e8d068b: Tear down a deleted app's bundle, which nothing ever did (Ben Meeker ben@bemeek.io)
• 0ce4085: Tell an admin what a policy breaks before they save it (Ben Meeker ben@bemeek.io)
• c938e4f: Test that GC never prunes a revision anyone could roll back to (Ben Meeker ben@bemeek.io)
• 921d8ea: Tests and docs for install-level authorization (Ben Meeker ben@bemeek.io)
• 3470ace: The build plan is shown, stored and editable, instead of thrown away (Ben Meeker ben@bemeek.io)
• c6d53b9: The console could administer apps but not create one (Ben Meeker ben@bemeek.io)
• bcccbe7: The console had no URLs, and re-accepting silently discarded configuration (Ben Meeker ben@bemeek.io)
• 908cda3: The logo, icons and fonts are authoritative in the repository (Ben Meeker ben@bemeek.io)
• 87cae8c: The reconciler could not see the database it had just provisioned (Ben Meeker ben@bemeek.io)
• 2a0fce4: The terminal overhung its own corners, and could only reach one service (Ben Meeker ben@bemeek.io)
• 178cc19: Three defects found by running detection on real bemeek-io repositories (Ben Meeker ben@bemeek.io)
• 9ff955f: Track cmd/pando, which .gitignore was hiding (Ben Meeker ben@bemeek.io)
• 5e3abb3: Use the real logo: "pando." with a marker-red full stop (Ben Meeker ben@bemeek.io)
• 5b57772: Verify could not open the backups people actually take (Ben Meeker ben@bemeek.io)
• 8ed50f3: buildpack builds, via nixpacks, without a socket anywhere (Ben Meeker ben@bemeek.io)
• d1bee8a: console: show the terminal's workload picker for a single-service app too (Ben Meeker ben@bemeek.io)
• 6220237: console: the embed placeholder has to survive a build (Ben Meeker ben@bemeek.io)
• 4a44411: proxy: sign-in works on an app's own hostname, and no cookie of Pando's reaches an app (Ben Meeker ben@bemeek.io)
• 3246225: routing: serve port-mode apps on the port they were allocated (Ben Meeker ben@bemeek.io)
• b482131: runtime: rejoin running apps' networks at startup (R-023) (Ben Meeker ben@bemeek.io)