This build is automatically published on every commit to main that passes CI.

NOTE: This is a development build, not a tagged release, and may be unstable.

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=dev sh

OpenShell v0.0.96

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.96 sh

What's Changed

• fix(server): bind gateway listeners before sandbox resume by @elezar in #2495
• fix(proxy): retry with backoff on transient accept errors instead of exiting by @politerealism in #2369
• fix(tasks): scope pre-commit to lint checks by @drew in #2503
• fix(cli): write exec stderr events to stderr in interactive mode by @andrewwhitecdw in #2447
• fix(cli): eliminate flaky subprocess integration tests by @rhuss in #2504
• refactor(cli): extract gateway commands into commands/gateway module by @varshaprasad96 in #2506
• fix(podman): tolerate shutdown transport closes by @elezar in #2498
• fix(sandbox): gate Linux-only ordering import by @elezar in #2513
• fix(server): stabilize flaky delete telemetry unit test by @derekwaynecarr in #2521
• fix(e2e): bound podman stop timeout in tests by @elezar in #2516
• ci: add focused macOS Rust lint by @elezar in #2515
• feat(examples): add supervisor middleware content guard by @pimlock in #2169
• feat(k8s): support configuring workspace PVC storageClassName by @loveRhythm1990 in #2463
• feat(sandbox): use policy-first OCI image identity by @matthewgrossman in #2509
• fix(cli): avoid panic on multi-byte UTF-8 in --since duration by @andrewwhitecdw in #2446
• chore(deps): bump docker/login-action from 4.5.1 to 4.5.2 by @dependabot[bot] in #2537
• refactor(compute): make sandbox readiness gateway-owned across all drivers by @elezar in #2153
• chore(deps): bump actions/stale from 10.4.0 to 11.0.0 by @dependabot[bot] in #2536
• fix(cli): isolate subprocess tests from host OPENSHELL_ env vars by @rhuss in #2523
• ci(e2e): probe VM gateway readiness by @elezar in #2544
• fix(cli): bracket IPv6 bind literals in SSH forwards by @russellb in #2552
• test(e2e): add reusable QEMU infrastructure for E2E tests by @drew in #2471
• Wire authorization into workspace model by @derekwaynecarr in #2445
• fix(gator): preserve resolved review feedback by @drew in #2533
• test(e2e): add VM-backed E2E suite runner by @drew in #2473
• refactor(server): isolate gateway listener context by @elezar in #2542
• fix(server): notify watchers after atomic policy commits by @NaveCohenMonday in #2556
• feat(observability): export gateway traces over OTLP by @krishicks in #2534
• docs: document issue lifecycle labels and roadmap sequencing by @krishicks in #2524
• fix(ci): preserve KVM access across udev restarts by @matthewgrossman in #2566
• fix(deps): update russh, DOMPurify, and gateway base by @alangou in #2575

New Contributors

• @politerealism made their first contribution in #2369
• @NaveCohenMonday made their first contribution in #2556

Full Changelog: v0.0.92...v0.0.96

OpenShell v0.0.92

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.92 sh

What's Changed

• fix: eliminate parallel Rust test flakes by @pimlock in #2434
• feat(cli): add --output json/yaml to sandbox get, status, and sandbox create by @rhuss in #1989
• refactor(tui): default create form state by @elezar in #2458
• feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy by @feloy in #2245
• chore(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0 by @dependabot[bot] in #2440
• refactor(policy): extract shared L7 endpoint validation by @gracesmith6504 in #2389
• chore(deps): bump docker/login-action from 4.4.0 to 4.5.1 by @dependabot[bot] in #2488
• fix(router): strip Anthropic beta fields from Vertex rawPredict body by @zanetworker in #2465
• fix: assorted byte-index slicing safety fixes by @andrewwhitecdw in #2452
• fix: assorted arithmetic and indexing robustness fixes by @andrewwhitecdw in #2451
• fix(policy): avoid panic truncating multi-byte UTF-8 paths for display by @andrewwhitecdw in #2448

New Contributors

• @andrewwhitecdw made their first contribution in #2452

Full Changelog: v0.0.91...v0.0.92

OpenShell v0.0.91

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.91 sh

What's Changed

• fix(examples): add missing workspace fields to governance interceptor by @pavelanni in #2436
• fix(auth): report gateway authentication status by @drew in #2435
• refactor(supervisor): pass agent proposal state explicitly by @elezar in #2421

New Contributors

• @pavelanni made their first contribution in #2436

Full Changelog: v0.0.90...v0.0.91

OpenShell v0.0.90

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.90 sh

What's Changed

• fix(e2e): detect gateway workload for health port-forward by @krishicks in #2400
• feat(tui): add config key support to provider create/update forms by @letv1nnn in #2224
• fix(vm): reduce registry rootfs staging pressure by @pimlock in #2425
• fix(driver-k8s): add label selector to sandbox watch stream and list by @rhuss in #2223
• fix(agents): make baked payload readable by @elezar in #2419
• refactor(cli): extract shared helpers into commands/common module by @varshaprasad96 in #2359
• fix(sandbox): skip read-only mounts during recursive chown of /sandbox by @varshaprasad96 in #2341
• fix(mise): initialize Python dependencies in fresh worktrees by @matthewgrossman in #2429
• fix(policy): keep internal allowed IP proposals pending by @alangou in #2416

New Contributors

• @letv1nnn made their first contribution in #2224

Full Changelog: v0.0.89...v0.0.90

OpenShell v0.0.89

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.89 sh

What's Changed

• docs(agents): keep project skills synchronized by @pimlock in #2349
• fix(proxy): include OPA deny reason in CONNECT 403 response by @zanetworker in #2363
• fix(cli): respect CARGO_TARGET_DIR in openshell wrapper script by @jhjaggars in #2391
• docs(brand): add OpenShell brand assets by @drew in #2398
• fix(dco): Fix mismatched wording that breaks initial DCO checks by @matthewgrossman in #2399
• docs(extensibility): add gateway interceptor guide by @drew in #2397
• docs(docker-compose): replace removed OpenClaw community sandbox with NemoClaw redirect by @Schimuneck in #2405
• docs(prover): correct prove() exit code doc comment by @eviehoward in #2395
• fix(server): prevent unrelated sandbox deletes from blocking deletion events by @pimlock in #2340

New Contributors

• @Schimuneck made their first contribution in #2405
• @eviehoward made their first contribution in #2395

Full Changelog: v0.0.88...v0.0.89

OpenShell v0.0.88

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.88 sh

What's Changed

• ci(e2e): reuse prebuilt CLI and gateway artifacts by @elezar in #2311
• docs: fix broken links and small inconsistencies by @mesutoezdil in #2329
• fix(gateway): honor tty flag for interactive exec by @emonq in #2315
• chore(deps): bump actions/attest from 4.1.1 to 4.2.0 by @dependabot[bot] in #2357
• chore(ci): pin pr gate action by @elezar in #2368
• fix(ci): grant E2E permissions to release workflows by @pimlock in #2376
• fix(providers): allow git clone/fetch via default GitHub provider by @russellb in #2317
• fix(build): raise open-file limit for host musl cross-compile on macOS by @purp in #2307
• fix(supervisor-network): warn on unsupported L7 access presets by @lunarwhite in #2177
• feat(workspace): add workspace resource model with scoping, membershi… by @derekwaynecarr in #2243
• fix(supervisor): tailor Landlock rights by inode type by @drew in #2380
• perf(build): share sccache across worktrees by @matthewgrossman in #2379
• chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #2381
• fix(driver-podman): avoid panic when HOME is unset on macOS by @mesutoezdil in #2327
• fix(ci): fix mirror SHA detection in e2e-label-help workflow by @rhuss in #2236

New Contributors

• @emonq made their first contribution in #2315
• @purp made their first contribution in #2307

Full Changelog: v0.0.87...v0.0.88

OpenShell v0.0.86

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.86 sh

What's Changed

• feat!(openshell-cli): remove openshell policy prove command and z3 de… by @SDAChess in #2318
• fix(server): persist sandbox labels on create by @matthewgrossman in #2306
• fix: remove mentions of bundled-z3 in CI and wheel builds by @SDAChess in #2322
• fix(gateway): probe Docker socket during driver auto-detection by @krishicks in #2303
• chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in #2289
• chore(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 by @dependabot[bot] in #2288
• feat(tui): navigate panels via Up/Down arrow overflow at list boundaries by @varshaprasad96 in #2287
• feat(providers): AWS STS AssumeRole refresh strategy and aws-s3 profile by @russellb in #1782
• rfc-0009: supervisor middleware by @pimlock in #1738
• test(e2e): run VM suite in CI by @drew in #2305
• fix(vm-driver): fixes BYOC sandbox creation failing with ext4-fs writ… by @bornav in #2150
• feat(supervisor-middleware): add network egress middleware by @pimlock in #2027

New Contributors

• @matthewgrossman made their first contribution in #2306
• @varshaprasad96 made their first contribution in #2287
• @bornav made their first contribution in #2150

Full Changelog: v0.0.85...v0.0.86

OpenShell v0.0.85

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.85 sh

What's Changed

• fix(sdk): initialize sandbox annotations by @drew in #2296
• fix(driver-vm): run sandbox supervisor as guest pid 1 by @drew in #2299
• feat(ci): introduce merge queue by @elezar in #2024
• feat(gateway): add elevated gateway info by @elezar in #2202
• fix(ci): prune snap assets from dev release by @pimlock in #2302

Full Changelog: v0.0.84...v0.0.85

OpenShell v0.0.83

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.83 sh

What's Changed

• fix(tui): redraw after sandbox shell exits by @johntmyers in #2230
• fix(agents): add confirmation gate to triage-issue batch mode by @rhuss in #2239
• fix(gator): retry review after draft blocker clears by @johntmyers in #2200
• fix(certgen): stage temp dir inside output dir to fix cross-device rename by @gracesmith6504 in #2241
• refactor(jsonrpc): carry typed inspection errors by @shiju-nv in #2244
• docs(agents): add gator launch skill by @johntmyers in #2203
• chore(python): lower minimum supported Python to 3.11 by @maxdubrinsky in #2247
• fix(policy): keep approved chunk when a mechanistic denial resubmits its endpoint by @laitingsheng in #2242

New Contributors

• @rhuss made their first contribution in #2239
• @gracesmith6504 made their first contribution in #2241

Full Changelog: v0.0.82...v0.0.83