v0.2.0

[github-actions[bot]]

Highlights

• upgrade blockers with fixes, upgrade now, scheduled and automatic upgrades (70b677c) by @thegdsks
• triage model, certificate guardrails and resources-first dashboard home (cb03ac2) by @thegdsks
• network page groups this server as a real node and mesh can be enabled from the UI and CLI (b33140e) by @thegdsks

What's changed

Features

• upgrade blockers with fixes, upgrade now, scheduled and automatic upgrades (70b677c) by @thegdsks
• triage model, certificate guardrails and resources-first dashboard home (cb03ac2) by @thegdsks
• network page groups this server as a real node and mesh can be enabled from the UI and CLI (b33140e) by @thegdsks
• resource advisor engine, API, CLI and MCP tool behind a beta flag (4b1abf8) by @thegdsks
• standalone domains proxy to a port, address, URL, app or container (d6deec7) by @thegdsks
• CLI for standalone domains and the server address (c748d6c) by @thegdsks
• two-mode add domain dialog, standalone rows and server address card (7aa9c8b) by @thegdsks
• resource advisor dashboard, Optimise panel, beta settings and docs (30c6324) by @thegdsks
• mask sensitive env everywhere, step-up reveal, one environment editor (7b9e454) by @thegdsks
• 0.6 upgrades, dashboard v2, standalone domains, secrets v2 and reliability fixes (#1164) by @thegdsks
• MCP prompts, resources and --print-config for levelrail-mcp (0a2e459) by @thegdsks
• sign-in screens and remaining charts use design tokens (c17a766) by @thegdsks
• levelrail-cli tui, a k9s-style terminal UI for apps, deploys, logs and actions (4499dca) by @thegdsks
• Get started hub with live setup steps, server-side progress and CLI (5b2d364) by @thegdsks
• suggestion-driven New app wizard with repository analysis (f29163a) by @thegdsks
• coverage-first backups page, protect-all, and orphaned data reclaim (4d51dc0) by @thegdsks
• single-node placement shows this server, nodes table and settings index regrouped (41384a9) by @thegdsks
• show the live preview image and commit subject on the app overview (#1167) by @thegdsks
• redesign deploy history rows and the deploy page around the logs (#1165) by @thegdsks
• fold the create-app repo fields into a summary once a repo is picked (#1168) by @thegdsks
• split-screen sign-in with a rotating brand showcase from the TheAuth visuals (#1169) by @thegdsks
• cost showback per app, project, environment and team (66750ba) by @thegdsks
• log explorer with saved queries, error signatures and log alert rules (0b246f6) by @thegdsks
• restart the control plane from the dashboard (aefb0e0) by @thegdsks
• system restart CLI command with --wait and status (126011f) by @thegdsks
• docked bottom panel hosting the AI chat with ctrl+j toggle (4aade49) by @thegdsks
• turn AI chat on from Settings, Beta features, and fix header right alignment (00b1acf) by @thegdsks
• attribute dashboard memory to the control plane and unmanaged containers (aafa40d) by @thegdsks
• sign-in attribution footer with GLINR Studios and TheAuth marks (d19355b) by @thegdsks
• sticky dashboard header, dark elevation tokens and GLINR CSS tokens (5573cfe) by @thegdsks
• web CLI console route, dock tab and beta toggle (c555dfe) by @thegdsks
• responsive pass for phone and tablet across dashboard, lists and settings (427afe5) by @thegdsks
• web CLI console over WebSocket, scoped to the platform CLI (e913570) by @thegdsks
• per-domain auth gate (forward auth) in the embedded ingress (6061ab6) by @thegdsks
• per-domain auth gate (forward auth) with header spoof stripping (944dfc8) by @thegdsks
• dock as fixed overlay widget with float, bottom and side modes (ce2f759) by @thegdsks
• read-only host diagnostics in the web CLI console (26b5089) by @thegdsks
• one click quick actions in the web CLI console (ba4b3a9) by @thegdsks
• mobile pairing API and built-in sign-in provider for the auth gate (#1173) by @thegdsks

Bug fixes

• serve /metrics and jwks, restart after swap on self-upgrade, restore-as-new owner, ungate data export CLI (536d94f) by @thegdsks
• tcp readiness fallback, server help flags, backup target validation, version stamp (cb01128) by @thegdsks
• serve internal fallback certs when ACME fails, validate ACME contact, abort never-listening deploys (8d82c09) by @thegdsks
• keep pre-library API tokens working after upgrade (e7cc8b2) by @thegdsks
• stale data copy incidents, plain-language copy failures, and edge channel update messaging (1109cee) by @thegdsks
• wait for proxy route load in verify, warn on alert rules with no channel (ff4ce70) by @thegdsks
• merge edge channel modelling and stale incident fixes with scheduled upgrades (63c2390) by @thegdsks
• keep placement display fields out of the MCP client types to stay under the tool token budget (a009399) by @thegdsks
• deployments rows open the deploy page, and long commit messages no longer flood the drawer (#1163) by @thegdsks
• picking a repo prefills the create-app form and collapses the repo grid (#1166) by @thegdsks
• dock AI tab explains when the ai-chat experimental flag is off (22f5e5f) by @thegdsks
• sanitize terminal escape sequences in web console output (5a1c837) by @thegdsks
• auth gate keeps the client query on the auth subrequest (8036bbc) by @thegdsks

Documentation

• standalone domains, server address, and confirmation fixes (1626c51) by @thegdsks

Maintenance, CI, and dependency updates (41)

• merge main into the scheduled upgrades branch (7cee3df) by @thegdsks
• merge main into the scheduled upgrades branch (1897256) by @thegdsks
• merge feat/scheduled-upgrades-final into release 0.4 (a6d2562) by @thegdsks
• merge feat/dashboard-home-v2 into release 0.4 (6e10d69) by @thegdsks
• merge feat/network-page-v2 into release 0.4 (f40b9e2) by @thegdsks
• merge qa/real-server-0-5 into release 0.4 (e1d798f) by @thegdsks
• merge feat/env-secrets-v2 into release 0.6 (58da7b5) by @thegdsks
• merge feat/standalone-domains into release 0.4 (80978fd) by @thegdsks
• merge feat/resource-advisor into release 0.6 (e80c9ba) by @thegdsks
• merge fix/legacy-token-session-upgrade into release 0.6 (fb3c9d7) by @thegdsks
• merge fix/qa-findings-b6-b7 into release 0.4 (c7f14bf) by @thegdsks
• merge fix/integrate-edge-updates into release 0.4 (e5918cc) by @thegdsks
• redmine manifest names its database service db in the catalog batch e2e (0be346d) by @thegdsks
• graduate release-please to stable 0.2.0 and clear the stale kit pin (78feaa6) by @thegdsks
• merge feat/new-app-wizard into release 0.4 (205ed0d) by @thegdsks
• merge feat/backups-v3 into release 0.4 (ed6be34) by @thegdsks
• merge feat/cli-tui into release 0.4 (f94506d) by @thegdsks
• merge main into release 0.7 (0.6 was squash-merged, trees are identical) (8a08511) by @thegdsks
• merge feat/guided-setup-v2 into release 0.4 (1fe2e49) by @thegdsks
• merge feat/mcp-prompts-resources into release 0.4 (9840885) by @thegdsks
• merge feat/visual-group-4 into release 0.7 (3b2ddf6) by @thegdsks
• merge feat/visual-group-5 into release 0.4 (efa3649) by @thegdsks
• merge feat/log-explorer-v2 into release 0.4 (5311c15) by @thegdsks
• merge the remote release 0.7 work (fix: deployments rows open the deploy page, and long commit messages no longer flood the drawer #1163 to feat: split-screen sign-in with a rotating brand showcase #1169) with the local feature merges (db53b40) by @thegdsks
• exclude the split-screen sign-in from the raw colour guard (04ad422) by @thegdsks
• merge feat/cost-showback into release 0.7 (480ef80) by @thegdsks
• Release/0.7 (#1170) by @thegdsks
• merge memory breakdown attribution into release 0.7 (a7f87a5) by @thegdsks
• merge login attribution footer into release 0.7 (c618ba2) by @thegdsks
• merge release/0.7 into responsive pass branch (976f2a9) by @thegdsks
• merge worktree-agent-a8fe61acc4cddb6f2 into release 0.7 (cc6279b) by @thegdsks
• merge worktree-agent-a81235c8749c23b1c into release 0.7 (d614edc) by @thegdsks
• merge worktree-agent-a1d0f3d38ac996b1f into release 0.7 (e266cb3) by @thegdsks
• stage overlay asserts the safe-area bottom offset (86c7e26) by @thegdsks
• merge feat/cli-console into release 0.7 (f5e117a) by @thegdsks
• merge dock overlay redesign into release 0.7 (838859b) by @thegdsks
• merge feat/cli-console-host-diagnostics into release 0.7 (09e74e4) by @thegdsks
• merge console quick actions into release 0.7 (2350a4f) by @thegdsks
• list the web CLI console runner in the exec gate allowlist (e8d2c69) by @thegdsks
• give the web related-tests job 30 minutes for large PRs (deef3ba) by @thegdsks
• Merge pull request feat: dashboard restart, dock and CLI console, forward auth, responsive pass #1172 from glincker/release/0.7 (f9f7e20) by @thegdsks

Install

Fresh install on a Linux host, pinned to this release:

curl -fsSL https://raw.githubusercontent.com/glincker/levelrail/main/install.sh | sudo env LEVELRAIL_VERSION=v0.2.0 sh

Upgrade an existing install in place (keeps the unit file and data):

curl -fsSL https://raw.githubusercontent.com/glincker/levelrail/main/install.sh | sudo env LEVELRAIL_VERSION=v0.2.0 sh -s upgrade

Docker Compose: pin the image tag in docker-compose.yml:

services:
  levelrail:
    image: ghcr.io/glincker/levelrail:v0.2.0

Container images

Multi-arch (linux/amd64, linux/arm64), signed with cosign, SBOM and provenance attached. Also tagged v0.2, latest at release time (moving tags).

Image	Tag	Digest
ghcr.io/glincker/levelrail	v0.2.0	sha256:755e165e3ee95cc48d85825d8fc408dbef765d35f87439c22ec5d957aee99068
ghcr.io/glincker/levelrail-agent	v0.2.0	sha256:0296c752a0df6c865cd39209c0c0ecd5fdb32e02d9b716cfbd41e7492b4865fc

Verify

Binaries: check downloads against checksums.txt:

gh release download v0.2.0 --repo glincker/levelrail --pattern 'levelrail-linux-amd64' --pattern checksums.txt
sha256sum --ignore-missing -c checksums.txt

Images: verify the keyless signature was made by this repository's release workflow:

cosign verify ghcr.io/glincker/levelrail@sha256:755e165e3ee95cc48d85825d8fc408dbef765d35f87439c22ec5d957aee99068 \
  --certificate-identity-regexp '^https://github\.com/glincker/levelrail/\.github/workflows/release\.yml@refs/(heads/main|tags/v.+)$' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Contributors

Thanks to @thegdsks.

Full changelog: v0.2.0-beta.20...v0.2.0 | Release page | Installing | Upgrading | Verifying signatures

---

This discussion was created from the release v0.2.0.