[startcloud-bot]

🤖 I have created a release beep boop

0.61.0 (2026-11-10)

Features

• Ed448 beside the eight algorithms, the signature scheme select under an RSA key on the CSR, Certificate and Sign tabs carried to the engine, the service worker precaching the shell's linked files on install, the English and Spanish keys and the unit tests following (2c65bd8)
• Major tewaks ofr Hyperwaver-ui components (e4b6249)
• the app opening with no network, the service worker answering the page and the build's files from the cache of the version it was registered with, the version stamped into the worker at build, the last status answered only while the server does not answer, every file keeping its name, the navbar contract and the Playwright config following; the vendored cipher-wasm engine rebuilt on the current RustCrypto generation (3783c04)
• the broadcast history a dialog with the moment, the tabs that took each string, Copy, Use and Clear history, kept in the browser under console_history; Send a glyph, Clear inside the Commands field, the accept count as accepting/total; the broadcast's Enter the carriage return a terminal sends so a Windows host shell takes the line; one thin scrollbar in the theme's border colour on every scrolling element; the Certificates card titled Certificates; the service worker's cache named for the build by a stamp of its files, every file of the build and the status copy precached at install and no fetched file ever kept, so two builds never mix and every page boots offline; the loading screen carrying the brand mark and standing in for the lazy-load fallback; the crash card carrying Report this issue and Copy error details; the contracts, the footer and identity references, the English and Spanish keys, the unit tests and the footer scenarios following (22d5e83)
• the Certificates feature behind the certs and certs-store tokens, the cipher-wasm engine vendored under @startcloud/cipher-wasm and served as application/wasm, detecting, converting, decoding, matching, comparing, chaining and generating PEM, DER, PKCS#7, PKCS#8, PKCS#12, PPK, OpenSSH and JWK material in the browser with no key leaving it; the Vault in IndexedDB with certificates, authorities, requests, keys and templates, history per certificate, import and export as one bundle, the By kind tree with disabled empty kinds and a right-click menu, the vault table with bulk Delete and the Visibility and Status pickers, the record page with Chain, Issued by and the three-PUT Publish, Guests and Public controls; the Sync form mirroring the ticked kinds to the backend under the navbar's active organization, the Shared page pulling other members' rows, the four reading lines of boxes applied to certs with an unpublished row readable by its sharer or an org owner or admin, Remove from org leaving pulled copies, and delete allowed to the creator or an org manager through canManageRecord; the Convert, Decode, Match, Compare, Chain and Generate tools on the shared upload zone taking several files at once, a locked PKCS#12 or key drawn as one disabled row until unlocked by button or Enter, one stem and file-name rule for every download, templates on Field and useFormRules with the summary focused on a taken name, focus landing on the vault heading after every delete, and ids from crypto.getRandomValues so plain http over the LAN works; UploadZone's multiple and defaultOpen, ScopeList's disabled and id, columns.jsx exporting localeDate and timeOf, Sidebar's disabled nodes, useDetailSearch's actions; the mock serving /api/certs and the certs topic; a never-signed-in visitor no longer sent to a nested /login?returnTo nor shown the signed-out banner, the servers list not fetched until signed in, the three session providers ending the session on the bus only while a record is cached; the host stats provider answering a fresh copy before fetching so a consumer mounting as the answer lands reads once; the pages guide, the fixtures, the unit tests and the English and Spanish keys following (6495a86)
• the Certificates feature's scenarios and unit tests, certs.feature's 32 scenarios over the sidebar tokens, the visitor redirect, Convert, Decode, Match, Compare, Chain, Generate, the vault, the record page, mirroring, Sync and Shared on the house fixture host with the material inline in one JSON and one fixture per answered state, two control steps beside the downloads family, data-action on every certs control, 87 unit tests over the certs utils and canManageRecord; every tool page folding each read through one functional updater so two files dropped together both land, the zone reading one drop's files in order with a file the browser cannot open refused like an engine refusal and the next still read, Match and Compare deriving their verdict from state (167a340)
• the certs sidebar as section rows, the Vault row folding Certificates, Authorities, Requests and Keys, each the vault's table narrowed to that kind by its query and lit one at a time, no record in the column; a row whose link carries a query active on that query alone and its parent quiet while a child's query is the route's; the expiry threshold a Certificates card of the Preferences section through the profile page's preferences slot; one line on every tool page and Generate tab saying what it does, the Match and Compare cards flush with the page, the CSR tab named for what it makes with the templates optional under its form, the pending CSRs listed on the Sign tab with Sign per row, a spinner on Generate, Make CSR, Self-sign and Sign while the engine runs, P-521 and secp256k1 offered beside the six algorithms, the vendored engine rebuilt with them and with no zero key or IV; the push subscription asking for the VAPID key before the worker; the English and Spanish keys, the reference sidebar, the navbar contract, the BoxVault brief, the scenarios and the unit tests following (8147d52)
• the certs sidebar as section rows, the Vault row folding Certificates, Authorities, Requests and Keys, each the vault's table narrowed to that kind by its query and lit one at a time, no record in the column; a row whose link carries a query active on that query alone and its parent quiet while a child's query is the route's; the expiry threshold a Certificates card of the Preferences section through the profile page's preferences slot; one line on every tool page and Generate tab saying what it does, the Match and Compare cards flush with the page, the CSR tab named for what it makes with the templates optional under its form, the pending CSRs listed on the Sign tab with Sign per row, a spinner on Generate, Make CSR, Self-sign and Sign while the engine runs, P-521 and secp256k1 offered beside the six algorithms, the vendored engine rebuilt with them; the push subscription asking for the VAPID key before the worker; the reference sidebar, the navbar contract, the BoxVault brief, the scenarios and the unit tests following (b0e1058)
• the configuration pages drawing a schema default as the placeholder of an empty field with a default mark, the orchestration page a draft with Preview through the agent's dry run and one Apply under a header row, the Interfaces summary card and the Machines sentence column gone, one IP addresses table with a Managed badge and the actions on managed rows, the certs textarea the drop zone showing a read file's text and holding binary as a chip, one Discard changes prompt on every form dialog with a changed draft, the navbar search narrowing the machine's roles, a play button running one role, one script or one playbook on a provisioned machine, many credentials a machine picked from the host's store with a default per use and Connect as on every console door, the Installer Files storage paths one table carrying the file count, Scan and the Enable toggle, the contracts, the mock server, the fixtures, the scenarios, the unit tests and the English and Spanish keys following (c7384af)
• the create wizard in eight steps, one Name with the default domain picked from the browser's preference, the person's, the organization's or the agent's row and Edit parts opening red with a link to the host's configuration when none is set, Use a provisioner on General with the family, the version, a warning glyph and a link to the catalog's versions when a newer one is listed, every step prefilled from the manifest's metadata.defaults with tags and the vbox section among them and marked from package, pills opened by cleanliness, OS & Disks merged with the boot media asked once and the template's disk size as the placeholder, the registry filter opening on the one enabled registry, CPU and Memory split with their knobs and the bhyve topology, Confirm with the Hosts.yml preview from POST machines/preview with Copy and one split Create button offering Create and start and Create and provision, the wizard and the machine's Settings and Provisioning views loaded only when opened so the host and machine pages boot light; the field DSL's list, file and secret types, options_source hypervisor, role-attached groups and show_if by a list's min_items and max_items; the roles editor over the whole manifest with the required chip, spec defaults into vars, no dependency warning on a role that is off, one artifact pick modal over the Installer files listing, the installer picked by the manifest's default name, Change a glyph and the checksum on hover; the Vault's eight secret kinds with members, extra and profiles, the host's Secrets page over its own certs store behind certs-store with Add, Edit, Remove and Share from Vault, one secret pick modal for the secret fields and the HCL, custom-resource and git dialogs, the one matching row preselected, every nested dialog scrolling within the viewport; the installer files page drawing the version object on every host; Launch Hyperweaver Agent on the offline banner of a hyperweaver-agent host; the Hosts preferences card; the contracts, references, mock server, fixtures, scenarios, unit tests and the English and Spanish keys following (91f4c21)
• the Credentials tab one row a store row picked through the one Pick secret dialog with its username, use and default, the host Secrets page every kind of the host store on one table with the Kind pills in the navbar and Add, Pick secret, Reload and the view toggle in its one heading, the Pick secret dialog choosing the store, the browser's Vault, this host or the serving backend, and writing a pick to the host, the sync card one switch per destination and one Save, every preferences card one Save, the Secrets Add form with its kind unpicked, an Addresses page of one heading with Edit in place, the Installer Files page as the downloads collection with one bulk delete, the storage locations in a modal and Scan all a split button with re-hash, the installer picker opening on the manifest's named default or exact version alone, the Database, Orchestration, Provisioning network, DNS, Hosts file, Hostname, Spaces, Interfaces, Topology and Bandwidth pages each one heading row with their controls in the pane, the Database page with its Edit settings door, API keys one split Generate button and a form dialog, Processes with the select column and Kill selected, the agent Update assets under the versions card, the machine pages with no heading row and Refresh in the Controls menu, Hosts.yml an editor tab on glass, the retention policy a Snapshots tab of Settings riding Apply, snapshots with the select column and Delete selected, Convert picking the format first with the slots it needs, Chain as three cards, the media path cut in its middle with the full path as its tooltip, the contracts, the mock, the fixtures, the scenarios, the unit tests and the English and Spanish keys following (d4910bb)
• the Credentials tab one row a Vault store row picked through the secret dialog with its username, use and default, the Secrets Add form with its kind unpicked and No service preset, an Addresses page of one heading with Edit in place, the Installer Files page as the downloads collection over the host cache through the one listing with the storage locations in a modal and one bulk delete, the installer picker opening on the manifest's named default or exact version alone, the Secrets, Database, Orchestration, Provisioning network, DNS, Hosts file, Hostname and Spaces pages each one heading row with their controls in the pane and the Secrets search, Kind and Profile pills in the navbar, Share from Vault renamed Copy from Vault, the media path cut in its middle with the full path as its tooltip, the contracts, the mock, the fixtures, the scenarios, the unit tests and the English and Spanish keys following (c8d84eb)
• the dependency bump workflow vendoring each cipher-wasm release into vendor/cipher-wasm on its dispatch (759f204)
• the host Secrets, Vault and backend Certificates pages one merged table over every store the person reaches with an organization column, one lettered column per store carrying a synced check that a click or right-click turns on or off and persists on the row, an Actions split button with Sync now and the bulk set, Last synced per destination, Pick secret gone from the lists and the IdP as its own sync destination beside the backend in the preferences card, the create wizard's domain input with a Pick a domain button opening the chain's domains labelled by source through one shared PickMenu control, the wizard's Back, Next, Create and Cancel in one fixed header slot, the Pick provisioner dialog over the provisioners collection picking the newest version on a card click, the provisioner's hostname and domain filling empty fields, the Network step drawing exactly the manifest's default networks and otherwise the external uplink with an editable provisioning card, the cards draggable, roles tags sent as a list and the Confirm page drawing a 422 map, the roles editor multi-select with Enable, Disable, Remove, Move to top and Move to bottom, the config engine's db row out of the Agent group behind the Database page's Edit settings door, the Installer Files cards and rows in the Downloads shape with a More menu, the installer and media paths cut in their middle, the Hosts file and DNS raw file behind a button filling the page, the folds gone from the Hostname, Spaces, Interfaces, Topology, Addresses, Bandwidth, Update and section cards, Spaces one New space split button, Bandwidth only its charts, the ZFS Snapshots page one heading with its search in the navbar and a picked-state group, API keys one split Generate button with a form dialog, bulk select on API keys, the shared store, processes, snapshots and roles, Scan all a split button, the Update page Overview and Assets stacked left of a full-height Changelog, Convert picking the format first with the needed slots in the Components card and Chain as three cards, the Generate key source three buttons with Certificate authority and Signing depth hints and the generated key shown and downloadable, the record page one heading with Edit, Save and Cancel in the pane, the machines page view toggle in the pane, the machine Overview hardware card without console rows and its information card half height, the machine Settings, Snapshots and Provisioning pages one heading each with Apply, Reset, Take snapshot, Save and Discard flush right, every form dialog asking to discard a changed draft, every confirm plain except destroy and delete, the toasts all auto-dismissing behind a countdown ring with hover holding them, wider, with Copy and no task ids, every preferences card one Save, the new-version banner naming the version, the contracts, the mock, the fixtures, the scenarios, the unit tests and the English and Spanish keys following (b5a37a9)
• the host shell and SSH shell one console a session, every Open starting a new session beside the ones open and re-attaching each listed session as its own tab, a second shell of the same host or machine numbered, VNC and zlogin one a machine and RDP one a target brought forward when open, the navbar contract, the footer reference, the unit tests and the footer scenarios following (cd43b89)
• the package's guest agent default read as metadata.defaults.guest_agent, prefilled onto the System step's switch and sent under the section of the machine's hypervisor, vbox, utm or zones, the contract, the fixture, the mock and the unit tests following (465aebb)
• the render crash card carrying Report this issue, the ticket URL with type Frontend and the error as its context, and Copy error details beside Refresh page and Go home, the identity contract and its reference following; the two-shells footer scenario expecting the accept count as drawn (ce510ea)
• the setup gate counting a silent host as set up and the boot drawing a spinner, the service worker marking the saved status so the shell raises the sticky offline banner in the new-version banner's shape; the Preferences section's first card named General with every feature's card under it named for the feature; the certs Decode and Chain bodies flush with the page as Convert and Match are; Add New opening on click alone, no hover dwell; Open host shell on the empty Consoles pane, on the footer's menus and on the agent dashboard's Controls menu while the host lists host-terminal; the task dialog's output taking every line the details, metadata and subtasks leave; the English and Spanish keys and the navbar and footer references following (8677a4a)
• the Vault under the Account group after Profile, the Certificates tools row under the System section with the Tools group gone, the backend's store page named Certificates among the collections and beside Secrets on an agent, the sync switches in the Certificates preferences card with Save never held and the rows reaching the person's own store without an organization, the domain input of Edit parts offering the chain's domains as its list with the source select gone, the key source and the Sign CSR pickers one switch each, the extended key usages in one row, the templates Load and Save as template, the Convert output drawn before any read with the Input card folding on the first, the avatar badge smaller, the package guest agent default sent under the hypervisor's section, the contracts, the sidebar reference, the mock, the fixtures, the scenarios, the unit tests and the English and Spanish keys following (e26740c)

Bug Fixes

• local updates and m4kr and philotic themess and brnads (2cac348)
• more brands (041be25)
• the machine Provisioning status a glass section that folds with the editor under it on one ground, the Overview cards flush at the top, Apply and Reset held while nothing differs with the pending set drawn as record rows by dotted path, the not-available stub on a Settings route a person may not open, the period shortcut running the Refresh a machine page publishes and the contract following (21250b9)

---

This PR was generated with Release Please. See documentation.

[startcloud-bot]

🤖 Created releases:

• v0.61.0

🌻