Tags: srcfl/miranda

v0.8.0-beta.5 — accept the documented argument order on every command…

… (attach, share, share revoke, join, pair, machine rename/revoke), consistent detach copy, and a demo GIF for the reach-layer flow

v0.8.0-beta.4 — session sharing: owner-signed expiring grants, one-ti…

…me invites over the blind pair room, read-only pane mirror by default, agent-enforced expiry and revocation, web join links

v0.8.0-beta.3 — invisible tmux: one transport (attach 229→17 ms, LAN-…

…direct 12 ms measured), warm pre-attach (~0 ms cached), mir opens a live machine overview, grouped per-attach tmux sessions (own current window per viewer)

v0.8.0-beta.2 — channel-aware updates (a prerelease build follows pre…

…releases), update notice on mir, mir update alias, tmux-style shortcuts (a, ls, id), help/empty-state copy matched to the shipped flow

v0.8.0-beta.1 — the UX beta: inline pairing, tmux bootstrap, <3 s rec…

…onnect (lab-measured), warm multi-machine SPA, hook-driven window strip, rename/retire flows, error taxonomy, doctor --share, netsim NAT matrix

Miranda v0.7.0

Security release. Attach requires Noise KK on the winning locator, LAN
dials only private addresses, ICE disconnected is not session death, and
native attach uses ephemeral TURN and reconnects. Pairing shows the
safety number after msg2. Pair bridges, TURN, and revocations are
hardened. SPA deploy is digest-checked. Toolchain is Go 1.26.6.

v0.7.0-rc.1 — passkey-native terminal continuity

v0.6.0 — wallet device registry (your machines, everywhere)

- feat: B2 wallet device registry. mir up (with your wallet) publishes an
  encrypted, wallet-signed record to the relay; your other devices auto-list
  your machines by name — no add-machine, no pairing between your own devices.
  The relay stays blind AND stateless (in-memory soft-state on the live
  registration); ChaCha20-Poly1305 with machine_id AAD gives encryption AND
  authenticity, so forgeries self-drop and the relay verifies nothing.
  A new machine prints a "new device joined" notice. mir up auto-serves its
  own wallet. Discovery-only — Noise data plane + LAN-direct unchanged.
- fix(mir-signal): /registry is forwarded in --webroot mode (was 404).
- fix(selfupdate): quiet by default when cosign isn't installed; opt into
  hard verification with MIR_REQUIRE_COSIGN.

v0.5.1 — first-run guide + SPA boot fix

- fix(web): the browser SPA showed a black screen on boot after v0.5.0
  (wallet derivation pulled @noble/hashes/pbkdf2 into the module graph, but
  it was missing from the importmap). Vendored + mapped + regression-guarded.
- feat(cli): `mir` with no args now prints a getting-started guide (with a
  first-run welcome); the first client command introduces your wallet identity
  + backup; legacy identities get a guided `mir keygen --wallet` + re-pair
  migration message instead of a cryptic failure.

v0.5.0 — Wallet identity on the wire + LAN-direct

Breaking (pre-1.0): owner_id is now the base58 Solana wallet; a wallet-signed
binding is required. Re-key existing identities with `mir keygen --wallet`.

- Wallet-rooted identity end-to-end (base58 owner_id, wallet->X25519 binding,
  pairing auth over the channel binding; browser derives the wallet at sign-in).
- LAN-direct: zero-config mDNS discovery + direct QUIC, relay-free on the same
  network, staggered happy-eyeballs (mir up --no-lan, mir attach --relay-only).
- mir wallet address|accounts|export-phrase|import-phrase; mir keygen --wallet.
- cosign keyless signing of release artifacts; mobile keyboard accessory bar.