From c372cc1f923c60fdd8bcc03f1ec9a98cc636b423 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?D=C3=A1niel=20Kerekes?= Date: Thu, 15 Oct 2026 03:49:12 +0200 Subject: [PATCH] chore(release): v0.2.0 --- CHANGELOG.md | 10 ++++++++++ package.json | 2 +- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5f05e5a..c072b09 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,16 @@ Published changes are recorded in [GitHub releases](https://github.com/kerddotdev/inbot/releases), with notes generated from merged pull requests. This file summarizes each release. +## 0.2.0 - 2026-10-15 + +- A credential vault stores logins for each inbox in the encrypted database. Agents see names and `inbot://credentials//` references, never values, and every use is authorized again against the key's `credential_*` permissions and inbox scope. +- The server generates passwords (Apple-style by default, or matching a site's password rules) and TOTP codes, so a new account's secrets never pass through the agent. +- Browser fill and capture connect to a CDP endpoint, check the page's origin against the credential and type the value server-side. Remote agents can only reach owner-allowlisted public browser hosts. +- `inbot run --env NAME=REF -- command` passes credentials to local commands without showing them to the agent. It is not a security boundary. +- Keys default to `use_policy: approval`: the owner approves each fill or run from Approvals, the CLI or REST. +- Agents can request a credential the owner fills in locally, and the owner can import and export Bitwarden JSON. +- The owner UI has a Vault screen with on-demand reveal, live TOTP codes and generation. + ## 0.1.1 - 2026-10-14 - `inbot update` installs a newer release after verifying its checksum and, on macOS, its Developer ID signature, then restarts the background service. `inbot update --check` only reports whether an update exists. diff --git a/package.json b/package.json index b42075f..43b2ac2 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "inbot-workspace", - "version": "0.1.1", + "version": "0.2.0", "private": true, "description": "Self-hosted, privacy-first email for AI agents.", "keywords": [