• v0.1.3 5f06121933

    v0.1.3
    All checks were successful
    Release / build-and-release (push) Successful in 2m8s
    CI / backend-test (push) Successful in 6m12s
    Stable

    Ghost released this 2026-10-10 10:31:42 +02:00 | 161 commits to main since this release

    Signed by ozzt
    GPG key ID: 35441C4ED2E53204

    v0.1.3

    This release adds built-in read-only access, user API-key rotation, and system
    shell completions for the AUR package.

    Highlights

    • First davarctl init creates full-access and read-only users atomically,
      displays both keys once, and saves the full-access key in the client config.
    • Read-only access covers all existing and future accounts without granting
      mail mutations or administrative access.
    • Full-access can rotate either key with
      davarctl config user rotate_password <full-access|read-only> using
      /api/v1/config/user/<user>/rotate_password. Read-only cannot rotate keys.
    • Full-access rotation updates the active CLI config. The replacement key is
      displayed even if saving fails, and read-only rotation preserves the saved
      full-access key. Rotation creates the read-only user if it is missing on an
      older installation. The existing /api/v1/auth/rotate endpoint is retained.
    • README, CLI skill, help, and REST/OpenAPI documentation describe rotation
      and offline full-access key recovery.
    • Bash and Zsh completions include service and user rotation commands.
    • davarctl service systemd enable now installs, enables, and starts the user
      service, then directs the user to initialize access with davarctl init.

    Packaging

    • davar-bin installs system-wide Bash and Zsh completions for davarctl.
    • Installation prints the command to install and enable the user service.
    • Static Linux binaries are provided for amd64 and arm64 with SHA256SUMS.

    Existing installations

    After updating the daemon, obtain a read-only key using
    davarctl config user rotate_password read-only with full-access credentials.
    Repeated initialization continues to reject key retrieval or replacement.

    Downloads