)

* Use BASE_IMAGE variable to avoid registry metadata resolution in CI

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Override BASE_IMAGE to non-registry name in bake

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Add comprehensive tests for agent registry (built-in agents, add/get/list,
invalid names, overrides, copy safety). Add direct unit tests for sandbox
helpers (mergeEnvPatterns, resolveCommand, resolveMCPConfig). Add CLI
helper tests (setupLogger, openLogFile, sanitizeAll, cache dir functions).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Picks up override_stat xattr support on Linux for correct
guest file ownership without CAP_CHOWN.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

…ctions

Update GitHub Artifact Actions (major)

Wire LogLevel through domain (VMConfig), application (RunOpts), and
infrastructure (WithLogLevel) layers. When --debug is set, LogLevel=5
enables libkrun trace output in vm.log for diagnosing boot and
runtime issues.

Also add debug logging for terminal setup (interactive check, raw
mode, PTY allocation) to aid SSH session troubleshooting.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add --debug LogLevel plumbing for hypervisor diagnostics

Add EXPERIMENTAL banner, CI and repostatus badges, table of contents,
install-from-release section, and documentation links. Fix Go version
across all docs (1.25 → 1.26 per go.mod). Correct stale propolis
replace directive reference in architecture doc.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

On macOS, libkrun's init.krun forks a child for the timesync
clock_worker. When the vsock DGRAM bind fails, clock_worker
returns instead of calling _exit(), so the child falls through
into the main init path and execs a second bbox-init.

Add an flock(LOCK_EX|LOCK_NB) guard so the second instance
blocks forever instead of racing with the first.

Workaround for containers/libkrun#580

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Guard against duplicate bbox-init on macOS