chore(main): release lns libraries

Author: github-actions[bot]

.release-please-manifest.json

@@ -1,7 +1,7 @@
 {
-  ".": "0.17.0",
-  "crates/lns-cli": "0.17.0",
-  "crates/lns-service": "0.17.0",
-  "crates/e2e-tests": "0.17.0",
+  ".": "0.18.0",
+  "crates/lns-cli": "0.18.0",
+  "crates/lns-service": "0.18.0",
+  "crates/e2e-tests": "0.18.0",
   "scripts/lns-install": "0.6.0"
 }

CHANGELOG.md

@@ -1,5 +1,68 @@
 # Changelog
 
+## [0.18.0](https://github.com/lensapp/lens-sandbox/compare/lns-v0.17.0...lns-v0.18.0) (2026-07-31)
+
+
+### ⚠ BREAKING CHANGES
+
+* **policy:** adopt egress.http as the canonical route table
+* **cli:** lns volume inspect renames its keys, size_bytes to sizeBytes, disk_bytes to diskBytes and in_use_by to inUseBy. A script reading the old names gets null rather than an error, so update it before upgrading.
+
+### Features
+
+* **a11y:** label the approval window's dismiss controls ([dbd6fa0](https://github.com/lensapp/lens-sandbox/commit/dbd6fa0fce0e7205a109c2f1704aa94edcaac102))
+* **cli:** give lns audit --format table|jsonl ([5ca1f7a](https://github.com/lensapp/lens-sandbox/commit/5ca1f7aba34db85e91e1a09e0167afc67acacdd4))
+* **cli:** give lns config list and get --format json ([02ccb74](https://github.com/lensapp/lens-sandbox/commit/02ccb7487e0a85ede1517a1745735cb7450a437e))
+* **cli:** give lns connector list and grants --format json ([4b8d5b1](https://github.com/lensapp/lens-sandbox/commit/4b8d5b1b729e1a7421ce7fb9d0efb2fec28da569))
+* **cli:** give lns policy list --format json ([a8923d2](https://github.com/lensapp/lens-sandbox/commit/a8923d2b41c0782342192707032687503866e60b))
+* **cli:** give lns ps --format json ([feff7fa](https://github.com/lensapp/lens-sandbox/commit/feff7fa94831bb258afa099cd623db0807ccf5f1))
+* **cli:** give lns sandbox ls --format json ([4075a6e](https://github.com/lensapp/lens-sandbox/commit/4075a6e7e7efecdcf0ebd0cf709c8033653d5e2b))
+* **cli:** give lns service status --format json ([55d8bbf](https://github.com/lensapp/lens-sandbox/commit/55d8bbf2265f6997bc4ea01ca1457cef0bcebfeb))
+* **cli:** give lns volume ls --format json ([c7db0b7](https://github.com/lensapp/lens-sandbox/commit/c7db0b72f2317a2aa95e0e9cea38d05bf096b8e8))
+* **cli:** inspect, revoke, and disconnect-clear per-workload grants ([a66f01d](https://github.com/lensapp/lens-sandbox/commit/a66f01d0e90e7fd7acfdebbd7478155c6ad997d8))
+* **cli:** shared machine-readable output seam ([e7bb085](https://github.com/lensapp/lens-sandbox/commit/e7bb085d5104cae1c2a1e867367394dd4ad92228))
+* **cli:** tell connect when this project holds a standing decline ([6b527d3](https://github.com/lensapp/lens-sandbox/commit/6b527d33f3c49fc99e2c54fa3b1f8aebc6f9e43a))
+* **policy:** add per-workload connector grant store ([f852407](https://github.com/lensapp/lens-sandbox/commit/f85240795a91493e7ddaa868cef4e007b8dd76bc))
+* **policy:** per-binary scoping for network routes ([ae9d21b](https://github.com/lensapp/lens-sandbox/commit/ae9d21b7300ca822ce9044a8949b4092ae2748eb))
+* **service:** gate connector arming on per-workload grants ([4012673](https://github.com/lensapp/lens-sandbox/commit/4012673b37edb008a0f1c7d0cfcd23750aa5d025))
+* **service:** grant a value already bound on this machine from the card ([d804661](https://github.com/lensapp/lens-sandbox/commit/d804661a3f6982c15db37c1ec39f569293e1bd6d))
+* **service:** offer a reconnect alongside spending a bound connection ([4e3f31a](https://github.com/lensapp/lens-sandbox/commit/4e3f31a4a05a43a51893bcd0c593e8f9bae02aa9))
+* **service:** record per-workload connector grants at consent ([45b0405](https://github.com/lensapp/lens-sandbox/commit/45b0405d84d09b2155329f9bcb0bdfe24b054995))
+* **service:** remember a declined connector as a per-workload deny ([a3a5772](https://github.com/lensapp/lens-sandbox/commit/a3a57727ab089ca776dfc915dcf34cf416d871f3))
+
+
+### Bug Fixes
+
+* a closed network card reads as undecided on the wire ([3943ac3](https://github.com/lensapp/lens-sandbox/commit/3943ac3b0753e813a703a2d626d27cd4aa5f4a60))
+* **artifact:** refuse two credential slots naming one connector ([fcd8a29](https://github.com/lensapp/lens-sandbox/commit/fcd8a29abd4532dd2fa204a012c9b223341867e4))
+* **broker:** carry confine through the linux-only session fixture ([ec0b819](https://github.com/lensapp/lens-sandbox/commit/ec0b819b6261e5b2263ea957c8af0ea0c4f3f748))
+* **broker:** confine an exec session to the workload's identity ([be05478](https://github.com/lensapp/lens-sandbox/commit/be054784b5f7cff22f190f52d41659642c996f9c))
+* **broker:** keep the relay credentials out of a confined session ([7d3cbd4](https://github.com/lensapp/lens-sandbox/commit/7d3cbd4e13f6361502f05928bffc445a04052799))
+* **cli:** clear per-workload grants before dropping a disconnected connector ([06b62d3](https://github.com/lensapp/lens-sandbox/commit/06b62d3bc3cafb657cf844fd200647c327ee953e))
+* **cli:** default a bare registry reference to the Lens hub ([6aa8261](https://github.com/lensapp/lens-sandbox/commit/6aa82613e98d3af75c831b1cac91410f6ea81c22))
+* **cli:** make ps report the same status shape as inspect ([8715bb6](https://github.com/lensapp/lens-sandbox/commit/8715bb6cccfecf31fb7af00c9551c667d79cfd56))
+* closing an approval card no longer decides anything ([c3b0702](https://github.com/lensapp/lens-sandbox/commit/c3b0702b1b11857effbc8fac3432ba710963780f))
+* **policy:** bound the wait for a contended grant-sidecar lock ([c70fbee](https://github.com/lensapp/lens-sandbox/commit/c70fbee360ea8ee77134bb84d02a17e8605b5e99))
+* **policy:** let a disconnect cancel a grant the run is still holding ([2afdf3c](https://github.com/lensapp/lens-sandbox/commit/2afdf3c29b5a8f9571ec7bf49094804c64cbdf93))
+* **policy:** serialize grant-sidecar writes across processes ([8ebd4e9](https://github.com/lensapp/lens-sandbox/commit/8ebd4e986b25ad45d3af38ce4123023d009fc340))
+* **run:** confine the primary session when the run is unsupervised ([d4f586d](https://github.com/lensapp/lens-sandbox/commit/d4f586d95371a7a7236cec8b2bd3b42a72105a29))
+* **service:** canonicalize a definition's workload identity directory ([75844d6](https://github.com/lensapp/lens-sandbox/commit/75844d697c1c476eaf565d95b12a83dc0cdd5d16))
+* **service:** close four gaps in the per-workload grant lifecycle ([a277c1a](https://github.com/lensapp/lens-sandbox/commit/a277c1ad8c468377657c61edc3a128203b61f555))
+* **service:** grant a required slot's boot sign-in to its workload ([c3e0a4d](https://github.com/lensapp/lens-sandbox/commit/c3e0a4da21467f43264f0cfae9169ee874c1e787))
+* **service:** let a disconnect cancel a boot sign-in's grant too ([8c34e23](https://github.com/lensapp/lens-sandbox/commit/8c34e233f8ba39b82c161e4066d54effee31f41c))
+* **service:** offer a bound value only when one is actually bound ([56f5977](https://github.com/lensapp/lens-sandbox/commit/56f5977cd6cc89524e744650b409c97bbc6b4a1c))
+* **service:** pin a grant decision to the forget count its card was asked against ([8be2654](https://github.com/lensapp/lens-sandbox/commit/8be2654e4cf819a278daebb172cf5f00890a3ee9))
+* **service:** point an unidentifiable run at the stale-service restart ([930e688](https://github.com/lensapp/lens-sandbox/commit/930e688dc5e251b573b83186ad3155aaa8512444))
+* **service:** refuse a run that resolves no workload identity ([70edc30](https://github.com/lensapp/lens-sandbox/commit/70edc30037994dc31bc26fdb1857a7c6a969b8a0))
+* **service:** revalidate deny grants and fix remember_grant ordering ([b050418](https://github.com/lensapp/lens-sandbox/commit/b0504188facd005f1f6cf414787d3221fcb799c7))
+* **supervisor:** drop capabilities when the run-as user is root ([f7ae228](https://github.com/lensapp/lens-sandbox/commit/f7ae228ddb30d3afb1777fe9f1a6899fe72d9d84))
+* **supervisor:** keep the run-as identity when the setuid is dropped ([fd9c17a](https://github.com/lensapp/lens-sandbox/commit/fd9c17a9e98956e799ffe4b663438d118336fc55))
+
+
+### Code Refactoring
+
+* **policy:** adopt egress.http as the canonical route table ([f302a01](https://github.com/lensapp/lens-sandbox/commit/f302a011b3931f3078d023fd3b48a58784b98a60))
+
 ## [0.17.0](https://github.com/lensapp/lens-sandbox/compare/lns-v0.16.0...lns-v0.17.0) (2026-07-24)
 
 

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "e2e-tests"
-version = "0.17.0"
+version = "0.18.0"
 edition = "2024"
 publish = false
 

crates/e2e-tests/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "lns-cli"
-version = "0.17.0"
+version = "0.18.0"
 edition = "2024"
 description = "Lens Sandbox — thin CLI that drives the lns-service daemon"
 repository = "https://github.com/lensapp/lens-sandbox"

crates/lns-cli/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "lns-service"
-version = "0.17.0"
+version = "0.18.0"
 edition = "2024"
 description = "Lens Sandbox background service — tray-resident process exposing local IPC and orchestrating microVM runs"
 license = "Apache-2.0"