chore: merge main into prerelease branch

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

Author: drew

.agents/skills/tui-development/SKILL.md

@@ -484,8 +484,12 @@ use openshell_core::proto::{
   let req = openshell_core::proto::DeleteSandboxRequest {
       name: sandbox_name,
       workspace_scope: Some(workspace_selector(workspace)),
+      allow_missing: true,
   };
   ```
+- Delete responses carry `DeletionOutcome`: distinguish `Accepted` (cleanup
+  pending), `Completed`, and `AlreadyAbsent`. Treat unspecified or unknown
+  outcomes as unconfirmed, not completed.
 - `WatchSandboxRequest` has extra fields beyond what you might need — always use `..Default::default()`:
   ```rust
   let req = openshell_core::proto::WatchSandboxRequest {
@@ -497,12 +501,12 @@ use openshell_core::proto::{
       ..Default::default()
   };
   ```
-- `SandboxLogLine` proto fields: `sandbox_id`, `timestamp_ms`, `level`, `target`, `message`, `source`, `fields` (HashMap<String, String>).
+- `SandboxLogLine` proto fields: `sandbox_id`, `event_time` (`Option<prost_types::Timestamp>`), `level`, `target`, `message`, `source`, `fields` (`HashMap<String, String>`).
 - Workspace-scoped request fields use `workspace_scope: Option<WorkspaceSelector>`.
   Select one workspace with `Some(workspace_selector(name))`. List requests that
   explicitly support cross-workspace access also accept
   `Some(all_workspaces_selector())`; do not use that marker on other requests.
-- `GetSandboxLogsRequest` fields: `sandbox_id`, `lines` (u32), `since_ms` (i64),
+- `GetSandboxLogsRequest` fields: `sandbox_id`, `lines` (u32), `since_time` (`Option<prost_types::Timestamp>`),
   `sources` (Vec<String>), `min_level` (String), `workspace_scope`.
 - `ListSandboxesRequest` fields: `page_size` (i32), `page_token` (String),
   `label_selector` (String), `workspace_scope`.

.claude/agents/principal-engineer-reviewer.md

@@ -61,7 +61,8 @@ When reviewing code or diffs:
 6. When suggesting a change, show the concrete fix — don't just describe it.
 7. If something is good, say so briefly. Positive signal is useful too.
 8. When behavior, commands, or development workflows change, consult the `sync-agent-infra` maintenance map and verify that related skills were updated. Apply its full consistency checklist when the changes add, remove, or rename skills or crates; change workflow relationships or skill coverage; modify issue or PR templates; or change agent cross-references. Report missing companion updates or drift as a warning.
-9. When the task includes a prior review feedback ledger, treat trusted resolved
+9. For pull request reviews, determine whether the changes affect Windows support. Changes to Windows or MSVC CI and `mise` tasks, Windows lock-file platform entries, the MXC driver, or `cfg(windows)` implementations and tests require the `test:windows` label. Report that requirement explicitly to the caller so the PR workflow can apply the label; label routing is review metadata, not a code-review finding.
+10. When the task includes a prior review feedback ledger, treat trusted resolved
    or explicitly waived findings as durable across later revisions. Do not
    re-raise the same finding with different wording unless the new diff
    materially invalidates the prior rationale or reintroduces the defect. If

.github/actions/build-docker-image/action.yml

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 name: Build Docker Image
-description: Build and push one architecture of an OpenShell image
+description: Build, push, and export a multi-platform OpenShell image
 
 inputs:
   component:
@@ -11,14 +11,8 @@ inputs:
   binary:
     description: Binary staged in the Docker build context
     required: true
-  triple:
-    description: Binary artifact target triple
-    required: true
-  arch:
-    description: Docker architecture name
-    required: true
-  platform:
-    description: Docker platform
+  target-suffix:
+    description: Binary artifact target suffix
     required: true
   image-tag:
     description: Docker image tag
@@ -35,41 +29,64 @@ runs:
         buildkitd-config: /etc/buildkit/buildkitd.toml
 
     - name: Log in to GHCR
-      shell: bash
-      run: echo "${INPUTS_GITHUB_TOKEN}" | docker login ghcr.io -u "${GITHUB_ACTOR}" --password-stdin
-      env:
-        INPUTS_GITHUB_TOKEN: ${{ inputs.github-token }}
+      uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
+      with:
+        registry: ghcr.io
+        username: ${{ github.actor }}
+        password: ${{ inputs.github-token }}
+
+    - name: Download amd64 ${{ inputs.binary }}
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      with:
+        name: ${{ inputs.binary }}-x86_64-${{ inputs.target-suffix }}
+        path: artifact/amd64
 
-    - name: Download ${{ inputs.binary }}
+    - name: Download arm64 ${{ inputs.binary }}
       uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
-        name: ${{ inputs.binary }}-${{ inputs.triple }}
-        path: artifact
+        name: ${{ inputs.binary }}-aarch64-${{ inputs.target-suffix }}
+        path: artifact/arm64
 
     - name: Stage ${{ inputs.binary }}
       shell: bash
-      run: install -Dm0755 artifact/${INPUTS_BINARY} deploy/docker/.build/prebuilt-binaries/${INPUTS_ARCH}/${INPUTS_BINARY}
       env:
-        INPUTS_BINARY: ${{ inputs.binary }}
-        INPUTS_ARCH: ${{ inputs.arch }}
+        BINARY: ${{ inputs.binary }}
+      run: |
+        install -Dm0755 artifact/amd64/${BINARY} deploy/docker/.build/prebuilt-binaries/amd64/${BINARY}
+        install -Dm0755 artifact/arm64/${BINARY} deploy/docker/.build/prebuilt-binaries/arm64/${BINARY}
 
     - name: Build ${{ inputs.component }} image
       shell: bash
       env:
+        COMPONENT: ${{ inputs.component }}
         IMAGE_TAG: ${{ inputs.image-tag }}
-        INPUTS_PLATFORM: ${{ inputs.platform }}
-        INPUTS_COMPONENT: ${{ inputs.component }}
-        INPUTS_ARCH: ${{ inputs.arch }}
       run: |
+        install -d artifacts/images
         docker buildx build \
           --builder openshell \
-          --platform ${INPUTS_PLATFORM} \
-          --file deploy/docker/Dockerfile.${INPUTS_COMPONENT} \
-          --target ${INPUTS_COMPONENT} \
-          --tag ghcr.io/nvidia/openshell/${INPUTS_COMPONENT}:${IMAGE_TAG}-${INPUTS_ARCH} \
-          --cache-from type=gha,scope=${INPUTS_COMPONENT}-${INPUTS_ARCH} \
-          --cache-to type=gha,mode=max,scope=${INPUTS_COMPONENT}-${INPUTS_ARCH} \
+          --platform linux/amd64,linux/arm64 \
+          --file deploy/docker/Dockerfile.${COMPONENT} \
+          --target ${COMPONENT} \
+          --tag ghcr.io/nvidia/openshell/${COMPONENT}:${IMAGE_TAG} \
+          --cache-from type=gha,scope=${COMPONENT} \
+          --cache-to type=gha,mode=max,scope=${COMPONENT} \
           --provenance=mode=min \
           --attest type=sbom \
           --output type=image,push=true,oci-mediatypes=true,oci-artifact=true \
+          --output type=oci,dest=artifacts/images/${COMPONENT}.tar \
           .
+
+    - name: Verify SBOM attestation
+      shell: bash
+      env:
+        IMAGE_REF: ghcr.io/nvidia/openshell/${{ inputs.component }}:${{ inputs.image-tag }}
+      run: tasks/scripts/verify-image-sbom.sh "${IMAGE_REF}" --require-cargo
+
+    - name: Upload ${{ inputs.component }} image
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+      with:
+        name: image-${{ inputs.component }}
+        path: artifacts
+        compression-level: 0
+        retention-days: 5
+        if-no-files-found: error

.github/actions/build-rust-binary/action.yml

@@ -17,7 +17,7 @@ inputs:
   cargo-version:
     description: Cargo package version embedded in the binary
     required: true
-  image-tag:
+  supervisor-image-tag:
     description: Default supervisor image tag embedded in the binary
     required: false
     default: ""
@@ -29,11 +29,6 @@ inputs:
     description: Additional flags passed to cargo build
     required: false
     default: ""
-  interpreter:
-    description: Expected ELF program interpreter, "none" for static, or "skip"
-    required: false
-    default: skip
-
 runs:
   using: composite
   steps:
@@ -63,7 +58,7 @@ runs:
       shell: nix develop -c bash -euo pipefail {0}
       env:
         GIT_DIR: /nonexistent
-        OPENSHELL_IMAGE_TAG: ${{ inputs.image-tag }}
+        OPENSHELL_IMAGE_TAG: ${{ inputs.supervisor-image-tag }}
         INPUTS_PACKAGE: ${{ inputs.package }}
         INPUTS_BINARY: ${{ inputs.binary }}
         INPUTS_TRIPLE: ${{ inputs.triple }}
@@ -75,24 +70,12 @@ runs:
       env:
         INPUTS_BINARY: ${{ inputs.binary }}
         INPUTS_TRIPLE: ${{ inputs.triple }}
-        INPUTS_INTERPRETER: ${{ inputs.interpreter }}
       run: |
         binary="target/${INPUTS_TRIPLE}/release/${INPUTS_BINARY}"
         # Confirm the binary runs and reports the expected name.
         "$binary" --version | grep -q "^${INPUTS_BINARY} "
         # Confirm Syft can decode the embedded cargo-auditable metadata.
         SYFT_CHECK_FOR_APP_UPDATE=false syft "file:${binary}" -o cyclonedx-json | grep 'pkg:cargo/' > /dev/null
-        if [ "$INPUTS_INTERPRETER" != skip ]; then
-          actual_interpreter="$(readelf -l "$binary" | sed -n 's/.*Requesting program interpreter: \(.*\)]/\1/p')"
-          expected_interpreter="$INPUTS_INTERPRETER"
-          if [ "$expected_interpreter" = none ]; then
-            expected_interpreter=""
-          fi
-          if [ "$actual_interpreter" != "$expected_interpreter" ]; then
-            echo "error: expected interpreter '${expected_interpreter:-<none>}', got '${actual_interpreter:-<none>}'" >&2
-            exit 1
-          fi
-        fi
 
     - name: Upload ${{ inputs.binary }}
       uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7

.github/actions/release-helm-oci/action.yml

@@ -26,7 +26,7 @@ inputs:
       as 0.0.0-dev.<sha> with appVersion set to the same SHA, enabling exact
       version pinning alongside the floating 0.0.0-dev tag. Both chart version
       and appVersion use the full SHA so the chart tag matches the image tag
-      pushed by docker-build.yml.
+      pushed by build-images.yml.
     required: false
     default: ""
 

.github/actions/setup-e2e-kind/action.yml

@@ -28,7 +28,7 @@ inputs:
   mise-version:
     description: mise release to install
     required: false
-    default: v2026.4.25
+    default: v2026.9.9
 
 runs:
   using: composite

.github/actions/setup-e2e-podman/action.yml

@@ -8,7 +8,7 @@ inputs:
   mise-version:
     description: mise release to install
     required: false
-    default: v2026.4.25
+    default: v2026.9.9
   podman-major:
     description: Expected Podman major version
     required: true

.github/actions/setup-e2e-vm/action.yml

@@ -8,7 +8,7 @@ inputs:
   mise-version:
     description: mise release to install
     required: false
-    default: v2026.4.25
+    default: v2026.9.9
   rust-cache-key:
     description: Shared key for Rust test artifacts
     required: false

.github/actions/setup-mise/action.yml

@@ -8,7 +8,7 @@ inputs:
   version:
     description: mise release to install
     required: false
-    default: v2026.4.25
+    default: v2026.9.9
 
 runs:
   using: composite