chore: release v0.11.0

Author: lroolle

CHANGELOG.md

@@ -7,24 +7,33 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.11.0] - 2026-05-22
+
 ### Added
 - `scripts/tmux-bridge` vendored from upstream smux (commit 95bf0b6, MIT) for layer-2 agent-to-agent communication over tmux panes: read/type/keys/label/envelope/doctor
 - `tmux-bridge` installed at `/usr/local/bin/tmux-bridge` in container images; composes with existing `deva-bridge-tmux` (layer 1, kernel boundary)
 - `scripts/THIRD_PARTY_LICENSES/smux-LICENSE` and `scripts/tmux-bridge.VENDORED` provenance metadata pinning upstream commit + SHA256
 - `docs/tmux-bridge-agent-comms.md` explaining the two-layer bridge composition, read-before-act guard, and socket detection order
 - CI smoke test exercising the full `tmux-bridge` CLI surface (list/name/resolve/read/type/read-guard) against an ephemeral tmux server inside the built image
+- Codex `--browser-mcp` wiring for Playwright MCP sessions on the rust image profile
+- `scripts/test-container-slug.sh` regression coverage for the `deva--agent--auth--slug..hash` container naming format
+- `tests/version-upgrade.sh` fake-Docker coverage for `versions-up` build argument routing
 
 ### Fixed
 - deva no longer adds a redundant project-local `.claude` child bind mount on top of the workspace mount
 - startup now rejects recursive child bind mounts that simply rebind a subtree already covered by a parent bind mount
 - shared agent tooling installs now switch out of inaccessible working directories before pinned atlas go-install fallback
 - `claude-trace` installs are now pinned instead of silently following the latest npm publish
 - atlas-cli installs now honor `ATLAS_CLI_VERSION` exactly instead of drifting to upstream `latest`
+- user-specified `.agents` mounts no longer collide with deva's shared-agent mount
+- Docker installer smoke no longer fails on npm self-upgrade or Playwright headless-shell path changes
 
 ### Changed
 - default Makefile builds now use pinned tool versions; `versions-up` remains the explicit upgrade path
 - Rust image rebuild paths now forward the selected agent CLI versions instead of silently reinstalling Dockerfile defaults
 - `versions` and `versions-up` now treat Makefile defaults as defaults instead of forcing them as fake "latest" overrides
+- persistent container names now include agent, auth tag, workspace slug, and shape hash to avoid cross-auth/container-shape reuse
+- `versions-up` now builds the stable core image and uses it as the Rust image base, matching `make build-rust-image`
 
 ## [0.10.0] - 2026-03-24
 

README.md

@@ -3,6 +3,7 @@
 [![CI](https://img.shields.io/github/actions/workflow/status/thevibeworks/deva/ci.yml?branch=main&label=ci)](https://github.com/thevibeworks/deva/actions/workflows/ci.yml)
 [![Docs](https://img.shields.io/badge/docs-docs.deva.sh-111111)](https://docs.deva.sh)
 [![Release](https://img.shields.io/github/v/release/thevibeworks/deva?sort=semver)](https://github.com/thevibeworks/deva/releases)
+[![Checks](https://img.shields.io/badge/checks-shellcheck%20%7C%20docs%20%7C%20smoke-222222)](#development)
 [![License](https://img.shields.io/github/license/thevibeworks/deva)](LICENSE)
 [![Container](https://img.shields.io/badge/ghcr.io-thevibeworks%2Fdeva-blue)](https://github.com/thevibeworks/deva/pkgs/container/deva)
 [![Agents](https://img.shields.io/badge/agents-codex%20%7C%20claude%20%7C%20gemini-222222)](#what-this-is)
@@ -68,6 +69,7 @@ Read these if you want to understand the machinery instead of cargo-culting comm
 - [How It Works](docs/how-it-works.md)
 - [Philosophy](docs/philosophy.md)
 - [Advanced Usage](docs/advanced-usage.md)
+- [Tmux Bridge](docs/tmux-bridge-agent-comms.md)
 - [Custom Images](docs/custom-images.md)
 - [Docs Home](docs/index.md)
 
@@ -157,6 +159,12 @@ Basic checks:
 ./deva.sh --version
 ./claude-yolo --help
 ./scripts/version-check.sh
+bash tests/test_release_utils.sh
+bash tests/version-upgrade.sh
+./scripts/test-mount-shape.sh
+./scripts/test-version-targets.sh
+bash scripts/test-container-slug.sh
+uv run --with mkdocs --with mkdocs-material --with pymdown-extensions mkdocs build --strict
 ```
 
 If you changed auth, mounts, or container lifecycle, run the real path. Do not ship "should work".

deva.sh

@@ -13,7 +13,7 @@ if [ -n "${DEVA_DOCKER_TAG+x}" ]; then
     DEVA_DOCKER_TAG_ENV_SET=true
 fi
 
-VERSION="0.10.0"
+VERSION="0.11.0"
 DEVA_DOCKER_IMAGE="${DEVA_DOCKER_IMAGE:-ghcr.io/thevibeworks/deva}"
 DEVA_DOCKER_TAG="${DEVA_DOCKER_TAG:-latest}"
 DEVA_CONTAINER_PREFIX="${DEVA_CONTAINER_PREFIX:-deva}"

docs/index.md

@@ -19,6 +19,7 @@ If you want the internals instead of vague hand-waving:
 - [How It Works](how-it-works.md)
 - [Philosophy](philosophy.md)
 - [Advanced Usage](advanced-usage.md)
+- [Tmux Bridge](tmux-bridge-agent-comms.md)
 - [Custom Images](custom-images.md)
 
 ## What This Is