claude-bot-andresmgsl 29563a1246 feat(templates): the registry lib — three-knob resolution, the allowlist parser, the definition lint (#110) ... The role-template registry moves out of rig's tree (heavy-duty/rig-templates, ruled 2026-07-24: pinned to the rig version by default, overridable per mint). This is the schema-and-resolution half rig keeps: RIG_TEMPLATES_DIR > RIG_TEMPLATES_REF > the in-tree RIG_TEMPLATES_PIN (the BOX_RELEASE discipline), template.env parsed against an allowlist and never sourced, every refusal naming the failing key, and the lint the registry repo's CI will run on every definition. The pin currently names the registry's pre-seed head; it bumps to the seeded tree in this PR's course (the seed PR is the other half of the build task).		2026-07-24 22:53:48 +00:00
..
manifest.sh	fix: read a manifest's final line when the file has no trailing newline	2026-07-20 12:48:39 +00:00
runner-config.sh	bootstrap: infer the tailnet tag from the pre-auth key, verify the granted tag	2026-07-17 15:27:09 +00:00
sshd.sh	fix: don't read a missing /run/sshd as a broken sshd config	2026-07-20 17:58:10 +00:00
templates.sh	feat(templates): the registry lib — three-knob resolution, the allowlist parser, the definition lint (#110)	2026-07-24 22:53:48 +00:00
tenant-config.sh	feat: kimi-box joins the box tenant roles — the Kimi CLI agent guest	2026-07-22 15:03:25 +00:00
users-config.sh	fix(users): the root-door resolver matches whole fields, not substrings	2026-07-20 11:18:37 +00:00