v4.2.1
What's Changed
Security
.envkey writes now sanitize CR/LF and re-assert0600permissions: Provider keys and local-provider bearers are stripped of stray carriage returns and newlines before persisting, preventing truncation or file corruption. File permissions are re-asserted on every write to re-tighten secrets files created under loose umasks.
Fixes
- Global hermetic test baseline prevents accidental config pollution: A new setup hook pins the unit test suite's config and keys directories to per-worker scratch locations, ensuring no test can read or modify your real
~/.config/amicuscredentials. - Removed redundant credential file re-read: Eliminated an unnecessary second load of the
.envfile in the credential loader, reducing I/O and simplifying the code path.
Documentation
- Claude Desktop now listed as fully supported: Updated client support matrix to reflect that Claude Desktop is tested and supported alongside Claude Code CLI and Claude Cowork.
Full Changelog: v4.2.0...v4.2.1