Release v1.0.1

Local credentials now stay out of git, and local services listen only on localhost by default.

Changed

• The installer adds .eventmodelers/ to the project .gitignore. When a project already has a .gitignore, the installer keeps it and adds only the entries that are missing. If a later rule would make .eventmodelers/ tracked again, the installer adds the entry again and confirms with git that the configuration is ignored.
• The local eventmodelers configuration files are readable only by their owner. Every install run tightens the permissions on existing files.
• The bundled agent prompts stage files by name and never stage .eventmodelers/, .env files, keys or other credentials.
• The /connect skill creates the configuration with owner-only permissions.
• The agent runner passes its prompt on standard input instead of on the command line, and it fails when the prompt cannot be delivered or the agent exits with an error.
• The template docker-compose.yml binds every published port to 127.0.0.1.

Security

• If you installed an earlier version, check your project history for .eventmodelers/config.json. Rotate any board token that was committed.