v0.1.4

Security fix

Fixes an unauthenticated remote code execution in the WebUI (WebUIAgents), reported through CNVD. All users who expose the WebUI beyond localhost (including the official Docker setup) should upgrade.

• switch_agent only loads agent configs listed by list_agents (configs/agents/{examples,simple,orchestra,orchestrator,generated}/*.yaml).
• /ws and /upload only accept same-origin requests; add more with UTU_WEBUI_ALLOWED_ORIGINS.
• Uploaded filenames are confined to the workspace; uploads are size limited.
• New access token UTU_WEBUI_TOKEN: open http://<host>:<port>/?token=<token> once, the browser keeps it in an HttpOnly cookie.

Breaking change

On a non-loopback address (e.g. UTU_WEBUI_IP=0.0.0.0, as in Docker) the WebUI now refuses to start without UTU_WEBUI_TOKEN. Add it to your .env (e.g. openssl rand -hex 32), or set UTU_WEBUI_ALLOW_INSECURE=true only if an authenticating reverse proxy already protects the service. Docker users need to rebuild the image.