TOKN v0.3.15

TOKN v0.3.15

tokn events — turn a queue into agent turns.

Point TOKN at a durable queue and each message becomes an agent run, with
at-least-once delivery, per-session ordering, dedupe, and dead-letter
visibility. Two sources ship: a local on-disk queue that survives a crash,
and Azure Service Bus (queue or topic).

# .nospace/eventsource.yaml
max_concurrent: 2
routes:
  - name: build-failures
    mode: code
    filters:
      subject: build.failed

tokn events run

Three config files that were documented but never read now work.

.nospace/webhooks.yaml and .nospace/schedules.yaml were described in
--help, the README and QUICKSTART, and nothing loaded them. Both are now
read at daemon start — a missing file is silent, a malformed one stops
startup with the parse error rather than starting with your rules ignored.

Webhook hardening. /hooks/<path> ran with the same authority as
/webhook but verified no signature. It now requires one whenever a webhook
secret is configured. If you relied on unsigned calls, set
TOKN_WEBHOOK_ALLOW_UNSIGNED_HOOKS=1; TOKN will warn at startup. With no
secret configured, nothing changes.

An oversized request body is now rejected as a size problem before signature
checking, so a truncated payload no longer looks like a bad secret.

Install

Download the binary for your platform, rename it to tokn (or tokn.exe), and
put it on your PATH.

Platform	Asset
Windows x64	tokn_windows_amd64.exe
macOS Intel	tokn_darwin_amd64
macOS Apple Silicon	tokn_darwin_arm64
Linux x64	tokn_linux_amd64
Linux arm64	tokn_linux_arm64

Verify

sha256sum -c SHA256SUMS --ignore-missing
tokn version