Skip to content

Castellyn v0.2.1

Choose a tag to compare

View all tags
@danscMax danscMax released this 15 Jun 16:37
v0.2.1
6c8f6dc

Security & portability hardening on top of v0.2.0.

  • Secrets no longer pass via the command line: provider tokens and the opencode apiKey are fed to the binding scripts over STDIN (Windows argv is world-readable via Win32_Process). spawn_streamed gains an stdin-capable variant; -TokenStdin / -KeyStdin.
  • Manifest paths are machine-independent: engines.json / stack.json use {{SCRIPTS_ROOT}} and {{USERPROFILE}} placeholders, expanded by the executors and the backend (SCRIPTS_ROOT is exported to spawned scripts). Absolute paths still work.
  • Binding scripts (Manage-Provider/Connect-Router/Setup-Router/Manage-OpenCode-Provider/Manage-Engine) vendored into the repo for version history.
  • Removed a dead duplicate engine entry (router-glm).

Windows x64 build attached.

Assets 3
Loading