v0.43.0

Install

GUI (macOS) — brew install --cask dinstein/agenthub/agenthub-gui
installs the app and the CLI together, ready to launch. Or download
the .dmg, which contains the CLI too: the app is ad-hoc signed but
not notarized, so on first launch right-click → Open, or run
xattr -cr /Applications/AgentHub.app. The cask clears that flag for
you — its pinned sha256 is what vouches for the download instead.

GUI (Windows, experimental) — download the .zip for your
architecture (amd64 or arm64), unzip anywhere, and keep
agenthub-gui.exe and agenthub.exe in the same folder. These
binaries are not code-signed: SmartScreen will warn on first
run (More info → Run anyway). The Microsoft Edge WebView2 runtime
is required; Windows 11 already has it, and most Windows 10
machines receive it through Edge. See the README.txt inside the zip
for details. The Windows support cross-compiles and is unit-tested
but has never run on a real Windows machine — treat surprises as
expected and report them.

CLI, without Homebrew (macOS + Linux) — one command, and the
same command updates:

curl -fsSL https://raw.githubusercontent.com/dinstein/agent-hub/main/scripts/install.sh | sh

It needs no Xcode Command Line Tools (brew does), installs into
~/.local/bin unless --prefix says otherwise, and verifies the
download against the sha256 this release pins. Take this path or
Homebrew, not both: each puts a binary where it believes it is the
only owner.

CLI only, by hand — download the .tar.gz for your platform and
put agenthub somewhere on your $PATH.

Verify downloads against checksums-*.txt.

What's Changed

• manual: replace the --skill flag with an agenthub manual command by @dinstein in #306

Full Changelog: v0.42.0...v0.43.0

v0.42.0

Install

GUI (macOS) — brew install --cask dinstein/agenthub/agenthub-gui
installs the app and the CLI together, ready to launch. Or download
the .dmg, which contains the CLI too: the app is ad-hoc signed but
not notarized, so on first launch right-click → Open, or run
xattr -cr /Applications/AgentHub.app. The cask clears that flag for
you — its pinned sha256 is what vouches for the download instead.

GUI (Windows, experimental) — download the .zip for your
architecture (amd64 or arm64), unzip anywhere, and keep
agenthub-gui.exe and agenthub.exe in the same folder. These
binaries are not code-signed: SmartScreen will warn on first
run (More info → Run anyway). The Microsoft Edge WebView2 runtime
is required; Windows 11 already has it, and most Windows 10
machines receive it through Edge. See the README.txt inside the zip
for details. The Windows support cross-compiles and is unit-tested
but has never run on a real Windows machine — treat surprises as
expected and report them.

CLI, without Homebrew (macOS + Linux) — one command, and the
same command updates:

curl -fsSL https://raw.githubusercontent.com/dinstein/agent-hub/main/scripts/install.sh | sh

It needs no Xcode Command Line Tools (brew does), installs into
~/.local/bin unless --prefix says otherwise, and verifies the
download against the sha256 this release pins. Take this path or
Homebrew, not both: each puts a binary where it believes it is the
only owner.

CLI only, by hand — download the .tar.gz for your platform and
put agenthub somewhere on your $PATH.

Verify downloads against checksums-*.txt.

What's Changed

• skill-flag: hand out the agenthub skill from the binary (--skill) by @dinstein in #305

Full Changelog: v0.41.0...v0.42.0

v0.41.0

Install

GUI (macOS) — brew install --cask dinstein/agenthub/agenthub-gui
installs the app and the CLI together, ready to launch. Or download
the .dmg, which contains the CLI too: the app is ad-hoc signed but
not notarized, so on first launch right-click → Open, or run
xattr -cr /Applications/AgentHub.app. The cask clears that flag for
you — its pinned sha256 is what vouches for the download instead.

GUI (Windows, experimental) — download the .zip for your
architecture (amd64 or arm64), unzip anywhere, and keep
agenthub-gui.exe and agenthub.exe in the same folder. These
binaries are not code-signed: SmartScreen will warn on first
run (More info → Run anyway). The Microsoft Edge WebView2 runtime
is required; Windows 11 already has it, and most Windows 10
machines receive it through Edge. See the README.txt inside the zip
for details. The Windows support cross-compiles and is unit-tested
but has never run on a real Windows machine — treat surprises as
expected and report them.

CLI, without Homebrew (macOS + Linux) — one command, and the
same command updates:

curl -fsSL https://raw.githubusercontent.com/dinstein/agent-hub/main/scripts/install.sh | sh

It needs no Xcode Command Line Tools (brew does), installs into
~/.local/bin unless --prefix says otherwise, and verifies the
download against the sha256 this release pins. Take this path or
Homebrew, not both: each puts a binary where it believes it is the
only owner.

CLI only, by hand — download the .tar.gz for your platform and
put agenthub somewhere on your $PATH.

Verify downloads against checksums-*.txt.

What's Changed

• tidy-gateway: reconcile four stale comments and one doubled comparison by @dinstein in #292
• diag: an opt-in, loopback-only pprof endpoint by @dinstein in #291
• docs: fix verified user-facing staleness in README and guide by @dinstein in #293
• refactor(pipeline,gateway): drop dead InputSchema field and re-scan by @dinstein in #294
• fix: one reader for pasted client config, shared by the GUI preview and server add --stdin by @dinstein in #297
• refactor: one file lock for seven packages, not fourteen by @dinstein in #296
• fix(netguard): close the RFC 8215 local-use NAT64 SSRF gap by @dinstein in #298
• chore: tidy guards and pins by @dinstein in #295
• audit-skill-tidy: reconcile the security-audit skill with the tree by @dinstein in #300
• diag: refuse pprof requests DNS rebinding can forge by @dinstein in #299
• readme-polish: self-updating badge and a lighter front page by @dinstein in #302
• sec-audit-fixes: CRITICAL & HIGH findings from the security sweep by @dinstein in #301
• sec-audit-fixes-2: MEDIUM findings — container-escape guard + credential-in-logs by @dinstein in #304

Full Changelog: v0.40.3...v0.41.0

v0.40.3

Install

GUI (macOS) — brew install --cask dinstein/agenthub/agenthub-gui
installs the app and the CLI together, ready to launch. Or download
the .dmg, which contains the CLI too: the app is ad-hoc signed but
not notarized, so on first launch right-click → Open, or run
xattr -cr /Applications/AgentHub.app. The cask clears that flag for
you — its pinned sha256 is what vouches for the download instead.

GUI (Windows, experimental) — download the .zip for your
architecture (amd64 or arm64), unzip anywhere, and keep
agenthub-gui.exe and agenthub.exe in the same folder. These
binaries are not code-signed: SmartScreen will warn on first
run (More info → Run anyway). The Microsoft Edge WebView2 runtime
is required; Windows 11 already has it, and most Windows 10
machines receive it through Edge. See the README.txt inside the zip
for details. The Windows support cross-compiles and is unit-tested
but has never run on a real Windows machine — treat surprises as
expected and report them.

CLI, without Homebrew (macOS + Linux) — one command, and the
same command updates:

curl -fsSL https://raw.githubusercontent.com/dinstein/agent-hub/main/scripts/install.sh | sh

It needs no Xcode Command Line Tools (brew does), installs into
~/.local/bin unless --prefix says otherwise, and verifies the
download against the sha256 this release pins. Take this path or
Homebrew, not both: each puts a binary where it believes it is the
only owner.

CLI only, by hand — download the .tar.gz for your platform and
put agenthub somewhere on your $PATH.

Verify downloads against checksums-*.txt.

What's Changed

• tidy-downstream: one placeholder scanner, and two docs that outran the code by @dinstein in #269
• tidy-httpbridge: a nil request, a struct written twice, and one Accept rule by @dinstein in #270
• tidy-daemon: one logger, and a resolved source that is half-ignored by @dinstein in #271
• http-face-source: the resolved http face reaches the authenticator too by @dinstein in #272
• tidy-scope: an unreachable UNC guard, and a broken package doc by @dinstein in #273
• tidy-transport: one reverse-RPC reply for all three transports by @dinstein in #274
• tidy-shaping: one spelling for the budget's shared quantities by @dinstein in #275
• tidy-discovery: a package doc that rendered as a code block by @dinstein in #276
• tidy-citations: the last two citations that kept their punctuation by @dinstein in #277
• tidy-zh: reconcile the two halves of the scope picture by @dinstein in #278
• tidy-movedhint: a contract written down twice and enforced at a quarter width by @dinstein in #279
• tidy-frozencopy: seven frozen on-disk names, none of them pinned by @dinstein in #280
• tidy-calllog: one spelling for the name of a UTC partition by @dinstein in #281
• tidy-eventlog: Read stops asking twice whether a segment exists by @dinstein in #282
• tidy-session: eight citations whose closing punctuation opened the next line by @dinstein in #283
• tidy-router: one definition of the exposed-name charset by @dinstein in #284
• tidy-pipeline: a package doc justifying a scan that is gone by @dinstein in #285
• tidy-guard: why DialControl strips its own address, with a test by @dinstein in #286
• tidy-jsonl: Segments globs without filtering, and swallows a sibling stream by @dinstein in #287
• segments-filter: a stream's segment list stops at that stream by @dinstein in #288
• tidy-event: the merger's gen counter does not span a Flush by @dinstein in #289
• merger-gen: one generation sequence per merger, not per entry by @dinstein in #290

Full Changelog: v0.40.2...v0.40.3

v0.40.2

Install

GUI (macOS) — brew install --cask dinstein/agenthub/agenthub-gui
installs the app and the CLI together, ready to launch. Or download
the .dmg, which contains the CLI too: the app is ad-hoc signed but
not notarized, so on first launch right-click → Open, or run
xattr -cr /Applications/AgentHub.app. The cask clears that flag for
you — its pinned sha256 is what vouches for the download instead.

GUI (Windows, experimental) — download the .zip for your
architecture (amd64 or arm64), unzip anywhere, and keep
agenthub-gui.exe and agenthub.exe in the same folder. These
binaries are not code-signed: SmartScreen will warn on first
run (More info → Run anyway). The Microsoft Edge WebView2 runtime
is required; Windows 11 already has it, and most Windows 10
machines receive it through Edge. See the README.txt inside the zip
for details. The Windows support cross-compiles and is unit-tested
but has never run on a real Windows machine — treat surprises as
expected and report them.

CLI, without Homebrew (macOS + Linux) — one command, and the
same command updates:

curl -fsSL https://raw.githubusercontent.com/dinstein/agent-hub/main/scripts/install.sh | sh

It needs no Xcode Command Line Tools (brew does), installs into
~/.local/bin unless --prefix says otherwise, and verifies the
download against the sha256 this release pins. Take this path or
Homebrew, not both: each puts a binary where it believes it is the
only owner.

CLI only, by hand — download the .tar.gz for your platform and
put agenthub somewhere on your $PATH.

Verify downloads against checksums-*.txt.

What's Changed

• e2e: the concurrency axis — many calls, many clients, one hub by @dinstein in #258
• e2e: a loopback provider's credential is never renewed, and why by @dinstein in #259
• e2e: the upstream 2026 face, and every version the handshake negotiates by @dinstein in #260
• e2e: the HTTP face's protocol headers, including the verb with no body by @dinstein in #261
• e2e: the env block a stdio downstream is configured and keyed with by @dinstein in #262
• e2e: what --local does not launder, and where the line is really held by @dinstein in #263
• e2e: isolation that cannot be delivered is refused, never downgraded by @dinstein in #264
• e2e: the container limits an operator wrote are the ones docker is given by @dinstein in #265
• e2e: what a registry edit rebuilds, and what it must leave running by @dinstein in #266
• e2e: every fetch_result miss is the same bytes, whoever asks by @dinstein in #267
• e2e: which process a call runs on, counted rather than inferred by @dinstein in #268

Full Changelog: v0.40.1...v0.40.2

v0.40.1

Install

GUI (macOS) — brew install --cask dinstein/agenthub/agenthub-gui
installs the app and the CLI together, ready to launch. Or download
the .dmg, which contains the CLI too: the app is ad-hoc signed but
not notarized, so on first launch right-click → Open, or run
xattr -cr /Applications/AgentHub.app. The cask clears that flag for
you — its pinned sha256 is what vouches for the download instead.

GUI (Windows, experimental) — download the .zip for your
architecture (amd64 or arm64), unzip anywhere, and keep
agenthub-gui.exe and agenthub.exe in the same folder. These
binaries are not code-signed: SmartScreen will warn on first
run (More info → Run anyway). The Microsoft Edge WebView2 runtime
is required; Windows 11 already has it, and most Windows 10
machines receive it through Edge. See the README.txt inside the zip
for details. The Windows support cross-compiles and is unit-tested
but has never run on a real Windows machine — treat surprises as
expected and report them.

CLI, without Homebrew (macOS + Linux) — one command, and the
same command updates:

curl -fsSL https://raw.githubusercontent.com/dinstein/agent-hub/main/scripts/install.sh | sh

It needs no Xcode Command Line Tools (brew does), installs into
~/.local/bin unless --prefix says otherwise, and verifies the
download against the sha256 this release pins. Take this path or
Homebrew, not both: each puts a binary where it believes it is the
only owner.

CLI only, by hand — download the .tar.gz for your platform and
put agenthub somewhere on your $PATH.

Verify downloads against checksums-*.txt.

What's Changed

• tidy-harness: name both unproven depguard rules, not one by @dinstein in #233
• e2e: pin the data plane's refusals and its third discovery mode by @dinstein in #234
• tidy-cli: one spelling for the "no server" refusal by @dinstein in #235
• e2e: the profile layer refuses what it withholds, and what it withdrew by @dinstein in #236
• tidy-ctlapi: retire what the removed overlay protocol left behind by @dinstein in #237
• tidy-gateway: one spelling per fact, and an appendix that meant the opposite by @dinstein in #239
• fakemcp: script the protocol generation, and cover MCP 2026-07-28 over stdio by @dinstein in #238
• tidy-api/oauthflow: one body per resolution, not one per caller by @dinstein in #240
• tidy-docs: citations that name something the tree does not have by @dinstein in #241
• tidy-clients/skills: one scanner, one list by @dinstein in #242
• tidy-calllog: one stamp for a record's provenance by @dinstein in #243
• tidy-confops: one transaction for the per-field server setters by @dinstein in #244
• tidy-secrets: one sequence for a vault mutation by @dinstein in #245
• tidy-gateway: a description is not an input to executing a call by @dinstein in #246
• tidy-gui: what three removals left behind in the frontend by @dinstein in #247
• tidy-buildrules: one skip set for the four rules that walk the tree by @dinstein in #248
• tidy-flows: the write path names a function that does not exist by @dinstein in #249
• tidy-architecture: the result budget bounds an answer, not an error by @dinstein in #250
• tidy-skill: five commands stream NDJSON, not four by @dinstein in #251
• tidy-cli: the stable-code list is partial and the exit table is a word short by @dinstein in #252
• tidy-httpbridge: the package's front door describes a retired stance by @dinstein in #253
• tidy-catalog: the curated directory is mostly hosted now by @dinstein in #254
• tidy-gateway: the frozen gate chain is two gates, not four by @dinstein in #255
• tidy-tier: ToolTier has two readers, and the second is why {} matters by @dinstein in #256
• tidy-docs: three cross-package citations that no longer resolve by @dinstein in #257

Full Changelog: v0.40.0...v0.40.1

v0.40.0

Install

GUI (macOS) — brew install --cask dinstein/agenthub/agenthub-gui
installs the app and the CLI together, ready to launch. Or download
the .dmg, which contains the CLI too: the app is ad-hoc signed but
not notarized, so on first launch right-click → Open, or run
xattr -cr /Applications/AgentHub.app. The cask clears that flag for
you — its pinned sha256 is what vouches for the download instead.

GUI (Windows, experimental) — download the .zip for your
architecture (amd64 or arm64), unzip anywhere, and keep
agenthub-gui.exe and agenthub.exe in the same folder. These
binaries are not code-signed: SmartScreen will warn on first
run (More info → Run anyway). The Microsoft Edge WebView2 runtime
is required; Windows 11 already has it, and most Windows 10
machines receive it through Edge. See the README.txt inside the zip
for details. The Windows support cross-compiles and is unit-tested
but has never run on a real Windows machine — treat surprises as
expected and report them.

CLI, without Homebrew (macOS + Linux) — one command, and the
same command updates:

curl -fsSL https://raw.githubusercontent.com/dinstein/agent-hub/main/scripts/install.sh | sh

It needs no Xcode Command Line Tools (brew does), installs into
~/.local/bin unless --prefix says otherwise, and verifies the
download against the sha256 this release pins. Take this path or
Homebrew, not both: each puts a binary where it believes it is the
only owner.

CLI only, by hand — download the .tar.gz for your platform and
put agenthub somewhere on your $PATH.

Verify downloads against checksums-*.txt.

What's Changed

• tidy-foundation-io: collapse duplicated resolvers, retention and dead surface by @dinstein in #215
• tidy-mcp-registry: three kinds, one strings.Cut, one load sequence by @dinstein in #216
• tidy-dataplane-conn: one missing package, two stale promises by @dinstein in #217
• tidy-dataplane-expose: residue from the removed governance surface by @dinstein in #218
• tidy-config-scope: a duplicated status, and a layer that drops a field by @dinstein in #219
• tidy-config-external: a closed gap still documented as open by @dinstein in #220
• tidy-security: two seams documented as wired by @dinstein in #223
• e2e: cover the HTTP data plane, the selector intersection, and the credential paths by @dinstein in #221
• mcp2026-catalog: correct the 2026-07-28 conformance claim, and curate the catalog by @dinstein in #224
• tidy-controlplane: the proc-log reader names its fields with the constants by @dinstein in #225
• http-notify: give the HTTP face a server→client notification stream by @dinstein in #222
• catalog-hosted: five more hosted servers, each probed before it was written by @dinstein in #226
• e2e: cover the daemon-mediated write route the GUI uses by @dinstein in #227
• stream-fixes: version check on the GET stream, and a distinguishable setup failure by @dinstein in #229
• tidy-cli: DaemonDownf is reached, and has been for a long time by @dinstein in #230
• vaultlock: guard vault writes with a cross-process lock by @dinstein in #228
• tidy-gui: a promised confirmation that does not exist by @dinstein in #232
• e2e: cover the three observability streams by @dinstein in #231

Full Changelog: v0.39.0...v0.40.0

v0.39.0

Install

GUI (macOS) — brew install --cask dinstein/agenthub/agenthub-gui
installs the app and the CLI together, ready to launch. Or download
the .dmg, which contains the CLI too: the app is ad-hoc signed but
not notarized, so on first launch right-click → Open, or run
xattr -cr /Applications/AgentHub.app. The cask clears that flag for
you — its pinned sha256 is what vouches for the download instead.

GUI (Windows, experimental) — download the .zip for your
architecture (amd64 or arm64), unzip anywhere, and keep
agenthub-gui.exe and agenthub.exe in the same folder. These
binaries are not code-signed: SmartScreen will warn on first
run (More info → Run anyway). The Microsoft Edge WebView2 runtime
is required; Windows 11 already has it, and most Windows 10
machines receive it through Edge. See the README.txt inside the zip
for details. The Windows support cross-compiles and is unit-tested
but has never run on a real Windows machine — treat surprises as
expected and report them.

CLI, without Homebrew (macOS + Linux) — one command, and the
same command updates:

curl -fsSL https://raw.githubusercontent.com/dinstein/agent-hub/main/scripts/install.sh | sh

It needs no Xcode Command Line Tools (brew does), installs into
~/.local/bin unless --prefix says otherwise, and verifies the
download against the sha256 this release pins. Take this path or
Homebrew, not both: each puts a binary where it believes it is the
only owner.

CLI only, by hand — download the .tar.gz for your platform and
put agenthub somewhere on your $PATH.

Verify downloads against checksums-*.txt.

What's Changed

• calls: filter by agenthub itself, from one derivation of the target by @dinstein in #211
• windows: fill the two holes that made the CLI unusable there by @dinstein in #212
• planeauth: the data plane handed its gateways a weaker OAuth credential by @dinstein in #213
• refreshdocs: the refresh docs still described two processes by @dinstein in #214

Full Changelog: v0.38.1...v0.39.0

v0.38.1

Install

GUI (macOS) — brew install --cask dinstein/agenthub/agenthub-gui
installs the app and the CLI together, ready to launch. Or download
the .dmg, which contains the CLI too: the app is ad-hoc signed but
not notarized, so on first launch right-click → Open, or run
xattr -cr /Applications/AgentHub.app. The cask clears that flag for
you — its pinned sha256 is what vouches for the download instead.

GUI (Windows, experimental) — download the .zip for your
architecture (amd64 or arm64), unzip anywhere, and keep
agenthub-gui.exe and agenthub.exe in the same folder. These
binaries are not code-signed: SmartScreen will warn on first
run (More info → Run anyway). The Microsoft Edge WebView2 runtime
is required; Windows 11 already has it, and most Windows 10
machines receive it through Edge. See the README.txt inside the zip
for details. The Windows support cross-compiles and is unit-tested
but has never run on a real Windows machine — treat surprises as
expected and report them.

CLI, without Homebrew (macOS + Linux) — one command, and the
same command updates:

curl -fsSL https://raw.githubusercontent.com/dinstein/agent-hub/main/scripts/install.sh | sh

It needs no Xcode Command Line Tools (brew does), installs into
~/.local/bin unless --prefix says otherwise, and verifies the
download against the sha256 this release pins. Take this path or
Homebrew, not both: each puts a binary where it believes it is the
only owner.

CLI only, by hand — download the .tar.gz for your platform and
put agenthub somewhere on your $PATH.

Verify downloads against checksums-*.txt.

What's Changed

• noevents: drop Recent events from the server detail panel by @dinstein in #209
• gui: take the credential read off the Servers page's first paint by @dinstein in #210

Full Changelog: v0.38.0...v0.38.1

v0.38.0

Install

GUI (macOS) — brew install --cask dinstein/agenthub/agenthub-gui
installs the app and the CLI together, ready to launch. Or download
the .dmg, which contains the CLI too: the app is ad-hoc signed but
not notarized, so on first launch right-click → Open, or run
xattr -cr /Applications/AgentHub.app. The cask clears that flag for
you — its pinned sha256 is what vouches for the download instead.

GUI (Windows, experimental) — download the .zip for your
architecture (amd64 or arm64), unzip anywhere, and keep
agenthub-gui.exe and agenthub.exe in the same folder. These
binaries are not code-signed: SmartScreen will warn on first
run (More info → Run anyway). The Microsoft Edge WebView2 runtime
is required; Windows 11 already has it, and most Windows 10
machines receive it through Edge. See the README.txt inside the zip
for details. The Windows support cross-compiles and is unit-tested
but has never run on a real Windows machine — treat surprises as
expected and report them.

CLI, without Homebrew (macOS + Linux) — one command, and the
same command updates:

curl -fsSL https://raw.githubusercontent.com/dinstein/agent-hub/main/scripts/install.sh | sh

It needs no Xcode Command Line Tools (brew does), installs into
~/.local/bin unless --prefix says otherwise, and verifies the
download against the sha256 this release pins. Take this path or
Homebrew, not both: each puts a binary where it believes it is the
only owner.

CLI only, by hand — download the .tar.gz for your platform and
put agenthub somewhere on your $PATH.

Verify downloads against checksums-*.txt.

What's Changed

• security-boundaries: the stdio-proxy escalation path, and where it breaks by @dinstein in #199
• stub-clientinfo: clientInfo was on the wrong list by @dinstein in #200
• v2025-http: two conformance defects on the 2025 Streamable HTTP binding by @dinstein in #202
• toolexec: Tool.execution, the member only 2025-11-25 has by @dinstein in #203
• resultmeta: a tools/call result's _meta never left the hub by @dinstein in #204
• liststream: a hosted downstream's catalog was frozen at connect by @dinstein in #205
• sessionreq: a client that forgot its session header could 503 the HTTP face by @dinstein in #206
• streamcause: the stream give-up line blamed the server for our own session by @dinstein in #208

Full Changelog: v0.37.0...v0.38.0