Skip to content

v0.38.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Aug 07:04
· 201 commits to main since this release
v0.38.0
This tag was signed with the committer’s verified signature.
dinstein dinstein
GPG key ID: 6A924DA685869C24
Verified
Learn about vigilant mode.
c9e0633
This commit was signed with the committer’s verified signature.
dinstein dinstein
GPG key ID: 6A924DA685869C24
Verified
Learn about vigilant mode.

Install

GUI (macOS) — brew install --cask dinstein/agenthub/agenthub-gui
installs the app and the CLI together, ready to launch. Or download
the .dmg, which contains the CLI too: the app is ad-hoc signed but
not notarized, so on first launch right-click → Open, or run
xattr -cr /Applications/AgentHub.app. The cask clears that flag for
you — its pinned sha256 is what vouches for the download instead.

GUI (Windows, experimental) — download the .zip for your
architecture (amd64 or arm64), unzip anywhere, and keep
agenthub-gui.exe and agenthub.exe in the same folder. These
binaries are not code-signed: SmartScreen will warn on first
run (More info → Run anyway). The Microsoft Edge WebView2 runtime
is required; Windows 11 already has it, and most Windows 10
machines receive it through Edge. See the README.txt inside the zip
for details. The Windows support cross-compiles and is unit-tested
but has never run on a real Windows machine — treat surprises as
expected and report them.

CLI, without Homebrew (macOS + Linux) — one command, and the
same command updates:

curl -fsSL https://raw.githubusercontent.com/dinstein/agent-hub/main/scripts/install.sh | sh

It needs no Xcode Command Line Tools (brew does), installs into
~/.local/bin unless --prefix says otherwise, and verifies the
download against the sha256 this release pins. Take this path or
Homebrew, not both: each puts a binary where it believes it is the
only owner.

CLI only, by hand — download the .tar.gz for your platform and
put agenthub somewhere on your $PATH.

Verify downloads against checksums-*.txt.

What's Changed

  • security-boundaries: the stdio-proxy escalation path, and where it breaks by @dinstein in #199
  • stub-clientinfo: clientInfo was on the wrong list by @dinstein in #200
  • v2025-http: two conformance defects on the 2025 Streamable HTTP binding by @dinstein in #202
  • toolexec: Tool.execution, the member only 2025-11-25 has by @dinstein in #203
  • resultmeta: a tools/call result's _meta never left the hub by @dinstein in #204
  • liststream: a hosted downstream's catalog was frozen at connect by @dinstein in #205
  • sessionreq: a client that forgot its session header could 503 the HTTP face by @dinstein in #206
  • streamcause: the stream give-up line blamed the server for our own session by @dinstein in #208

Full Changelog: v0.37.0...v0.38.0

Contributors

dinstein
Assets 14
Loading