Release Notes - Tuoni v0.16.0

✨ Highlights

Agent file browser - Added a dedicated file-management workspace with virtualized navigation, filtering, sorting, uploads, downloads, moves, renames, deletion, executable launch, and an in-pane file viewer.
Unified settings - Added a searchable settings dialog for browser preferences, account details, connections, server and plugin settings, shortcuts, and advanced maintenance, accessible globally, through deep links, the command palette, and terminal commands.
Global command palette - Added Ctrl/Cmd+P and Ctrl/Cmd+K search across the active server, with agent actions and side-panel or page navigation for application entities and settings.
Scalable console history - Consoles now open with a bounded, paged history window while retaining scroll-back loading, retry, and an explicit Load all option.
Safer terminal input - Added an inline argument preview, quote grouping, verbatim nested-command handling, and clearer warnings for malformed input.

Paged command search - Added v2 command endpoints with pagination, multi-field sorting, lifecycle and time filters, agent and template filters, and accurate successful-send state.
Eventful user APIs - Added v2 user listing and management by stable user GUID, authenticated self-service operations, permission metadata, and audit provenance while retaining the v1 APIs.

Unicode-safe downloads - Added UTF-8 filename support with a safe ASCII fallback for file, payload, command-result, and HTTP-listener downloads.
Actionable API errors - Added structured field-level validation responses and preserved the most relevant command-template configuration violation.
Download command completion - Fixed final result cleanup rejecting legitimate download result removals without metadata.
Script watcher shutdown - Fixed recursive script directory watchers reporting the wrong exception when closed.

Agent file browser - Added virtualized cross-platform directory navigation with filtering, sorting, keyboard and multi-selection workflows, drag-and-drop uploads and moves, command-state feedback, and downloaded-file viewing.
Unified settings - Added a searchable settings dialog for browser, terminal, account, connection, server, plugin, shortcut, and maintenance preferences, with deep links, live updates, and safe import and export.
Global command palette - Added Ctrl/Cmd+P and Ctrl/Cmd+K search across the active server, including agent actions, application entities, settings, pages, themes, and recent palette activity.
Windowed console history - Consoles initially load a configurable window of 50 to 1,000 commands, page older history on demand, preserve scroll position, report loading failures, and fall back to the v1 API when necessary.
Argument preview and quote grouping - Added a preview of serialized command arguments, grouped values enclosed in matching quotes by default, preserved nested command lines verbatim, and surfaced malformed-quote warnings in terminal and batch workflows.

Cross-origin isolation - Blocked unsafe document and frame navigation through the API proxy, sandboxed proxied responses, and enforced same-origin WebSocket control connections.
Untrusted data hardening - Prevented prototype-pollution execution paths, executable plugin-state persistence, unsafe target-data growth, and server-supplied style values that could trigger arbitrary browser requests.
Credential and identity isolation - Prevented logout reconnection races and previous-operator fleet exposure, redacted secret-like log values, and closed command-history and browser paths that could persist or reveal credentials.
Dependency security updates - Updated affected client packages and raised the declared security floors for key web dependencies.
Command and console continuity - Prevented stale pages and late events from reversing completed command state, improved retry behavior, preserved shell transcripts and scroll position, and bounded target-controlled output.
Server-switch safety - Prevented background authentication from replacing the server currently on screen and stopped file-operation batches when their captured server or agent context changed.
User and listener workflows - Fixed overlapping user cards, username encoding in API paths, stuck save state, and expanded listener editors that failed to use or scroll within the available panel.

🔒 Windows memory-layout output - Fixed protection-value formatting across the .NET DLL, .NET EXE, native x86 and x64, and shellcode variants of the memory-layout command.

DNS TXT request handling - Fixed DNS listener request serialization falling through from TXT mode to A mode.