Skip to content

v0.2.0 — Hardened architecture, multi-provider auth, smart play

Choose a tag to compare

View all tags
@sriinnu sriinnu released this 29 Mar 15:56
· 63 commits to main since this release
v0.2.0
71941e9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Harmon v0.2.0

Major hardening, features, and distribution pipeline.

Install

npm install -g @sriinnu/harmon
harmon init

Or with Docker:

cp .env.example .env && docker compose up -d

What's new since v0.1.0

Architecture

  • Daemon decomposed: 2620 → 982 LOC across 14 focused modules
  • DaemonContext interface pattern for route isolation
  • 393 tests (up from 326)

Auth (all providers now seamless)

  • YouTube: full OAuth + PKCE with auto-refresh
  • Apple: JWT auto-regeneration from ES256 key material
  • harmon init interactive setup wizard

Features

  • Smart play: harmon smart-play "song name" — searches all connected providers, plays best match
  • Song recognition: harmon listen — AudD or Chromaprint (open-source, free)
  • YouTube mini player: http://localhost:17373/player/youtube
  • 20+ MCP tools for AI assistant integration

Security

  • Crypto key rotation with SHA-256 fingerprint detection
  • Loopback-only token embedding in player pages
  • Fetch timeout on external API calls
  • Concurrent session start mutex

Distribution

  • Standalone CLI bundle (79KB, no monorepo needed)
  • Docker multi-stage build + docker-compose.yml
  • npm publish pipeline (all 11 packages)
  • CI/CD: GitHub Actions for test + publish
Assets 2
Loading