Repository navigation
v0.1.1
agentune v0.1.1
First stable release.
Security Hardening
- Wrap mpv IPC JSON.parse in try/catch for malformed messages
- PID validation guard in stop command
- PID file written with restricted permissions (mode 0o600)
- SQL injection prevention via table name allowlists in history store
- MCP session cap (100) with 30min TTL and LRU eviction
- Replace
execwithspawnfor URL opening (command injection fix) - Content-Security-Policy header on dashboard
Features
agentune doctorcommand for runtime dependency and daemon health checks- Process.exit() fix for CLI subcommands to prevent hanging
Install
npm install -g agentune
agentune doctorFull changelog: v0.1.1-alpha.3...v0.1.1