Skip to content

v0.1.1

Choose a tag to compare

@tqdat410 tqdat410 released this 22 Mar 05:51
· 4 commits to main since this release

agentune v0.1.1

First stable release.

Security Hardening

  • Wrap mpv IPC JSON.parse in try/catch for malformed messages
  • PID validation guard in stop command
  • PID file written with restricted permissions (mode 0o600)
  • SQL injection prevention via table name allowlists in history store
  • MCP session cap (100) with 30min TTL and LRU eviction
  • Replace exec with spawn for URL opening (command injection fix)
  • Content-Security-Policy header on dashboard

Features

  • agentune doctor command for runtime dependency and daemon health checks
  • Process.exit() fix for CLI subcommands to prevent hanging

Install

npm install -g agentune
agentune doctor

Full changelog: v0.1.1-alpha.3...v0.1.1