Release v0.5.0 · ylcn91/agentctl

What's Changed

Strict daemon schema enforcement — All RPC messages are now validated by Zod before reaching handlers. Previously, messages that failed schema validation but had a type field were passed through raw, bypassing field validation. Malformed payloads now receive an error response and are dropped.
Purge safety tightened — validatePurgePath now rejects the hub root directory itself (~/.agentctl), only allowing paths strictly under it. Previously rm -rf on the hub root was permitted.

Verification persistence mismatch — VerificationView was reading from verification-results.json with key results, but council-store writes to council-verifications.json with key verifications. UI now reads from the correct file and key.
LLM timeout timer leak — The timeout timer in createAccountCaller is now cleared after Promise.race resolves, preventing stale proc.kill() calls on already-exited processes.
Missing RPC schemas — Added Zod schemas for council_verify, council_history, and query_activity to DaemonMessageSchema. These were previously handled but never schema-validated.

Added timeoutMs?: number to CouncilConfig in types.ts, HandlerContext in handler-types.ts, and DaemonOpts in server.ts to match the Zod config schema and handler usage.

Regression test for hub-root purge rejection
Daemon-backed health command path coverage (socket present + empty fallback)
Schema validation tests for council_verify, council_history, query_activity (accept/reject cases)
Updated unknown-rpc-type test to match new strict validator error format

Full Changelog: v0.4.0...v0.5.0