Security release
This release addresses #98 / GHSA-mrhx-c7xc-m3w5.
- Requires Zod
^4.6.7; both Bun and npm lockfiles resolve Zod4.6.7. - Bounds untrusted playbooks, configuration, imports, and starter files before normalization and schema validation, including file size, array/object entries, nesting depth, logical nodes, and YAML alias/text expansion.
- Applies these protections across CLI input, recovery, persistence, and MCP-selected workspaces. Invalid inputs fail with bounded errors and remain unchanged.
- Stops installation when the latest-release lookup fails or redirects outside this repository.
Build and verification
The Linux x64/arm64, macOS x64/arm64, and Windows x64 binaries were built from commit 200e3490 in Release run #19. All five binary hashes were independently checked against the build artifacts. Both macOS signatures were verified in CI, and the native macOS arm64 binary reports 0.5.1.
Fresh verification passed 24 input-limit regression tests. The actual Linux x64 binary also passed normal CLI checks and rejected oversized and cyclic inputs through the CLI and both tested MCP methods; subsequent healthy MCP requests continued to work.
Each platform binary has a matching .sha256 file. install.sh.sha256 verifies the installer at the v0.5.1 tag. Users pinned to v0.5.0 should update their pin to v0.5.1.
See the v0.5.1 changelog for the input limits, recorded qualification, and other fixes.
Full Changelog: v0.5.0...v0.5.1