Skip to content

Tuoni 0.16.0

Agent File Browser, Unified Settings, Global Command Palette

Overview

Welcome to Tuoni 0.16.0! This release introduces a dedicated agent file browser, brings application and account preferences together in unified settings, adds a global command palette, and improves console history, terminal input, public APIs, security, and reliability.

Agent File Browser

The new agent file browser provides a dedicated workspace for navigating and managing remote files. Virtualized directory views remain responsive with large listings, while filtering, sorting, keyboard and multi-selection workflows, drag-and-drop uploads, downloads, moves, renames, deletion, and executable launch keep common file operations in one place. Downloaded files can also be inspected in an in-pane viewer.

See File Browser in the GUI guide for how it works, including how the tree replays what the server already knows and what happens when an agent is asleep.

Unified Settings

Browser, terminal, account, connection, server, plugin, shortcut, and advanced maintenance settings now share one searchable dialog. Settings are available globally through deep links, the command palette, and terminal commands, with live updates and safer import and export workflows.

See Settings for the dialog, its search, and the shortcut sheet.

Global Command Palette

Press Ctrl/Cmd+P or Ctrl/Cmd+K to search across the active server. The palette provides agent actions and quick access to application entities, settings, pages, themes, and recent activity, opening destinations as pages or in the side panel where appropriate.

The palette and the shortcut sheet are covered on the Settings page.

Windowed Console History and Safer Terminal Input

Consoles now open with a bounded history window and load older commands on demand, keeping large histories responsive without losing scroll-back access. The initial window is configurable from 50 to 1,000 commands, with retry feedback and an explicit Load all option.

See Terminal and Terminal Shortcuts for the console and its keys.

Terminal and batch workflows now preview serialized arguments before submission, group values enclosed in matching quotes, preserve nested command lines verbatim, and warn more clearly about malformed quotes. Console continuity also improves across navigation, retries, late events, shell transcripts, and scroll restoration.

Command and User API Improvements

New command v2 endpoints add zero-based pagination, repeatable multi-field sorting, lifecycle and inclusive time filters, agent filtering, and exact case-sensitive command-template filtering. Command responses now expose individual send attempts and distinguish SUCCEEDED from FAILED delivery attempts.

The user v2 API adds paged user listing, stable GUID-based management, authenticated self-service profile and password operations, permission metadata, and audit provenance. Existing v1 endpoints remain supported for compatibility.

API validation responses are also more actionable, identifying field-level problems and preserving the most relevant command-template configuration violation. Download responses for hosted files, payloads, command results, and HTTP listeners preserve UTF-8 filenames and include a safe ASCII fallback.

Security, Reliability, Command, and Listener Fixes

  • Hardened API proxy navigation, sandboxed proxied responses, and enforced same-origin WebSocket control connections
  • Closed prototype-pollution and executable plugin-state paths, bounded untrusted target data and output, and rejected unsafe server-supplied style values
  • Improved credential, identity, server-switch, command-history, and file-operation isolation between operators and server contexts
  • Updated affected client dependencies and raised declared security floors for key web packages
  • Fixed command completion cleanup for legitimate download result removals and corrected recursive script watcher shutdown reporting
  • Improved command and console retry behavior, stale-page handling, user workflows, and expanded listener editors
  • Fixed protection-value formatting in all Windows memory-layout command variants
  • Fixed DNS listener TXT request serialization falling through to A-record mode

Community

Our Discord Community is live! Join us to ask questions, share feedback, and connect with other Tuoni users.

For a complete list of changes, visit our GitHub release page.