v1.9.41

asheshgoplani/agent-deckv1.9.41May 27, 2026by github-actions[bot]

AI Summary

Focuses on security hardening by implementing SHA-256 verification for downloads, enforcing non-loopback bind authentication, and adding checksums for the install script.

Key Highlights

SHA-256 verification before deploy
Enforce SSH host-key stance
install.sh checksum implementation
Refuse unauthenticated non-loopback bind
Token-gate terminal bridge

New Features

Security hardening (checksums, auth, verification)
SSH host-key enforcement

Full Release Notes

## Agent Deck v1.9.41

Terminal session manager for AI coding agents.

### Installation

**Homebrew (recommended):**
```bash
brew install asheshgoplani/tap/agent-deck
```

**Quick Install:**
```bash
curl -fsSL https://raw.githubusercontent.com/asheshgoplani/agent-deck/main/install.sh | bash
```

**Go Install:**
```bash
go install github.com/asheshgoplani/agent-deck/cmd/agent-deck@v1.9.41
```

## Changelog
* 320ba9ddd30b81b2feb14ee718fc7a29e7fcda8c chore(release): v1.9.41 — security hardening (SHA-256 verify, non-loopback bind auth, install.sh checksum)
* 1cf808b603f9a657afaa8e3ced03bd576e369ce5 fix(remote): verify SHA-256 before deploy + enforce SSH host-key stance (security hardening) (#1207)
* 50bf56d886d23c95f3e4ee3f6fc58894f3f1cf38 fix(security): install.sh checksum + RemoveAll containment + secret-via-env + shell-quote spawn args (#1210)
* a5ef0ddf29120e9a31da88a74e26c15bf51bfb88 fix(web): refuse unauthenticated non-loopback bind + token-gate terminal bridge (security) (#1209)

---

**Full Changelog**: https://github.com/asheshgoplani/agent-deck/compare/v1.9.40...v1.9.41