Core Runtime & Docker Orchestration: Production-ready stateless agent core designed to handle container operations, environment deployments, and Docker Compose stack setups.
Secure File Sandbox: Implemented directory isolation rooted at /var/lib/tug/apps with secure, restricted filesystem boundaries.
Interactive PTY Streaming: Bidirectional WebSocket tunnel for streaming real-time interactive terminal sessions and Docker container logs.
Enhanced CLI Commands: Added robust flags for easy maintenance:
--init / init to automatically register the VPS node and output a pairing URL.
--status / status to inspect daemon status, tokens, and active connections.
--disconnect / disconnect to unpair the agent and clear connection states.
--remove / remove to completely uninstall the agent and purge local systemd configuration.
Single Instance Guard: Added a PID lock system (/tmp/tug-agent.lock) that prevents multiple agent instances from running simultaneously.
CI/CD Build Matrix: Added GitHub Action workflows to cross-compile and publish release binaries for linux/amd64, linux/arm64, darwin/amd64, and darwin/arm64.
Changed
Zero-Config Default: Automatically defaults TUG_API_WS_URL to wss://api.tug.sh/ws/agents to prevent configuration clutter in agent.env files for standard users.
Secure Release Workflow: Upgraded GitHub Action releases to authenticate securely using GitHub App installation tokens instead of personal tokens.
Documentation: Restructured the README.md to include detailed CLI usage instructions, developer guidelines, and a Mermaid sequence diagram showing the handshake and PTY data flow.