agent-deck

v1.9.60 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Developer Productivity

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ai-agent ai-agents ai-coding-assistant aider bubble-tea claude-code

+11 more

cli codex developer-tools discord gemini-cli go mcp productivity session-manager tmux tui

ReleasePort's take

Moderate signal

editorial:auto 1mo

The release adds a boundary‑aware, fail‑closed transcript‑path containment mechanism and cleans up stale SSH ControlMaster sockets.

Why it matters: Security severity scored 90; ensures transcript handling is isolated and prevents stalled SSH sessions from blocking remote fetches.

Summary

AI summary

Updates recommended, ui, and ssh across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Implements boundary‑aware, fail‑closed transcript-path containment. Implements boundary‑aware, fail‑closed transcript-path containment. Source: llm_adapter@2026-06-14 Confidence: high	—
Feature	Low	Adds ability to copy a code block from session output using Y. Adds ability to copy a code block from session output using Y. Source: llm_adapter@2026-06-14 Confidence: high	—
Bugfix
Bugfix	Medium	Sweeps stale ControlMaster SSH sockets to unblock remote fetch. Sweeps stale ControlMaster SSH sockets to unblock remote fetch. Source: llm_adapter@2026-06-14 Confidence: high	—
Bugfix	Medium	Prevents headless --no-tui from mutating existing sessions/groups. Prevents headless --no-tui from mutating existing sessions/groups. Source: llm_adapter@2026-06-14 Confidence: high	—
Bugfix	Medium	Ensures last session is properly terminated via targeted delete. Ensures last session is properly terminated via targeted delete. Source: llm_adapter@2026-06-14 Confidence: high	—

Full changelog

Agent Deck v1.9.60

Terminal session manager for AI coding agents.

Installation

Homebrew (recommended):

brew install asheshgoplani/tap/agent-deck

Quick Install:

curl -fsSL https://raw.githubusercontent.com/asheshgoplani/agent-deck/main/install.sh | bash

Go Install:

go install github.com/asheshgoplani/agent-deck/cmd/[email protected]

Changelog

e92d07c99105dbdacf38ed7327410b1532bd6d54 chore(release): v1.9.60
4882fde33db0914ce9b64be31d9f093e21063a82 chore(release): v1.9.60
55d3c04ac98b8980c03507c54094b52d8a718253 feat(ui): copy a code block from session output with Y (#1412) (#1440)
c0a4d109397c574c64e5e1a836c148cde47d4dca fix(security): boundary-aware, fail-closed transcript-path containment (#1435)
8506a3dae5e0bdba2f2385a7544b2e6163d6be64 fix(ssh): sweep stale ControlMaster sockets to unblock remote fetch (#1421) (#1442)
aa4f918b14b8575d9b21ac2d09c06a4b97711a77 fix(web): headless --no-tui can mutate pre-existing sessions/groups (#1397) (#1441)
c53fa98bd464b98eeb542847712f4b172e4855bd fix(worktree): finish last session via targeted delete (#1396) (#1439)

Full Changelog: https://github.com/asheshgoplani/agent-deck/compare/v1.9.59...v1.9.60

Security Fixes

fix(security): boundary-aware, fail-closed transcript-path containment (#1435)

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track agent-deck

Get notified when new releases ship.

About agent-deck

Terminal session manager for AI coding agents. One TUI for Claude, Gemini, OpenCode, Codex, and more.