OAuth for MCP connections, operator support PINs, and crypto hardening.

• FEATMCP OAuth/PKCE support — connect MCP servers behind OAuth without storing long-lived tokens.
• FEATSupport PIN system — agents can mint short-lived PINs that grant a single scoped support session.
• SECURITYHKDF derivation label hardened — session key derivation now binds protocol version and channel direction.
• FIXRelay reconnect on UDP timeout — sessions fall back to TURN cleanly instead of stalling on dead paths.

Stability patch for session replay and the dashboard terminal.

• FIXSession replay seeking — scrubbing to an arbitrary timestamp now reconstructs terminal state correctly.
• FIXDashboard memory leak in terminal view — detached xterm buffers are now released when a tab closes.
• PERF40% faster agent list load — agent metadata is now batched and streamed instead of fetched per row.

Fleet automation and time-scoped access control.

• FEATFleet runs with per-agent output — execute a command across a fleet and inspect stdout/stderr per agent.
• FEATACL time windows — grant access that is only valid inside defined schedules, enforced at session setup.
• BREAKINGConfig file format v2 — agent and relay configs migrate automatically; v1 files are no longer written.

Natural-language operations and signed recordings.

• FEATNLC natural-language commands — describe an operation in plain language and review the generated command before it runs.
• FEATSigned session recordings — every recording is signed at capture time so tampering is detectable on playback.
• SECURITYReplay-window LRU hardening — nonce tracking survives bursts without evicting entries inside the validity window.

TucDesk goes mobile.

• FEATiOS + Android apps — full session access, approvals, and push notifications from your phone.
• FEATAddress book — organize agents into named groups with per-group connection defaults.
• FIXTURN credential refresh — long-lived relayed sessions renew credentials before expiry instead of dropping.