nodes.run shell wrapper removed — use exec host=node; trusted-proxy and node-command gating hardened.
Nodes & exec migration (breaking)
Shell on nodes
The duplicated nodes.run shell wrapper is removed from the CLI and the agent nodes tool. Node shell execution must go through:
exec host=node
Node-specific capabilities stay on nodes invoke and dedicated media/location/notify actions.
Gateway
- Trusted-proxy rejects mixed shared-token configurations; local-direct fallback requires the configured token
- Node commands stay disabled until pairing is approved — pairing alone is no longer sufficient
See the full GitHub release for node-event trust surface changes if you rely on notification-driven or node-triggered flows.