pzzacode 0.2.9

Security

• The device agent requires a per-launch bearer token on every request and on the terminal WebSocket; only /health is open. Local tools such as the MCP server read the token from a private file in the agent's state directory.
• Requests with a non-loopback Host header are rejected (DNS-rebinding protection), and the wildcard CORS policy is replaced by an allowlist of the app's own origins.
• Remote (SSH) file operations are bounded to the remote user's home directory, and ssh/gpg/cloud keys and agent credential files are refused on every file endpoint.
• Pasted images are stored in a private per-user directory with random names. OSC 52 clipboard writes from terminal output are off by default (opt-in in Settings). The app verifies it is talking to the agent it launched.

Sessions and workspaces

• The code editor roots at a remote session's live directory and edits that device's files over SSH.
• Move a tile to a workspace from its toolbar, or by dragging it onto a workspace tab.

Agent usage

• A 30-day spend trend plus today, yesterday and 30-day cost and token totals, available instantly.

Remote desktop

• Provisioning supports headless devices (virtual monitor).

Other

• The devices dropdown is wider so session titles are readable.
• The PZZA_SERVER_HOST environment variable replaces PZZA_DEVBOX_HOST.