Skip to content

Tuoni 0.15.0

macOS Agents, Scalable Topology, Universal Side Panel

Overview

Welcome to Tuoni 0.15.0! This release adds commercial macOS support for x86_64 and arm64, rebuilds the agent topology for larger deployments, introduces a universal side panel, expands server-side scripting, and improves server startup time and image size.

macOS Support

Tuoni now includes commercial x86_64 and arm64 agents for macOS, with platform-aware payload generation and native Mach-O dynamic library loading.

macOS agents can use HTTP, TCP, DNS, relay bind, and relay reverse listeners. The release also adds 16 command families for macOS, including filesystem operations, port scanning, reverse forwarding, SOCKS5, SSH operations, process information, and screenshots.

Linux and FreeBSD agents gain broader command and listener parity, including copy, move, timestomp, Jump-SSH, process information, SSH execution, SCP upload, and native HTTP, TCP, DNS, relay bind, and relay reverse transports.

Agent Topology and Side Panel

The agent topology has been rebuilt as a dedicated workspace with deterministic layouts, richer grouping and filtering, and more stable rendering for dense listener groups and sudden bursts of agents.

A new pinnable, resizable side panel can open any page alongside the current workspace, making it easier to inspect information without leaving the task in progress.

Tuoni Script Engine

The Tuoni Script Engine is now enabled by default. New scripts should import the tuoni_script_engine module; the previous tuoni module remains available for existing scripts but is deprecated.

The tuoni-script-engine-stubs package is available on PyPI for API documentation, type checking, and editor autocomplete.

Performance and Large Deployments

Server startup is faster through parallel plugin and script initialization and on-demand payload caching. Removing unused Java and Python libraries also reduces the server image by approximately 500 MB.

A new v2 agent endpoint adds pagination, filtering, and sorting for large deployments. Bulk endpoints can now deactivate, block, or restore many agents at once, and the client uses these endpoints for multi-agent operations.

Automatically generated HTTPS certificates now use the P-256 curve, significantly reducing certificate generation time.

Workflow and Reliability Improvements

  • Per-agent terminal state now persists across navigation, including client-side messages, command tracking, and history
  • Pasted commands now parse quoted values, lists, numbers, booleans, and empty arguments consistently
  • Bulk actions now report partial failures and unmatched kill requests
  • Payload type handling is more consistent across generation, terminal views, and launcher matching
  • Command result frames no longer interleave when execution units produce concurrent output
  • Commercial agent execution-unit pipe communication is more stable
  • BOF commands support both common BeaconIsAdmin import spellings
  • REST responses and the OpenAPI specification provide more complete command-send and endpoint information

Community

Our Discord Community is live! Join us to ask questions, share feedback, and connect with other Tuoni users.

For a complete list of changes, visit our GitHub release page.