v0.31.0

Install: npm i -g @stroq/cli@0.31.0, or npx @stroq/cli@latest init. Every change, with the reasons, is in the changelog.

Added

• stroq inspect reads the code of a folder someone sent you. It points at text run as code when it was fetched or decoded, code hidden far to the right of a line, code named as a font or an image, scripts and Makefile recipes that fetch into a shell, config files a tool runs by itself, and instruction files that tell an agent to fetch and run something. These are places to read, not verdicts, and they do not change the exit code. --json carries them as code, codeNotRead and codeFilesRead.
• The hook makes the same reading once in a session. The first time an agent runs git or the project's code in a folder holding something of the kind, Stroq asks first (ask-foreign-folder). A question counts as answered when the host reports that the command ran. It cannot lift a refusal. Codex and Windsurf hooks cannot ask, so there it is a refusal until you run stroq trust --folder.
• stroq trust --folder <dir> stops the question for what a folder holds now; a change to one of those files, or anything new, asks again. The state gate refuses it through an agent's shell.
• Stroq and a sandbox: what a hook does, what isolation does, and why a repository you did not write belongs behind walls.

Changed

• stroq inspect is on the first screen of stroq --help.
• stroq inspect no longer says "Open it. Stroq enforces the rest from inside the session." When it finds nothing, it says that this does not make the folder safe, and it names what it did not read.

Fixed

• The card counted Stroq's own Cursor hooks as something the folder runs. stroq init writes failClosed beside the command, and the card compared the command with that field. Only the fields init writes, with its values, are left aside now; a hook with any other field still counts.
• The card knows the hook lines stroq init writes on Windows for Cursor, Codex and Antigravity, which have no quotes and may use 8.3 names. It resolves both paths first, so a project's own file still counts.
• stroq sent no longer reports keys as sent to a local address whose path holds the word environ, such as curl http://localhost:8080/environ (#295).
• The console shows the CLI's version in its sidebar instead of a number written into it (#293).

Thanks

• @Nari-Ab (Nariman Abdikarim) for the Windows hook lines of the card (#294, merged through #296), the sent fix (#295) and the console version (#293).