v0.2.0

Changelog

• db92740 Release v0.2.0: narrowed guard hook, e2e harness, Codex hook
• 274e823 add e2e harness: allow-listed bot writes, reads, waits; codex guard hook
• 172ab43 e2e review r1: waits start before the write; keyboard paging; guard and hook holes closed
• d18db5e e2e: stop live drafts, webapp-url platform, bot api entity names; pin hook to binary read list
• c6ed837 e2e: tests with an in-memory bot chat; docs for the harness and the codex guard
• 6c57a5b hook: ask only about what a call visibly does
• d8671c9 hook: ask when an e2e write names a chat outside e2e.allowed_chats
• b462f7b hook: decide on every codex shell shape and fail closed
• 0904813 hook: decide on every string a payload carries, the same on both hooks
• a5ff4cd hook: opaque execution asks when the call names a TGAC_ variable or a settings file
• 8135979 hook: read unknown-tool fields by role; metadata and plain text are data
• 09b2d1a hook: ssh remote paths are not read locally; 8 s deadline

v0.1.3

Changelog

• 9461146 Install with one command: Homebrew cask on macOS, install.sh on Linux
• 1008ace Quick start is one prompt for your agent; release builds two targets at a time

v0.1.2

Changelog

• 706634e Shorter README; details in docs/

v0.1.1

Changelog

• f933433 Docs: demo GIF recorded against a fictional account
• 3858cd2 Release 0.1.1
• 2caeba6 Release workflow: publish releases instead of drafts
• 19fb305 Timeouts and intervals accept seconds or a duration (300 or 5m)

v0.1.0

Changelog

• 11349ba Add CI and release workflows and goreleaser config
• 85a87d1 Add CLI commands
• 80c2d7f Add Claude Code PreToolUse guard (hook rules)
• 7e07ffa Add README, agent skill, SECURITY, CHANGELOG and MIT license
• c3316be Add golangci-lint config and fix its findings
• ec61562 Add gotd client wrapper, peer resolution and Telethon import
• bec6422 Add hook claude-pretooluse, hook install and hook uninstall
• 293ec80 Add messages wait-new
• 9364492 Add module scaffold, JSON envelope and data-dir config
• d837492 Add one-shot write grant to the guard and watcher test plumbing
• 7d5b11a Add read-only MTProto guard middleware
• f172434 Add read-only live e2e tests
• 20815fc Add watchers: watch reply, watch list, watch check
• 7749e66 Allow the read-only watch list and watch check in the hook
• e29ee46 Docs: hook rules and limits for the hardened guard
• 5951336 Docs: limits, ask behaviour, data-dir forms, --scan; LICENSE name
• 88f2b3a Docs: settings-write rule as narrowed by the replay
• 74644f3 Document the implemented watcher rules; add wait-new and dry-run e2e
• 9937aac Document the registry-held watcher binding; e2e dry run checks the entry
• ef818d1 Gate every account-changing command in the binary
• fa07fe2 Guard: exact read allowlist instead of name prefixes
• e1f9155 Hook: ask for unseen content only when decoded or linked to the account
• 75e09a7 Hook: catch read-only override forms and the watcher session variable
• 8b2f25c Hook: cut false positives found by replaying real tool calls
• 4a5495e Hook: deadline, safe script reads, fail-closed entries
• 7ac7762 Hook: follow the binary into interpreter code
• d6809ae Hook: guard the Monitor tool like Bash
• d0babf0 Hook: normalise word paths and catch reads of a parent of the data dir
• cbb6a40 Hook: protect Claude Code settings; check every string file tools write
• e1fab2e Hook: see through xargs, parallel and other wrappers; ask for unseen content
• afc21d3 Hook: treat message text and search patterns as data
• cb6c5af Mark dialogs listed from the archive as archived
• 99711a6 Move watcher trust into the registry and logs into the data dir
• cd2d0bd Never exit 0 with an error envelope
• 34cf933 Release 0.1.0
• c71b0f3 Scan recent groups for account-wide mentions
• 1c5d55b Wrap parse errors with %w (errorlint)
• b6031bc e2e: resolve +phone via contacts only