v0.1.0

Changelog

• 11349ba Add CI and release workflows and goreleaser config
• 85a87d1 Add CLI commands
• 80c2d7f Add Claude Code PreToolUse guard (hook rules)
• 7e07ffa Add README, agent skill, SECURITY, CHANGELOG and MIT license
• c3316be Add golangci-lint config and fix its findings
• ec61562 Add gotd client wrapper, peer resolution and Telethon import
• bec6422 Add hook claude-pretooluse, hook install and hook uninstall
• 293ec80 Add messages wait-new
• 9364492 Add module scaffold, JSON envelope and data-dir config
• d837492 Add one-shot write grant to the guard and watcher test plumbing
• 7d5b11a Add read-only MTProto guard middleware
• f172434 Add read-only live e2e tests
• 20815fc Add watchers: watch reply, watch list, watch check
• 7749e66 Allow the read-only watch list and watch check in the hook
• e29ee46 Docs: hook rules and limits for the hardened guard
• 5951336 Docs: limits, ask behaviour, data-dir forms, --scan; LICENSE name
• 88f2b3a Docs: settings-write rule as narrowed by the replay
• 74644f3 Document the implemented watcher rules; add wait-new and dry-run e2e
• 9937aac Document the registry-held watcher binding; e2e dry run checks the entry
• ef818d1 Gate every account-changing command in the binary
• fa07fe2 Guard: exact read allowlist instead of name prefixes
• e1f9155 Hook: ask for unseen content only when decoded or linked to the account
• 75e09a7 Hook: catch read-only override forms and the watcher session variable
• 8b2f25c Hook: cut false positives found by replaying real tool calls
• 4a5495e Hook: deadline, safe script reads, fail-closed entries
• 7ac7762 Hook: follow the binary into interpreter code
• d6809ae Hook: guard the Monitor tool like Bash
• d0babf0 Hook: normalise word paths and catch reads of a parent of the data dir
• cbb6a40 Hook: protect Claude Code settings; check every string file tools write
• e1fab2e Hook: see through xargs, parallel and other wrappers; ask for unseen content
• afc21d3 Hook: treat message text and search patterns as data
• cb6c5af Mark dialogs listed from the archive as archived
• 99711a6 Move watcher trust into the registry and logs into the data dir
• cd2d0bd Never exit 0 with an error envelope
• 34cf933 Release 0.1.0
• c71b0f3 Scan recent groups for account-wide mentions
• 1c5d55b Wrap parse errors with %w (errorlint)
• b6031bc e2e: resolve +phone via contacts only