v0.2.0

What's new

• spillscan undo — restores originals from .bak files. Dry-run by default; --write to apply. Lines appended to a session after the scrub are kept; files changed by something else are left untouched. (#6)
• Fix: repeat redact --write no longer clobbers the first backup. Previously a second run overwrote .bak with already-redacted content, losing the original; it now appends to the existing backup. (#6)
• Wider Claude Code coverage — scan and redact now include large tool outputs spilled to tool-results/ files and set-aside transcripts named *.jsonl.superseded-<timestamp>, which a *.jsonl glob missed. (#5)
• MCP serverInfo.version now reports the real build version. (#7)

Docs & site

• Credit for the compound echo …; env; … incident to anthropics/claude-code#80153; copy aligned with current deny-rule splitting docs. (#3)
• Landing redesign and CLI/README polish. (#1, #2)

Install: see README — binaries for linux/darwin/windows × amd64/arm64, verify with checksums.txt.

Full diff: v0.1.0...v0.2.0

v0.1.0

Changelog

• d5c1180 feat: spillscan v0.1.0 — contamination survey for AI agent transcripts