v0.12.0 — Codex hook + CEL when + rate limiter + env + coverage + Discord

[0.12.0] - 2026-08-15

Added

• Codex CLI hook — agentgate install-codex-hook wires AgentGate into OpenAI Codex CLI as BeforeTool. Tool map (shell→Bash, apply_patch→Edit) keeps policies portable.
• CEL-lite when conditions — rules can carry a small expression gating match on event fields:

  rules:
    - id: deny-rm-elsewhere
      match: {tool: Bash, command_regex: 'rm -rf.*'}
      action: deny
      when: 'event.cwd != "/srv"'

  Supports == != in not-in > < >= <=, and or not, parens, literals.
• Per-rule token-bucket rate limiter — rate_limit: {capacity: 5, refill_per_sec: 0.1}. DENY rules bypass.
• Multi-environment policy manager — agentgate env add|list|show|use|remove|active for dev/staging/prod.
• agentgate coverage — reports dead rules + uncovered tools. --fail-under 80 for CI.
• Discord notify — AGENTGATE_DISCORD_WEBHOOK; precedence: Telegram > Discord > Slack > file.

Stats

• 206 tests (was 189)
• ruff 0 errors
• verify.sh 10/10 ✓