v1.1.4

Changed

• Updated README example to use the aligned API namespace dbgov-cli.io/audit/v1
  (previously dbgov.io/audit/v1) following family namespace convention.
• Upgraded GitHub Actions dependencies in release workflow (checkout@v7,
  action-gh-release v3.0.1).

v1.1.3

Added

• Extended list JSON envelopes with an optional operation target field, preserving
  existing output when no target is supplied.

v1.1.2

Added

• Added shared printer target helpers for operation-target headers and JSON
  data.target injection, so family CLIs can show target awareness without
  duplicating output wrapping logic.

v1.1.1

Added

• Added credstore.IsPlaintextBackend and credstore.RequireSecureBackend so
  family CLIs share one fail-closed guard rejecting credential storage under a
  plaintext (plain-yaml) backend, instead of duplicating the check per CLI.

v1.1.0

v1.1.0

Added

• Added the shared trust package providing transport-neutral trust-on-first-use (TOFU) pin storage: a lock-guarded, permission-hardened pin store with first-use pinning, same-algorithm material-change detection, algorithm-change detection, and a non-mutating permission checker. Lets family CLIs pin SSH host keys and TLS certificate material on a common, audited store instead of reimplementing trust-on-first-use per tool.

v1.0.5

v1.0.5

Added

• Extended the shared redact package with low-false-positive opaque token, URL credential, Bearer authorization, and session identifier redaction.

Includes since the last GitHub Release

• v1.0.4: added the shared redact package with fail-safe structured key, secret flag, PEM private key, AWS access key, and JWT redaction for family CLI output and audit boundaries.

v1.0.3

fix(apperrors): classify Cobra MinimumNArgs usage errors as USAGE_ERROR (exit 1)

isCobraParserError did not recognize the requires at least N arg(s), only received M message emitted by cobra.MinimumNArgs / cobra.RangeArgs. Such usage errors fell through AsAppError to LOCAL_IO_ERROR (exit 6) instead of USAGE_ERROR (exit 1).

Preventive engine hardening: no CLI in the family currently uses those validators, so there was no live exposure — but the gap would have silently broken the exit-code contract the day any command adopted them.

• Add the requires at least prefix to the Cobra-parser-error heuristic.
• Table-driven test asserting both the error code and exit code 1.

v1.0.1

Fix: insecure config file permissions are now reported as an auth failure with an actionable 'chmod 600' hint (restores richer behavior as family canon; previously a generic local IO error after the ctx convergence). Install: go get github.com/JiangHe12/opskit-core@v1.0.1

v1.0.0

First stable release of opskit-core. Freezes the shared governance contract (R0-R3 risk model, multi allow-flag authorization, opt-in RBAC, append-only audit, pluggable credential backends, telemetry) for the JiangHe12 CLI family. Go semantic import versioning; install with: go get github.com/JiangHe12/opskit-core@v1.0.0