v0.9.5

Changelog

• ef5e713: docs(readme): renumber post-0.9.4 roadmap under 0.9.x, not 0.10.x (@MicheleColella)
• 2393db8: docs(readme): rewrite Quick start as a complete, ordered onboarding path (@MicheleColella)
• 76feedc: test: end-to-end integration tests against a real Git server (v0.9.5) (@MicheleColella)

v0.9.4

Changelog

• eecc197: feat: ssh-agent-style key-unlock daemon for passphrase-free Claude Code UX (v0.9.4) (@MicheleColella)
• 030b9c7: fix(mcp): remove envault_add from MCP tools; block add/set via Bash (@MicheleColella)

v0.9.3

Changelog

• 09237ba: ci: bump actions to Node 24 majors (checkout v7, setup-go v6, goreleaser-action v7) (@MicheleColella)
• 342f528: ci: drop Go 1.24 from test matrix (go.mod requires 1.25+) (@MicheleColella)
• def868c: feat: embedded MCP server for Claude Code (v0.9.3) (@MicheleColella)
• d43c29a: refactor: extract pluginInstallHint constant (single source of truth) (@MicheleColella)

v0.9.2

Changelog

• 6019dff: docs(readme): status table — add v0.9.2 shipped, v0.9.3 next (@MicheleColella)
• d0deb25: docs(readme): use plugin@marketplace install form (envault@envault) (@MicheleColella)
• 6035687: feat(dist): v0.9.2 — Claude Code plugin & marketplace (@MicheleColella)
• 54ad6de: feat(infra): v0.9.1 — clean uninstall & doctor (@MicheleColella)
• 7a8ac77: fix(hook): remove empty .claude/settings.json + dir on uninstall (@MicheleColella)
• d2b61cc: fix(uninstall): remove the .envault/ vault dir too, undoing init (@MicheleColella)
• 4abcbbd: fix(version): report module version for go install; README coherence + LICENSE (@MicheleColella)
• 160ffbd: refactor(claude): drop in-CLI Claude integration — plugin-only (@MicheleColella)

v0.9.0

Changelog

• 57ba1c1: chore(test): fix Go test count in run-tests.sh + update CI Go versions (Michele Colella michelecolella0@gmail.com)
• 7ba4681: chore(test): update test report (277 passing) (Michele Colella michelecolella0@gmail.com)
• fd4ff33: chore: add .gitignore for Go and macOS artifacts (Michele Colella michelecolella0@gmail.com)
• f79587d: chore: initial commit with .gitignore (Michele Colella michelecolella0@gmail.com)
• c85f781: chore: move exclusions to .git/info/exclude (Michele Colella michelecolella0@gmail.com)
• 2ba88dd: chore: remove graphify integration from project (Michele Colella michelecolella0@gmail.com)
• 56d8eec: ci: add GitHub Actions CI workflow and golangci-lint (v0.1.1) (Michele Colella michelecolella0@gmail.com)
• 4378ce3: ci: remove redundant tests.yml (ci.yml now covers all branches) (Michele Colella michelecolella0@gmail.com)
• c7fbf56: ci: upgrade golangci-lint-action to v9 (Node 24 support) (Michele Colella michelecolella0@gmail.com)
• 00214f8: docs: add README with project overview, crypto design, and roadmap (Michele Colella michelecolella0@gmail.com)
• 12f3e35: docs: refresh README for current commands and at-rest key encryption (Michele Colella michelecolella0@gmail.com)
• ee19104: feat(agent): v0.8.0 — Claude Code & agent integration (output masking + JSON mode) (Michele Colella michelecolella0@gmail.com)
• 6073b12: feat(agent): v0.8.3 — Agent-Native CLI & Natural Language Interface (Michele Colella michelecolella0@gmail.com)
• 964db3e: feat(crypto): implement AES-256-GCM + X25519 envelope encryption (v0.2.0) (Michele Colella michelecolella0@gmail.com)
• ba00f91: feat(crypto): v0.5.1 — recipient re-wrap & rotate command (Michele Colella michelecolella0@gmail.com)
• 055d70d: feat(dist): v0.9.0 — installer & cross-platform signed releases (Michele Colella michelecolella0@gmail.com)
• 7a96c29: feat(git): v0.5.0 — push / pull Git sync commands (Michele Colella michelecolella0@gmail.com)
• a8965d4: feat(git): v0.5.2 — secret-level conflict resolution on pull (Michele Colella michelecolella0@gmail.com)
• 6830897: feat(hook): v0.7.0 — Git pre-commit hook for leak prevention (Michele Colella michelecolella0@gmail.com)
• 45ceca9: feat(hook): v0.8.1 — project-local opt-in, backup, vault guard, CLAUDE.md injection (Michele Colella michelecolella0@gmail.com)
• 7c32199: feat(import): v0.4.0 — secret & data import (Michele Colella michelecolella0@gmail.com)
• 7661199: feat(key): add key delete subcommand to remove keypair from OS keychain (Michele Colella michelecolella0@gmail.com)
• fe47697: feat(key): v0.3.3 — key delete cleans recipients, make install/uninstall (Michele Colella michelecolella0@gmail.com)
• 77ae569: feat(keychain): encrypt private keys at rest under a passphrase (Michele Colella michelecolella0@gmail.com)
• c4dc9b7: feat(keychain): implement envault key new with OS keychain sealing (v0.3.1) (Michele Colella michelecolella0@gmail.com)
• 5dbd08d: feat(recipients): implement v0.3.2 recipients management (Michele Colella michelecolella0@gmail.com)
• 39142c9: feat(run): v0.6.0 — runtime secret injection via envault run (Michele Colella michelecolella0@gmail.com)
• 8307b57: feat(run): v0.6.1 — subset injection and interactive exec (Michele Colella michelecolella0@gmail.com)
• adbeb4b: feat(scan): v0.7.1 — secret detection rules, entropy heuristic & .envaultignore (Michele Colella michelecolella0@gmail.com)
• 0d5fd13: feat(secrets): v0.4.1 — add, set, rm single-secret edit commands (Michele Colella michelecolella0@gmail.com)
• 9000411: feat(secrets): v0.4.2 — list, cat, export commands (Michele Colella michelecolella0@gmail.com)
• ab98560: feat(shield): v0.8.2 — AI Privacy Shield (Michele Colella michelecolella0@gmail.com)
• 742335b: feat(vault): implement envault init with git remote detection (v0.3.0) (Michele Colella michelecolella0@gmail.com)
• dd033fb: feat: scaffold Go module and CLI skeleton (v0.1.0) (Michele Colella michelecolella0@gmail.com)
• 1045c8b: fix(agent-check): move os.Exit out of runAgentCheck to avoid killing test runner (Michele Colella michelecolella0@gmail.com)
• 3145070: fix(audit): suppress errcheck on deferred Close in audit.go (Michele Colella michelecolella0@gmail.com)
• 8b7eaf2: fix(build): add -buildvcs=false to avoid git VCS error under sudo (Michele Colella michelecolella0@gmail.com)
• 9276bdc: fix(ci): pin golangci-lint to v2.12.2, fix v2 config schema and lint issues (Michele Colella michelecolella0@gmail.com)
• f530160: fix(ci): upgrade golangci-lint-action to v7 for golangci-lint v2 support (Michele Colella michelecolella0@gmail.com)
• 08ffb3e: fix(ci): use macos-14 runner to avoid dyld LC_UUID bug on macOS 15 (Michele Colella michelecolella0@gmail.com)
• 4bf6d07: fix(fmt): remove extra blank line in recipients.go (Michele Colella michelecolella0@gmail.com)
• ca54ed7: fix(git): suppress errcheck on read-only f.Close() in DetectOrigin (Michele Colella michelecolella0@gmail.com)
• 06b4bf2: fix(hook): replace input_replace with direct blocking in hook preuse (Michele Colella michelecolella0@gmail.com)
• ff4aa44: fix(hook): suppress gosec false positives in claudemd and backup path (Michele Colella michelecolella0@gmail.com)
• 3d688f9: fix(hook): use absolute binary path in Claude Code hook command (Michele Colella michelecolella0@gmail.com)
• b580682: fix(key): reject low-order X25519 public keys on import (Michele Colella michelecolella0@gmail.com)
• 2fde91b: fix(lint): check errcheck on Fprintln and file Close in recipients (Michele Colella michelecolella0@gmail.com)
• 3dc5ed3: fix(lint): gofmt pull_test and merge_test (Michele Colella michelecolella0@gmail.com)
• b926d2b: fix(lint): resolve gosec G204 and unused const in keychain package (Michele Colella michelecolella0@gmail.com)
• d03de88: fix(lint): staticcheck — fmt.Fprintf su Builder, rimuovi Sprintf inutile (Michele Colella michelecolella0@gmail.com)
• 315a601: fix(lint): suppress errcheck on stderr warning writes in cat/export (Michele Colella michelecolella0@gmail.com)
• 8b3abcc: fix(lint): suppress gosec G204/G306 in git subprocess helpers and test fixtures (Michele Colella michelecolella0@gmail.com)
• 11fb166: fix(make): friendly sudo hint on permission denied, fix uninstall single-shell, add test-install target (Michele Colella michelecolella0@gmail.com)
• 349e69e: fix(protect): suppress errcheck on deferred Close in protect.go (Michele Colella michelecolella0@gmail.com)
• c5c17c0: fix(security): address HIGH/MEDIUM findings from security review (Michele Colella michelecolella0@gmail.com)
• 2546b32: fix(test): replace hardcoded "main" branch with FETCH_HEAD in pull conflict test (Michele Colella michelecolella0@gmail.com)
• 25d867d: fix(vault): forward-compatible secrets store version handling (Michele Colella michelecolella0@gmail.com)
• 716bc95: refactor: improve package structure for scalability (Michele Colella michelecolella0@gmail.com)
• 6ac74a4: refactor: simplify and deduplicate per /simplify review (Michele Colella michelecolella0@gmail.com)
• 47a881b: style: fix golangci-lint warnings (errcheck, gosec, unused) (Michele Colella michelecolella0@gmail.com)
• a876da6: style: gofmt protect_test.go (Michele Colella michelecolella0@gmail.com)
• 44dfeb6: style: gofmt scan.go scan_test.go (Michele Colella michelecolella0@gmail.com)
• ffac4bf: style: gofmt scan_test.go (Michele Colella michelecolella0@gmail.com)
• 0c865c4: style: gofmt status.go and agent_check.go (Michele Colella michelecolella0@gmail.com)
• 3a97519: style: suppress remaining gosec G101 false positive in scan_test.go (Michele Colella michelecolella0@gmail.com)
• 04d6397: test(crypto): add test vectors, tamper tests, and fuzz suite (v0.2.1...