v0.1.0

Changelog

• 2aa2656 Add GPG backend for master key storage
• 2eb595a Add MCP server with output scrubbing
• 447a42c Add MIT license
• 036054d Add README with usage and security overview
• 2d80865 Add TTY guard to block AI agents from accessing secrets
• 06f0645 Add Touch ID gated keychain with Swift helper
• c7d00e7 Add agent config auto-discovery and better init/status UX
• d62777b Add per-project vaults, auto-regen, remove command, safety checks, and tests
• 1480545 Add process tree detection and layered confirmation guard
• c7990ab Add run, diff commands, CI workflow, and goreleaser config
• 3bd714b Allow keychain access without password prompt for MCP server
• 60ca6a0 Always store keychain entries with -A flag to avoid password prompts
• 3f385a9 Build ghostenv-mcp in release and include in brew formula
• 4b30035 Fix --force reinit: destroy old vault and create fresh
• 077fdd3 Fix keychain store/load mismatch on macOS
• e0efca9 Fix release: gitignore ghostenv-keychain binary, use go.mod version
• 9e3b7f3 Human mode injects all secrets silently, policy is agent-only
• 6ab2c67 Initial commit: ghostenv CLI
• 0db0900 Move master key from disk to OS keychain
• 1ddb559 Reliability fixes: atomic saves, path canonicalization, keychain cleanup
• ab49f20 Remove MCP server, make CLI agent-aware
• b241509 Replace TTY check with confirmation code prompt
• 074e431 Rewrite README with agent integration docs and updated UX
• edebc5f Scrub base64, hex, and URL-encoded secrets from command output
• 8bb4f2c Simplify macOS auth: process tree + Touch ID only, no clipboard
• 398ccc6 Update README with new commands and install instructions
• 5f4eaa3 Use clipboard-based confirmation to resist PTY spoofing
• 039b6d3 Use personal access token for homebrew tap publishing
• 20dc9a8 flake
• 05d66bf v0.2.0: allowlist policy, per-secret scoping, single binary