v3.0.1

What's Changed

• fix(hooks): escape grok deny reason as json by @SumonMSelim in #135

Full Changelog: v3.0.0...v3.0.1

v3.0.0

What's Changed

• fix(install): make settings.json merge atomic and order-preserving by @SumonMSelim in #88
• fix(hooks): block rm on $HOME and quoted root paths by @SumonMSelim in #89
• fix(install): keep installed-agent list across installs and upgrades by @SumonMSelim in #90
• fix(install): never delete user-owned instruction files on uninstall by @SumonMSelim in #91
• fix(install): require a terminal confirmation for agentguard disable by @SumonMSelim in #92
• fix(hooks): emit Cursor permission JSON on allow and deny by @SumonMSelim in #93
• fix(claude): tighten allow-list, hook Grep/Glob, use real settings keys by @SumonMSelim in #94
• fix(hooks): close self-edit bypasses and protect settings.local.json by @SumonMSelim in #95
• fix(hooks): close git global-option and push-target bypasses by @SumonMSelim in #96
• fix(hooks): widen system-install detection, allow container and venv installs by @SumonMSelim in #97
• fix(hooks): block more destructive forms: find -delete, mkfs, dd, chmod -R /, process substitution by @SumonMSelim in #98
• fix(hooks): widen .env read detection on the bash surface, allow templates by @SumonMSelim in #99
• fix(hooks): cover common credential stores, stop matching .env.example by @SumonMSelim in #100
• fix(hooks): fail closed when jq is missing or payload is invalid by @SumonMSelim in #101
• fix(install): record what claude install added so uninstall restores exactly by @SumonMSelim in #102
• feat(codex): install hooks and instructions under ~/.codex by @SumonMSelim in #103
• fix(hooks): use payload cwd for branch and disabled-dir checks by @SumonMSelim in #104
• fix(release): verify deb upgrades, stop injection, keep brew wrapper valid by @SumonMSelim in #105
• fix(hooks): log blocked calls and harden the audit log by @SumonMSelim in #106
• feat(cursor): add --user install, write and mcp gates, merge hooks.json by @SumonMSelim in #107
• feat(kiro): install kiro cli 3.x hooks file alongside 2.x agent config by @SumonMSelim in #108
• docs: fix drift between docs and current hooks, skills and packaging by @SumonMSelim in #109
• docs: say hooks exit 2 on internal errors in contributing guide by @SumonMSelim in #110
• test: add macos and shellcheck ci, install and bypass suites by @SumonMSelim in #111
• chore(cursor): remove unused legacy hooks.json template by @SumonMSelim in #113
• fix(hooks): close subshell, backtick, sudo path and credential bypasses by @SumonMSelim in #114
• refactor: drive installer from agent registry, share hook helpers by @SumonMSelim in #115
• feat(gemini): add gemini cli hooks and instruction file by @SumonMSelim in #116
• feat(copilot): add github copilot cli hooks and instruction file by @SumonMSelim in #117
• feat(windsurf): add windsurf cascade hooks and global rules by @SumonMSelim in #118
• docs: restructure readme with per-agent collapsible sections by @SumonMSelim in #119
• feat(antigravity): add antigravity cli hooks and global rules by @SumonMSelim in #120
• fix(install): keep backups made within the same second by @SumonMSelim in #127
• feat(cli): add agentguard log to read the audit logs by @SumonMSelim in #126
• fix(hooks): ignore harmless redirects in self-edit cd and var checks by @SumonMSelim in #128
• fix(hooks): close bypass forms found by the command audit by @SumonMSelim in #129
• feat(cli): add agentguard doctor to diagnose a broken install by @SumonMSelim in #130
• fix(hooks): stop block-env matching quoted search patterns as shell by @SumonMSelim in #133
• fix(hooks): stop self-edit hook blocking claude code worktree paths by @SumonMSelim in #134

Full Changelog: v2.1.4...v3.0.0

v2.1.4

What's Changed

• fix(hooks): honor leading cd target in block-main-branch branch check by @SumonMSelim in #57

Full Changelog: v2.1.3...v2.1.4

v2.1.3

What's Changed

• fix: remove invalid Write() permission deny rule for ~/.agentguard by @SumonMSelim in #56

Full Changelog: v2.1.2...v2.1.3

v2.1.2

What's Changed

• fix: reinstall tracked agents in do_upgrade, not formula post_install by @SumonMSelim in #55

Full Changelog: v2.1.1...v2.1.2

v2.1.1

What's Changed

• fix: make agentguard upgrade work for brew, deb, and git installs by @SumonMSelim in #52
• chore(release): bump version to 2.1.1 by @SumonMSelim in #53
• chore(release): revert manual version bump by @SumonMSelim in #54

Full Changelog: v2.1.0...v2.1.1

v2.1.0

What's Changed

• feat: add Grok support and deprecate direct ./install.sh usage by @SumonMSelim in #51

Full Changelog: v2.0.2...v2.1.0

v2.0.2

What's Changed

• fix(formula): drop bash dep, use /usr/bin/env bash in wrapper by @SumonMSelim in #50

Full Changelog: v2.0.1...v2.0.2

v2.0.1

What's Changed

• fix(formula): declare bash as build+runtime+test dep for analyser + wrapper by @SumonMSelim in #49

Full Changelog: v2.0.0...v2.0.1

v2.0.0

What's Changed

• fix(formula): use Formula[bash].opt_bin for keg-only bash dep resolution by @SumonMSelim in #48

Full Changelog: v1.9.0...v2.0.0