What's Changed
- feat(windows): srt-win wfp verify — behavioral egress-block probe at initialize() by @ig-ant in #359
- feat(windows): per-session working-tree grant + full filesystem allow/deny under the sandbox user by @ig-ant in #351
- Add structured extract regex for masked credential files by @elhajjj in #326
- windows: preserve state.db as .bak on schema mismatch (was DROP TABLE) by @ig-ant in #364
- refactor(windows): runSrtWin param order + split runSrtWinJsonAllowFail by @ig-ant in #365
- refactor(windows)!: sandbox-user is the only mode (TS layer) by @ig-ant in #366
- Add network.tlsTerminate.extraCaCertPaths for site-local CA roots by @shawnm-anthropic in #368
- Add onExtractNoMatch option for credential file extract no-match behavior by @elhajjj in #333
- chore(srt-win): apply rustfmt (default config) crate-wide by @ig-ant in #369
- Add maskDuplicates option to also mask captured values outside regex matches by @elhajjj in #361
- Release v0.0.63 by @shawnm-anthropic in #370
Full Changelog: v0.0.62...v0.0.63
Contributors
elhajjj, shawnm-anthropic, and ig-ant