v0.5.2

What's Changed

• docs(readme): drop the leave --force first-run step (fixed by #156) by @masonwyatt23 in #159
• fix(security): session temp 0600 + dir fsync, race-safe history key, locked leave read (Tier-1) by @masonwyatt23 in #160
• docs(readme): drop npm 0.5.0 caveat now that 0.5.1 is live by @masonwyatt23 in #161
• fix(core): enforce 0700 on LOCUS_HOME at Store::open by @masonwyatt23 in #162
• docs: first-run benchmarks and install corrections by @masonwyatt23 in #165
• feat(cli): locus autopin suggest (L2) by @masonwyatt23 in #163
• fix(recovery): dead-broker hint says locus enter first by @masonwyatt23 in #176
• Add CodeQL, Scorecard, and coverage tooling by @masonwyatt23 in #178
• test(ci): phantom+locus merge-queue integration test by @masonwyatt23 in #164
• build: declare rust-version (MSRV) for cargo install path by @masonwyatt23 in #179
• perf(exec): drop the broker accept sleep (0.051 s to 0.004 s) by @masonwyatt23 in #180
• bridge: RQ-DEADCODE-locus by @masonwyatt23 in #184
• fix(loopback): allow plain HTTP only to exact 127.0.0.1 and ::1; refuse localhost by @masonwyatt23 in #187
• bridge: RQ-CLI-1 by @masonwyatt23 in #183
• fix(marketplace): refuse userinfo and redact query in index URL output by @masonwyatt23 in #185
• bridge: RQ-LOCUS-DOCTOR-FRESH by @masonwyatt23 in #198
• bridge: RQ-LOCUS-EXEC-PERF by @masonwyatt23 in #203
• feat(session): locus renew (opt-in, lifetime-bounded) + expired-pin leave/enter (RQ-LOCUS-PIN-TTL) by @masonwyatt23 in #193
• chore(release): 0.5.2 by @masonwyatt23 in #208

Full Changelog: v0.5.1...v0.5.2

v0.5.1

What's Changed

• release: v0.5.0 digests by @masonwyatt23 in #44
• fix: register anthropic/openai in adapter-registry catalog + drift guard by @masonwyatt23 in #45
• fix(hook): strict-mode (set -u) safe shell hook output by @masonwyatt23 in #46
• chore(license): standardize copyright holder to AshlrAI, Inc.; fix clippy on Rust 1.98 by @masonwyatt23 in #47
• chore(github): add issue templates by @masonwyatt23 in #48
• fix(npm): explain the cargo fallback, and fix the invalid cargo install --package command by @masonwyatt23 in #51
• docs(examples): executable multi-client recipes + comparison table by @masonwyatt23 in #52
• chore(github): add pull request template by @masonwyatt23 in #53
• docs: Locus for Phantom-enrolled repos (scope bindings) by @masonwyatt23 in #57
• ci: ~6x faster tests (optimized crypto deps in test profile) + cancel superseded PR runs by @masonwyatt23 in #58
• ci: cargo-nextest for test, invariants and MCP suites by @masonwyatt23 in #59
• docs: launch readiness — ecosystem section, contributing, PR template by @masonwyatt23 in #60
• fix(npm): locus/locus-mcp npm wrappers hang forever after npm i -g by @masonwyatt23 in #64
• ci: affected-only tests on PRs (nextest rdeps) by @masonwyatt23 in #68
• docs: make the agent smoke tests runnable and state the locus-mcp launch limit by @masonwyatt23 in #69
• feat(cli): locus mcp --supervised serves the pinned binding's provider tools by @masonwyatt23 in #71
• Honest readiness and whoami when the control capability isn't exported by @masonwyatt23 in #72
• fix(mcp): negotiate protocol version; honest messages when the plain entry can't see the pin by @masonwyatt23 in #73
• docs: correct stale MCP, CLI and layout claims in design and reference docs by @masonwyatt23 in #74
• release: v0.5.1 (with the npm quickstart -> enter fix) by @masonwyatt23 in #75
• fix(cli): stale-pin recovery in enter/status/agent report; no panic on closed stdout by @masonwyatt23 in #76
• docs(changelog): add #76 to 0.5.1 by @masonwyatt23 in #77
• docs: shell completion install guide, Homebrew completions, Codex config snippet by @masonwyatt23 in #80
• release: ship a .sha256 per archive and verify it before publishing by @masonwyatt23 in #79
• docs: measured wrong-client credential reachability (with not-a-sandbox caveat) by @masonwyatt23 in #78
• setup: say how to get provider tools (locus mcp --supervised) by @masonwyatt23 in #81
• Name the next step in expired-session and workspace-allowlist errors by @masonwyatt23 in #82
• Bash prompt hook, watch interval floor, complete help groups, honest unknown-alias pin requests by @masonwyatt23 in #83
• docs(readme): front-door rewrite with demo GIF by @masonwyatt23 in #65
• Return errors for malformed Unicode TTL values by @masonwyatt23 in #70
• docs: Phantom integration drop-in, hub rename, design proposals (replaces #55) by @masonwyatt23 in #84
• feat: onboard wizard + community adapter marketplace (replaces #56) by @masonwyatt23 in #85
• release: 0.5.1 changelog dated, include onboarding and marketplace by @masonwyatt23 in #86
• fix: root npm installs work for other users; locus-mcp --version; quick-start and MCP docs by @masonwyatt23 in #87
• docs(readme): don't claim npm 0.5.1 is published; warn off npm 0.5.0 by @masonwyatt23 in #88
• docs: fix broken onboarding link and local path in PLAN by @masonwyatt23 in #89
• feat(setup): Gemini CLI client support by @masonwyatt23 in #91
• cli: name the stale-pin recovery on every control command; doctor reports a malformed binding instead of aborting by @masonwyatt23 in #93
• release: roll Unreleased into 0.5.1 changelog by @masonwyatt23 in #95
• docs: sync agent-facing docs with main (onboard, supervised MCP, Gemini, request_pin) by @masonwyatt23 in #94
• cli/mcp: JSON errors under --json; locus-mcp answers unparseable input with -32700; warn on workspace aliases with no binding by @masonwyatt23 in #97
• fix(cli): make unresolved phm: credential refs visible in doctor and exec by @masonwyatt23 in #98
• test: isolate env-mutating tests, make force-leave failure root-proof, cut 25s of sleeps by @masonwyatt23 in #104
• fix: scope pending-approval readiness to the pinned binding by @masonwyatt23 in #96
• fix(mcp,cli): locus://doctor reports a malformed binding; bounded reveal probe; framed parse errors by @masonwyatt23 in #102
• fix: refuse undeclared tool args, -32602 for unknown tools, duration --timeout, no 10s stale-pin wait by @masonwyatt23 in #99
• fix(cli,mcp): engagement init creates nothing on conflict; workspace --json; errors name the next step by @masonwyatt23 in #103
• test(cli): pin agent-facing doc facts to the CLI, MCP catalog and setup clients by @masonwyatt23 in #101
• docs: say phm: refs do not resolve with Phantom Secrets 0.7.9 by @masonwyatt23 in #100
• fix(cli,mcp): closed control-tool schemas, bounded mint TTLs, provider typo warning, setup --json by @masonwyatt23 in #106
• fix(cli): stale-pin hints name a real binding, hook hints follow $SHELL, bounded approve TTL, clearer watch output by @masonwyatt23 in #109
• fix(cli): binding add refuses to replace an existing alias without --force; show/rm suggest aliases by @masonwyatt23 in #108
• fix(cli,mcp): exec exit codes tell not-found from failure; unstartable children audited and cleaned up; control-tool type errors by @masonwyatt23 in #105
• fix(mcp,core): request_pin/enter_hint suggest the mistyped alias; tighter typo threshold by @masonwyatt23 in #110
• fix(cli): exec/run/ci run refuse an option in the command position by @masonwyatt23 in #111
• fix(cli,core): workspace and binding writes never follow a symlink; duration overflows refused instead of panicking by @masonwyatt23 in #107
• fix(cli): events with a no-match filter names the ops/bindings in the log by @masonwyatt23 in #112
• fix(mcp,core): mistyped control tool/argument names the nearest match; unpinned error says locus enter by @masonwyatt23 in #113
• ci(release): build both macOS targets in one job, so a tag waits on one macOS slot by @masonwyatt23 in #92
• docs: post-quantum readiness notes and classical-only crypto check by @masonwyatt23 in #114
• fix(cli): --json usage errors print one JSON line; events --limit by @masonwyatt23 in #115
• docs: audit note on provider base URLs and model gateways by @masonwyatt23 in #116
• docs: set a gateway URL inside locus exec's isolated environment by @masonwyatt23 in #117
• docs(readme): link gateway base-URL note and PQ readiness note by @masonwyatt23 in #118
• chore(release): roll Unreleased into 0.5.1 by @masonwyatt23 in #119
• test: pin that gateway and proxy env vars never reach the isolated child by @masonwyatt23 in #120
• feat: opt-in session budget caps (max_actions, max_minutes), off by default by @masonwyatt23 in #121
• feat: opt-in signed, value-free credential injection audit (off by default) by @masonwyatt23 in #122
• feat(exec): opt-in gateway base URL for the isolated child, off by default by @masonwyatt23 in #123
• feat(core): doctor --fix core module, dry run by default (unwired) by @masonwyatt23 in #124
• fix(security): dashboard opens the plain URL, never ?token= by @masonwyatt23 in #125
• docs: using Locus with Phantom by @masonwyatt23 in #126
• feat(exec): opt-in [exec] inherit_env for the isolated child (exact names; key names only as phm_ placeholders) by @masonwyatt23 in ...

v0.5.0

What's Changed

• release: v0.4.0 digests by @masonwyatt23 in #41
• feat: hub MT drop-in, signed registry manifests, transport hardening, MT conformance by @masonwyatt23 in #42
• release: v0.5.0 by @masonwyatt23 in #43

Full Changelog: v0.4.0...v0.5.0

v0.4.0

What's Changed

• release: v0.3.0 digests (Homebrew formula + checklist) by @masonwyatt23 in #35
• fix(locus-core): phantom probe honors LOCUS_PHANTOM_PROJECT + parses bulleted phantom list output by @masonwyatt23 in #36
• feat: leave --force recovery, policy-aware catalog + read_only call-time deny, doctor polish by @masonwyatt23 in #37
• docs: mark v0.3.0 npm publish complete by @masonwyatt23 in #38
• feat: multi-tenant remote multiplexor, Anthropic/OpenAI adapters, locus switch by @masonwyatt23 in #39
• release: v0.4.0 by @masonwyatt23 in #40

Full Changelog: v0.3.0...v0.4.0

v0.3.0

What's Changed

• fix: fail closed on credential refs and workspace policy by @masonwyatt23 in #2
• fix: publish Locus v0.2.0 Homebrew checksum by @masonwyatt23 in #4
• feat: dual-control UX, sandbox workers, verify session by @masonwyatt23 in #5
• feat: partial dual-control notify for second principal by @masonwyatt23 in #6
• feat: harden top adapter upstream MCP recipes by @masonwyatt23 in #7
• sync: hub drop-in LOCUS_ENFORCE pre-mutate + scrubbed mint env by @masonwyatt23 in #8
• docs: mark hub Locus gate PRs landed on GOALS M4 by @masonwyatt23 in #9
• feat: integrate approval authority and sandbox readiness by @masonwyatt23 in #10
• test: composite top-adapter upstream recipes + exclusive catalog by @masonwyatt23 in #11
• feat: locus watch session heartbeat for hub (M5) by @masonwyatt23 in #13
• feat: audit export webhook sink (M5 SIEM partial) by @masonwyatt23 in #12
• sync: hub drop-in firm config.locus.enforce + runTask call sites by @masonwyatt23 in #14
• feat: adapter registry v0 (catalog list/verify + signed roadmap) by @masonwyatt23 in #16
• feat: streamable-HTTP-lite MCP polish (M5 partial) by @masonwyatt23 in #17
• feat: multi-client dogfood install probe (M3) by @masonwyatt23 in #15
• docs: update GOALS M4 for hub firm profile + session mint landings by @masonwyatt23 in #18
• feat: Linux worker sandbox partial (bwrap / path) — M5 by @masonwyatt23 in #20
• sync: hub drop-in locus.firm → enforce (hub #258) by @masonwyatt23 in #19
• docs: mark hub #256/#257 session mint paths done by @masonwyatt23 in #21
• docs: multi-account dogfood playbook + pin walk script (M3) by @masonwyatt23 in #22
• fix: stabilize supervisor identity test under CI load by @masonwyatt23 in #27
• feat(locus-mcp): Mcp-Session-Id for streamable HTTP by @masonwyatt23 in #25
• feat: opt-in sandbox network deny for workers by @masonwyatt23 in #26
• feat: ed25519 adapter registry signatures (+ HMAC backcompat) by @masonwyatt23 in #23
• feat: multi-message SSE + GET /mcp/sse session ticks (M5 partial) by @masonwyatt23 in #24
• test(e2e): feature-detect HTTP MCP session + SSE probes by @masonwyatt23 in #28
• feat: dual-IDE dogfood matrix without secrets (M3) by @masonwyatt23 in #29
• feat: production adapter trust store under ~/.locus/trust/ by @masonwyatt23 in #32
• sync: hub drop-in watch/verify session heartbeat (hub #273) by @masonwyatt23 in #30
• feat(locus-mcp): cross-process Mcp-Session-Id resume (file-backed) by @masonwyatt23 in #31
• feat: cross-process pin-swap anchoring, hardened setup, TTL, client add, Grok/Claude wiring by @masonwyatt23 in #33
• release: v0.3.0 by @masonwyatt23 in #34

Full Changelog: v0.2.0...v0.3.0

v0.2.0

What's Changed

• ci: add explicit Hub verification contract by @masonwyatt23 in #1

New Contributors

• @masonwyatt23 made their first contribution in #1

Full Changelog: v0.1.1...v0.2.0

v0.1.1

Full Changelog: v0.1.0...v0.1.1

v0.1.0

Full Changelog: https://github.com/ashlrai/locus/commits/v0.1.0