v0.6.0

What's Changed

• fix(proxy): scope phm-token substitution to safe locations (audit F9) by @MasonStation in #34
• fix(audit): batched low-severity cleanup (F11, F12, F13, F14, F15) by @MasonStation in #35
• fix(cli): Windows final-mile cleanup — clipboard auto-clear + hook docs (closes #9, #10) by @MasonStation in #44
• feat(install): standalone curl/irm one-liner installers by @MasonStation in #45
• fix(install): wire ~/.bashrc on Windows for Git Bash / Claude Code by @MasonStation in #46
• feat(cli): add phantom completion <shell> for shell completions by @SAY-5 in #47
• feat(list): add --json flag to phantom list by @mvanhorn in #48
• feat: stdin/sync filters + MCP plaintext refusal + named-secret header injection + check --staged .env scan by @masonwyatt23 in #49
• feat(core): preserve quotes/indent/export prefix when phantom-tokenizing .env by @masonwyatt23 in #50
• docs: refresh after PRs #46–#50 (counts, new flags, full MCP tool list) by @masonwyatt23 in #51
• feat: UX polish + multi-project init + cheap security wins by @masonwyatt23 in #52
• feat(init): parallel --all with progress bar (--jobs/-j flag) by @masonwyatt23 in #58
• feat(export): --json emits plaintext to stdout (gated by --allow-plaintext) by @masonwyatt23 in #57
• feat(doctor): show install source, vault backend, audit status, Argon2 params, MCP wiring by @masonwyatt23 in #56
• feat(cli): phantom audit show/tail/path for the JSONL audit log by @masonwyatt23 in #59
• docs: refresh after PR #52 (multi-client setup, init --all, audit log) by @masonwyatt23 in #53
• docs: per-client setup pages + sync/login explainers by @masonwyatt23 in #55
• ci: run --ignored OS-keychain tests on each platform (non-blocking) by @masonwyatt23 in #54
• docs: threat model (assets, actors, mitigations, known gaps) by @masonwyatt23 in #60
• feat(audit): HMAC-SHA256 chain for tamper-evident logs + phantom audit verify by @masonwyatt23 in #62
• feat(proxy): stream token replacement for text/json/form bodies by @masonwyatt23 in #61
• feat(import): --from doppler|infisical|dotenvx|1password|env by @masonwyatt23 in #64
• feat: phantom mcp serve bundles MCP server into main binary by @masonwyatt23 in #65
• docs: refresh for PRs #52–#64 (audit, import, streaming, threat model, doctor) by @masonwyatt23 in #66

New Contributors

• @SAY-5 made their first contribution in #47
• @mvanhorn made their first contribution in #48
• @masonwyatt23 made their first contribution in #49

Full Changelog: v0.5.1...v0.6.0