azet-guard 0.2.0

Codex CLI support.

• azet-guard install --codex adds the hooks to ~/.codex/hooks.json (or --codex --project DIR for DIR/.codex/hooks.json); uninstall --codex removes only azet-guard's entries. Trust them once with /hooks in Codex.
• Under Codex, rules that ask for approval in Claude Code deny instead, because Codex PreToolUse has no ask decision and would otherwise run the tool.
• apply_patch edits get the same secret and protected-path checks as Claude Code's Write and Edit.
• Secrets in command output are redacted by replacing the result, since Codex hooks cannot rewrite tool output.
• azet-guard doctor lists Claude Code and Codex install locations.

Verified with codex-cli 0.162.1. Claude Code behaviour is unchanged.

Known vulnerabilities fixed in this release: none.
Install: pipx install azet-guard or uv tool install azet-guard.

azet-guard 0.1.0

First public release.

• PreToolUse / PostToolUse / UserPromptSubmit / Stop hooks for Claude Code.
• Deny rules: secrets on the command line, rm -rf of root or home, disk wipes, fork bombs, exfiltrating .env and key files, writing secrets into source files, writes to .git/, ~/.ssh/, /etc/.
• Ask rules: curl | sh, force-push to protected branches, reading .env and private keys, dumping the environment, git add .env, rm -rf *.
• Secrets in Bash output are redacted before the model sees them.
• Prompt-injection and pasted-secret warnings.
• "Tests pass" claims with no test run in the turn are sent back once.
• Append-only audit log at ~/.azet-guard/audit.jsonl (mode 600), secrets redacted.
• Policy files: ~/.azet-guard/policy.toml and per-repo .azet-guard.toml.

Known vulnerabilities fixed in this release: none.
Install: pipx install azet-guard or uv tool install azet-guard.