v0.2.2

What's Changed

Fixes

• Fix TUI confirm forms ignoring the answer by @bartdegoede in #16
• Test what TUI flows do, not just what they draw by @bartdegoede in #19

Documentation

• Re-record the demo for v0.2 by @bartdegoede in #17
• Add a security policy; point the cask at toolshed.run by @bartdegoede in #18

Full Changelog: v0.2.1...v0.2.2

v0.2.1

What's Changed

Documentation

• Split the docs into pages, for GitHub and toolshed.run by @bartdegoede in #15

Dependencies

• build(deps): bump actions/setup-node from 6 to 7 in the actions group by @dependabot[bot] in #14

Full Changelog: v0.2.0...v0.2.1

v0.2.0

What's Changed

New features

• Add toolshed import by @bartdegoede in #9
• Keep remote servers' tokens in the keychain, in Claude Code and Codex by @bartdegoede in #11
• Add an import screen to the TUI by @bartdegoede in #12

Fixes

• Treat Codex as a first-class client by @bartdegoede in #10

Documentation

• Move agent instructions to AGENTS.md by @bartdegoede in #13

Full Changelog: v0.1.3...v0.2.0

v0.1.3

What's Changed

Security

• Pin npx/uvx packages and review registry changes before re-installing by @bartdegoede in #6

New features

• Add toolshed doctor by @bartdegoede in #7
• Add toolshed secret set and shell completions by @bartdegoede in #8

Full Changelog: v0.1.2...v0.1.3

v0.1.2

Changelog

• 238792b Merge pull request #1 from bartdegoede/deps-upgrade
• 3d2c224 Merge pull request #2 from bartdegoede/fix-agent-safety
• f7ba455 Merge pull request #3 from bartdegoede/dependabot/go_modules/go-deps-bb5de9d0f2
• 67b06ac Merge pull request #4 from bartdegoede/dependabot/github_actions/actions-b066982fa4
• ebe043e Merge pull request #5 from bartdegoede/prepare-v0.1.2
• 4780d09 Prepare v0.1.2: retract v0.1.0-v0.1.1, require Go 1.26
• 05491ea Require approval for agent-added tools; fix scope, rollback and crash bugs
• b27a696 build(deps): bump the actions group with 5 updates
• 1c095f7 build(deps): bump the go-deps group across 1 directory with 2 updates
• c8ae6b3 deps: upgrade modules, add Dependabot and govulncheck

v0.1.1

Warning

Don't use this version; upgrade to v0.1.2. In v0.1.1, toolshed mcp let an agent replace an existing tool with a command of its choosing, which was then started with that tool's secrets from the keyring. v0.1.2 refuses that and requires your approval before running anything an agent adds. v0.1.1 is retracted in go.mod.

---

Changelog

• bbc048a release: use plain .Env template for tap token