v0.2.1
What's changed
Security
- #238 Replace pickle with JSON for broker persistent cache
- #283 Fix path traversal, TOCTOU race conditions, orphaned WAL files
- #300 Fix doctor env disclosure, reply exception handling, SQL injection
- #336 Encrypt existing plaintext DB when SYMERASEME_ENCRYPT_DB=1
- #344 Fix encrypted DB silently discards all writes
Fixes
- #310 Broker fallback, consent timing, IMAP errors, doctor redaction
- #318 CliResult envelope, env var redaction, scheduler escaping
- #270 SIGTERM handler recursion, Windows temp dir
- #328 LLM PII consent, OAuth2 CSRF, --version flag, logging level
Refactoring
- #271 Extract repository layer (campaigns, dashboard, events, inbox, replies)
- #259 Extract batch, config, execution, planning modules
- #311 Migrate render_error to CliResult
Performance
- #312 Meta-only YAML parse on cold-cache filter path
- #344 Replace single IMAP fetch with ranged fetch
- #336 Reduce PBKDF2 iterations
Features
Documentation
Dependencies
- #285 Bump trufflehog 3.95.3 → 3.95.5
Full Changelog: v0.2.0...v0.2.1