v0.3.1

What's new

Added

• Linux and WSL support. Worker registers as a systemd --user service when available, with an XDG autostart .desktop fallback. On WSL without systemd the SessionStart hook starts the worker per session. Data directory: ~/.local/share/token-goat/.
• macOS support (untested). Worker registers as a LaunchAgent at ~/Library/LaunchAgents/com.dfkhelper.token-goat-worker.plist. Data directory: ~/Library/Application Support/dfk-helper/token-goat/.
• PyPI Trusted Publishing. Publish workflow uses OIDC — no long-lived API tokens stored as repo secrets.
• README What gets installed? and Security, privacy, and uninstall sections — every file, hook, autostart entry, scheduled task, and data path the installer writes, and how each is reversed.
• README badges for PyPI version and CI status.
• Lefthook git hooks for local lint and test parity with CI.

Changed

• Data directory namespace renamed from DFK Helper LLC to dfk-helper for cross-platform path hygiene. A reinstall recreates the index at the new path; the old directory can be removed by hand.
• CI slimmed to Python 3.13 on Windows. The package still declares support for 3.11–3.13.
• README rewritten with a before/after comparison table and stat callouts.

Fixed

• Python 3.13 null-byte path handling updated in paths.py and tests.
• Three Windows-runner CI test failures resolved (temp-dir project detection, CRLF in markdown parser, null-byte guard).
• token-goat stats bar-scale and share-% now use separate denominators so a single dominant kind no longer flattens the rest of the chart.

Security

• Input validation hardened in paths.py — no rel-path can escape the data directory under any caller.

Removed

• Legacy tokenwise launcher binaries removed during install/uninstall.