v0.4.3

What's Changed

• chore: release v0.4.1 by @eliothedeman in #293
• fix(sandbox): order Seatbelt rules by path specificity by @eliothedeman in #295
• chore: release v0.4.2 by @eliothedeman in #296
• feat(policy): support docstrings and source provenance by @eliothedeman in #297
• feat: deploy on push to main by @eliothedeman in #299
• deploy site 2 by @eliothedeman in #300
• Toolpath tracing v1 by @benbaarber in #298
• feat(policy): machine-readable policy.json with CLI CRUD commands by @eliothedeman in #303
• chore: release v0.4.3 by @eliothedeman in #305

Full Changelog: v0.4.1...v0.4.3

What's Changed

• chore: add curl | bash install script by @eliothedeman in #211
• chore: bump package versions to v0.3.6 by @eliothedeman in #213
• feat: fix some UX nits in TUI by @akesling in #212
• feat(policy): replace (default ...) with (use ...) + body-level effects by @eliothedeman in #215
• docs(policy): add v2 language specification by @eliothedeman in #227
• ci: auto-tag on merge to main by @eliothedeman in #229
• ci: adopt Release Please for automated releases by @eliothedeman in #230
• feat(policy): upgrade def to bind arbitrary expressions by @eliothedeman in #233
• feat(policy): enforce forward reference prohibition by @eliothedeman in #235
• feat(policy): adopt ctx.* namespace for observables by @eliothedeman in #234
• feat(policy): add agent invocation type and ctx.agent.name observable by @eliothedeman in #236
• feat(policy): add nullable ? accessors for dynamic ctx fields by @eliothedeman in #239
• feat(policy): validate non-overlapping sibling dimensions by @eliothedeman in #240
• feat(policy)!: derive sandbox constraints from decision tree by @eliothedeman in #243
• feat(policy): add mcp invocation type and enforce :ask context restriction by @eliothedeman in #241
• feat(policy): add eq predicate for when guards by @eliothedeman in #237
• feat(policy): add mcp invocation type and ctx.mcp.* observables by @eliothedeman in #242
• feat(policy): validate ctx references against versioned schema by @eliothedeman in #238
• feat: strawman site for Clash by @akesling in #244
• feat: Starlark policy DSL with pure-Starlark builders by @eliothedeman in #249
• docs(plugin): rewrite skills to match current CLI by @eliothedeman in #251
• feat(policy): replace decision tree with match tree IR by @eliothedeman in #253
• feat(policy): replace internal policies with user-defined merge by @eliothedeman in #259
• feat(cli): add clash uninstall command by @eliothedeman in #261
• docs: add migration guide for legacy formats to Starlark by @eliothedeman in #260
• feat(site): versioned documentation by @eliothedeman in #263
• refactor(starlark): unify sandbox args and move DSL to pure Starlark by @eliothedeman in #265
• chore: replace release-please with manual release flow by @eliothedeman in #266
• refactor(policy): unify compact and sort into Node::compact by @eliothedeman in #267
• refactor(starlark): consistent sandbox path API and tree display by @eliothedeman in #269
• chore: Remove auto-tag.yaml by @eliothedeman in #272
• feat(cli): add clash fmt command to format Starlark policy files by @eliothedeman in #271
• eliot/release site by @eliothedeman in #274
• refactor(sandbox): rename --policy/--profile flags to --sandbox by @eliothedeman in #275
• feat(shell): bash-compatible shell with per-command sandbox enforcement by @eliothedeman in #273
• chore: release v0.4.0 by @eliothedeman in #282
• feat: Vendor brush as crates within clash workspace by @eliothedeman in #283
• test(policy): add unit tests for policy eval and sandbox paths by @eliothedeman in #285
• refactor(policy): unify path resolution into PathResolver by @eliothedeman in #286
• refactor(display): deduplicate user-facing formatting patterns by @eliothedeman in #287
• refactor(settings): extract policy loader module by @eliothedeman in #289
• cleanup: ignore worktrees made by claude by @eliothedeman in #290
• feat(policy): compile-time sandbox validation and platform warnings by @eliothedeman in #288
• fix(starlark): compile deny rules into sandbox fs rules by @eliothedeman in #291
• fix: Base sandbox on macos now allows reading from root but not Users by @eliothedeman in #292
• chore: release v0.4.1 by @eliothedeman in #293
• fix(sandbox): order Seatbelt rules by path specificity by @eliothedeman in #295
• chore: release v0.4.2 by @eliothedeman in #296
• feat(policy): support docstrings and source provenance by @eliothedeman in #297
• feat: deploy on push to main by @eliothedeman in #299
• deploy site 2 by @eliothedeman in #300
• Toolpath tracing v1 by @benbaarber in #298
• feat(policy): machine-readable policy.json with CLI CRUD commands by @eliothedeman in #303
• chore: release v0.4.3 by @eliothedeman in #305

Full Changelog: v0.3.6...v0.4.3