Skip to content

v0.1.0

Choose a tag to compare

@github-actions github-actions released this 11 Sep 22:55
· 19 commits to main since this release

Changelog

  • fb3aa13 chore(core): scaffold module, packages, lint config
  • a9e3290 ci(core): add GoReleaser, brew tap, scoop bucket, install script
  • 061e391 ci(core): add three-OS build and test workflow
  • 07332b1 ci(core): allow BSD-3 modernc.org/mathutil in license gate
  • e426d90 ci(core): allowlist test fixtures in gitleaks
  • 940d082 ci(core): allowlist tokenhush placeholders in gitleaks
  • 138792c ci(core): dependency license allowlist, SBOM and secret scan
  • 7749f3b ci(core): ignore historical gitleaks finding in policy_test.go
  • d27c077 ci(core): pin LF line endings for text sources
  • 72e3196 docs(core): finalize public README, config, plugin and security docs
  • 5cbbb2c feat(audit): add metadata-only SQLite audit store
  • 7604fc4 feat(cli): add doctor diagnostics
  • 978df5c feat(cli): add per-tool onboarding snippets
  • ba51e1b feat(cli): add status and audit views
  • b6a5f85 feat(config): add config with defaults, validation and upstreams override
  • 4766d9f feat(core): add CLI entrypoint with version and stub commands
  • fb57377 feat(core): display read-only Pro license status (isolated, fuzzed)
  • 8783cac feat(core): implement foreground run daemon assembly
  • 0a38268 feat(core): wire audit store into daemon and control API
  • e58ae7b feat(extension): add capability-graded content plugin interfaces
  • 7238cc7 feat(extension): add policy engine with fail-safe plugin handling
  • 7936279 feat(platform): add cross-platform config/data paths
  • fd664b7 feat(platform): add graded secret store with honest fallback
  • 71de49d feat(platform): select argv-safe CGO-free keyring backend (M0)
  • a353a53 feat(platform): stub service lifecycle (deferred past V1)
  • 7d1548b feat(protocol): add protocol-agnostic JSON leaf walker
  • 2f90405 feat(protocol): incremental SSE parse with sliding-window backfill
  • cb8a495 feat(proxy): add authenticated control API
  • 0f000d0 feat(proxy): add default upstream resolution + config override
  • 6770b37 feat(proxy): add upstream forwarding
  • 6116601 feat(proxy): dual-stack loopback listeners
  • 63d89bb feat(proxy): enforce Host allowlist and control-API auth
  • 53b2de4 feat(proxy): wire content plugin pipeline into request/response flow
  • 84fff72 feat(redact): add built-in detector plugins
  • 2d52a9d feat(redact): add deterministic placeholder and inbound-only backfill
  • 5b5f1f9 fix(platform): keep read-only test OS-agnostic before the override
  • 032a24b fix(platform): make read-only-prefix test separator-correct across OS
  • a710042 fix(release): embed the full git tag as the CLI version
  • 2fd0414 test(audit): complete HMAC chain tamper matrix
  • 7e313d8 test(cli): make fail-closed invariant deterministic across OSes
  • 0cc743a test(e2e): three-OS gateway smoke test
  • 21d944b test(extension): use non-secret-shaped fake literal in policy tests
  • 69391fd test(platform): cover cross-platform path and keyring edges
  • 216e168 test(security): lock hard invariants with named tests

Install: brew install --cask fregie/tap/tokenhush (macOS),
scoop install tokenhush (Windows), or the install.sh script (Linux).