v0.1.0
Changelog
- fb3aa13 chore(core): scaffold module, packages, lint config
- a9e3290 ci(core): add GoReleaser, brew tap, scoop bucket, install script
- 061e391 ci(core): add three-OS build and test workflow
- 07332b1 ci(core): allow BSD-3 modernc.org/mathutil in license gate
- e426d90 ci(core): allowlist test fixtures in gitleaks
- 940d082 ci(core): allowlist tokenhush placeholders in gitleaks
- 138792c ci(core): dependency license allowlist, SBOM and secret scan
- 7749f3b ci(core): ignore historical gitleaks finding in policy_test.go
- d27c077 ci(core): pin LF line endings for text sources
- 72e3196 docs(core): finalize public README, config, plugin and security docs
- 5cbbb2c feat(audit): add metadata-only SQLite audit store
- 7604fc4 feat(cli): add doctor diagnostics
- 978df5c feat(cli): add per-tool onboarding snippets
- ba51e1b feat(cli): add status and audit views
- b6a5f85 feat(config): add config with defaults, validation and upstreams override
- 4766d9f feat(core): add CLI entrypoint with version and stub commands
- fb57377 feat(core): display read-only Pro license status (isolated, fuzzed)
- 8783cac feat(core): implement foreground run daemon assembly
- 0a38268 feat(core): wire audit store into daemon and control API
- e58ae7b feat(extension): add capability-graded content plugin interfaces
- 7238cc7 feat(extension): add policy engine with fail-safe plugin handling
- 7936279 feat(platform): add cross-platform config/data paths
- fd664b7 feat(platform): add graded secret store with honest fallback
- 71de49d feat(platform): select argv-safe CGO-free keyring backend (M0)
- a353a53 feat(platform): stub service lifecycle (deferred past V1)
- 7d1548b feat(protocol): add protocol-agnostic JSON leaf walker
- 2f90405 feat(protocol): incremental SSE parse with sliding-window backfill
- cb8a495 feat(proxy): add authenticated control API
- 0f000d0 feat(proxy): add default upstream resolution + config override
- 6770b37 feat(proxy): add upstream forwarding
- 6116601 feat(proxy): dual-stack loopback listeners
- 63d89bb feat(proxy): enforce Host allowlist and control-API auth
- 53b2de4 feat(proxy): wire content plugin pipeline into request/response flow
- 84fff72 feat(redact): add built-in detector plugins
- 2d52a9d feat(redact): add deterministic placeholder and inbound-only backfill
- 5b5f1f9 fix(platform): keep read-only test OS-agnostic before the override
- 032a24b fix(platform): make read-only-prefix test separator-correct across OS
- a710042 fix(release): embed the full git tag as the CLI version
- 2fd0414 test(audit): complete HMAC chain tamper matrix
- 7e313d8 test(cli): make fail-closed invariant deterministic across OSes
- 0cc743a test(e2e): three-OS gateway smoke test
- 21d944b test(extension): use non-secret-shaped fake literal in policy tests
- 69391fd test(platform): cover cross-platform path and keyring edges
- 216e168 test(security): lock hard invariants with named tests
Install: brew install --cask fregie/tap/tokenhush (macOS),
scoop install tokenhush (Windows), or the install.sh script (Linux).