v0.7.9

Added

• -q short alias for --quiet.

Fixed

• Report database directory creation failures clearly and exit with code 2 in the CLI.

Changed

• Document writable database roots for sandboxed agent harnesses in the README and generated agent skill.
• Remove the landing page and docs site sources and the automated site deployment workflow.

Full Changelog: v0.7.8...v0.7.9

v0.7.8

Security

• CLI values are literal by default, including a leading @. Before this release any CLI flag value starting with @ was read from a file. No telegram flag reads a file now; pass long input as a JSON object on stdin with -.

Full Changelog: v0.7.7...v0.7.8

v0.7.7

Changed

• skill --short opens with the release binary install lines (Linux/macOS and Windows); npm is listed after them.

Full Changelog: v0.7.6...v0.7.7

v0.7.6

Added

• Add skill --short with a compact CLI cheat sheet.

Fixed

• List runnable guide commands in full CLI skill output and describe nested object and array parameters with complete table rows.

Security

• Create CLI and MCP mirror databases and their SQLite sidecars with private POSIX permissions, and create containing directories with mode 0700. Preserve existing database and directory modes.

Full Changelog: v0.7.5...v0.7.6

v0.7.5

Security

• Validate remote media URL schemes, DNS answers and every redirect, block private targets by default, and pin connections to validated addresses to prevent DNS rebinding.
• Block NAT64 and 6to4 addresses that embed a private IPv4 address.
• Limit remote media downloads to 50 MiB, five redirects and a 30 second overall timeout by default. Add client size and timeout settings and explicit private URL opt-ins.

Changed

• README and site add a labelled install line that also adds ~/.local/bin to ~/.profile, and a pinned line on the site.

Full Changelog: v0.7.4...v0.7.5

v0.7.4

Added

• Add --version --short and --version --json for machine-readable version output.
• Add GHOSTPAW_NO_MODIFY_PATH=1 to skip persistent user PATH changes in the Windows installer.

Full Changelog: v0.7.3...v0.7.4

v0.7.3

Changed

• Make release binaries the default installation path and support explicit installer targets.
• Show the installation variant in human version output; retain plain machine versions.
• Include workflow guides, nested parameter rows and validated call examples in CLI skill output.
• Validate tool inputs before dispatch and include recovery shapes for invalid input.

Full Changelog: v0.7.2...v0.7.3

v0.7.2

Fixed

• The global flags --json, --quiet, --compact and --no-color also apply when they follow --, so message send -- -100123 "hi" --json prints JSON instead of failing with Unexpected positional: --json.
• Flag values that start with dashes are accepted; only a following --name token counts as the next flag.

Full Changelog: v0.7.1...v0.7.2

v0.7.1

Fixed

• CLI commands accept a negative chat ID, as used by groups, supergroups and channels, as a positional argument instead of failing with Unknown flag.
• bot state without --key reports the missing key instead of No state stored for key: undefined.

Full Changelog: v0.7.0...v0.7.1

v0.7.0

Added

• 27 noun-verb commands: bot stats/state/chats; mirror message/messages/search/chat/chats/user/users/reactions/replies/edits; message send/edit/delete/pin/unpin/typing/forward; member ban/unban/restrict/promote/kick/show/list. Noun-verb send and moderation commands return plans even when credentials are present.
• Schema-driven CLI flags, stdin JSON, per-command help, bash/zsh/fish completions, JSON and quiet output, and exit codes 0/1/2/3/4/70. Existing CLI forms retain their behavior.
• Standalone binaries for linux-x64, linux-arm64, darwin-arm64, darwin-x64 and windows-x64, with SHA256SUMS and build provenance attestations. Binaries are unsigned; macOS builds carry an ad-hoc signature.
• install.sh and install.ps1 refuse checksum mismatches. Release installation checks run on ubuntu-24.04, macos-15 and windows-2025 using offline mirror reads and MCP discovery; a public TLS handshake runs only in the install workflow.

Changed

• SurfaceTool accepts optional cli command metadata. CLI and standalone binaries share Telegram options. Local reads and plans need no token; existing execution forms use TELEGRAM_BOT_TOKEN.

What's Changed

• Standalone binaries and noun-verb CLI by @Anonyfox in #2

New Contributors

• @Anonyfox made their first contribution in #2

Full Changelog: v0.6.2...v0.7.0