v0.3.1

Changelog

• f1a92e6 make connection lifecycle idempotent and safe for subagents
• bc4f441 Merge pull request #74 from jonchun/feature/system-ssh-mode
• 3b0f6d3 fix: remove forced StrictHostKeyChecking in system SSH mode
• 8884573 feat: add system SSH mode for full ~/.ssh/config support
• db06599 Merge pull request #73 from jonchun/agent/issue-7-govulncheck
• 3c878c6 ci: consolidate lint, build, and govulncheck into single checks job
• 4109514 ci: add govulncheck vulnerability scanning job
• 72396b4 Merge pull request #45 from jonchun/copilot/remove-custom-min-function
• 861d0bf Merge pull request #47 from jonchun/agent/issue-18-limit-reader
• 68b30d2 fix: add io.LimitReader to toolkit HTTP downloads
• 161766b Merge pull request #46 from jonchun/agent/issue-21-extract-loadFromFS
• d839c2c Remove custom min helper
• 4caa20d refactor: extract shared loadFromFS helper for manifest loading
• dde75c1 Initial plan
• aad6e72 Merge pull request #42 from jonchun/agent/issue-2-ssh-cleanup-shutdown
• 3518f0d merge: resolve conflict with main in Close() signature
• d4d8a5e Merge pull request #41 from jonchun/agent/issue-1-dedup-subcommand-map
• fcca4d2 Merge remote-tracking branch 'origin/main' into agent/issue-1-dedup-subcommand-map
• 0d47fa5 fix: add context.Context to Disconnect/Close and always clear state on Close
• 332f77f chore: add CodeRabbit config to gate reviews by label
• 88f7ae7 Merge pull request #43 from jonchun/agent/issue-9-propagate-context-deploy-tools
• 91925f6 fix: propagate caller context through toolkit DeployTools
• 7f4ebda fix: clean up SSH connections on graceful shutdown
• 04436be refactor: extract duplicated subcommandCommands map to manifest package
• b2f5d28 refactor: extract duplicated subcommandCommands map to manifest package
• 827bb55 Merge pull request #38 from jonchun/agent/issue-28-ssh-docs
• f854e1a chore: bump default version to 0.2.0
• 491645a fix: pass binary version through to MCP server implementation
• c900f68 Merge pull request #37 from jonchun/allow-wget-restricted
• 255cc53 docs: add SSH configuration, authentication, and host key verification guide
• 06124db Merge pull request #39 from jonchun/agent/issue-26-passphrase-detection
• 2fa6125 Merge pull request #40 from jonchun/agent/issue-5-add-security-md
• 6b8286d Add threat model section clarifying ShellGuard's role as an LLM fail-safe
• fc0fe88 refactor(ssh): inline passphrase detection instead of separate loadKeyFile
• b1a2671 Add SECURITY.md with vulnerability disclosure policy and security model documentation
• 3db68ad test: add comprehensive wget flag restriction tests
• 1c41d9b feat(ssh): detect passphrase-protected keys and guide users to ssh-agent
• b0fdcc8 feat(manifest): allow wget with GET-only, stdout-only policy
• f35a9d8 Merge pull request #36 from jonchun/agent/issue-19-userhomedir-error
• 4bdf980 fix(config): propagate error from os.UserHomeDir in defaultConfigPath
• 6d030c7 Merge pull request #35 from jonchun/agent/issue-27-host-key-tofu
• 7c3ce90 Merge remote-tracking branch 'origin/main' into agent/issue-27-host-key-tofu
• 3c69e77 fix(ssh): propagate error from defaultKnownHostsPath instead of literal ~ fallback
• 04325f5 Merge pull request #34 from jonchun/agent/issue-12-remove-dual-logger
• fd7ca61 Merge pull request #33 from jonchun/agent/issue-13-explicit-sudo-flags
• fdf8a97 Merge pull request #32 from jonchun/agent/issue-16-collision-safe-path-bound
• 9acd1bb feat(ssh): add host key verification with trust-on-first-use (TOFU)
• 9ed7734 fix: resolve dual-logger confusion in RunStdio (#12)
• 868ee6d fix(validator): make sudo flag validation explicit instead of accidental
• 0285bdd fix(server): add upper bound to collisionSafePath loop
• cab9e59 Merge pull request #29 from jonchun/agent/issue-24-ssh-agent-support
• 7eaa020 fix(ssh): remove unused writeTestKeyFile helper to fix lint
• 9fe00b5 merge: resolve conflicts with main (issues #25, #31)
• 564fb35 feat(ssh): add ~/.ssh/config resolution for host aliases, per-host settings (#31)
• 245a3bd Merge pull request #30 from jonchun/agent/issue-25-auto-discover-ssh-keys
• 503cb52 fix(ssh): keep agent connection open through SSH handshake
• 4eb7d80 fix(ssh): address code review - skip tests when home dir unavailable, OS-agnostic path test
• c414c26 fix: explicitly discard errors to satisfy errcheck lint
• 288f51b feat(ssh): auto-discover default SSH keys (~/.ssh/id_ed25519, id_rsa, etc.)
• eaaca32 test(ssh): add tests for default SSH key discovery
• e189f51 feat(ssh): add ssh-agent support for key authentication
• 812684c chore: add .worktrees to gitignore
• 4a08ca7 fix: update goreleaser config for v2 deprecations and homebrew tap auth
• b249345 docs: add per-client MCP installation instructions to README
• 5eaf0b9 Initial Commit