v0.2.0

Breaking changes

• KMS settings are now project-local. .agentsafe/config replaces the previous ~/.agentsafe/config home-directory registry, and the named-application/--application model is gone — each project directory now has exactly one implicit KMS profile. Run agentsafe init --profile ... --crypto-endpoint ... --key-id ... again inside each project directory to migrate.
• compartment is no longer an agentsafe setting. OCI's Encrypt/Decrypt API never used it (only KMS management-plane calls need a compartment), so --compartment/compartment= is no longer accepted. Drop it from any agentsafe init calls or scripts.

New features

• .env/.env.agent support — a second, KMS-backed store alongside appconfig, for teams whose tooling already auto-loads .env files. Compile .env.agent (plaintext, local-only) into a fully-encrypted, git-committable .env with agentsafe env encrypt; from agentsafe import env for the Python API (env.load(), env.get(), etc.).
• agentsafe config — displays the resolved project KMS settings without contacting KMS.
• .agentsafe/config and appconfig are now designed to be committed to git together — a teammate cloning the repo only needs their own local OCI credentials to decrypt.

Fixes

• Closed a race where appconfig/.agentsafe/config briefly had default (not owner-only) file permissions during creation.
• agentsafe set/env set now read piped stdin directly instead of relying on getpass's non-TTY fallback, which could echo the value on some platforms.
• Fixed a settings-resolution bug where an explicitly-passed empty value could be silently overridden by an environment variable.
• SDK calls and the bundled examples now raise a clean, catchable error instead of a raw traceback when a project hasn't been initialized yet.

See CLAUDE.md for full design details.

agentconfigsafe v0.1.2

Full Changelog: v0.1.1...v0.1.2

agentconfigsafe v0.1.1

Full Changelog: v0.1.0...v0.1.1

agentsafe v0.1.0

Full Changelog: https://github.com/kiranthakkar/agentsafe/commits/v0.1.0