v1.1.2

1.1.2 (2026-07-13)

Bug Fixes

• opencode: plugin bundle must export ONLY the plugin function (6f51eaa)

v1.1.1

1.1.1 (2026-07-13)

Bug Fixes

• install: ship the OpenCode plugin bundle in the skill + make init/install fault-tolerant per agent (390af62)

v1.1.0

1.1.0 (2026-07-13)

Features

• security: init command + close secret-leak paths found by adversarial audit (3c44f1b)

v1.0.1

1.0.1 (2026-07-13)

Bug Fixes

• ci: use a high-entropy fake token in the Node-18 floor pipe smoke (low-entropy token was filtered by the entropy gate) (657a368), closes hi#entropy

v1.0.0

1.0.0 (2026-07-13)

Bug Fixes

• cli: resolve real paths in entrypoint guard so the pinned bundle runs behind symlinks (9dde7de)
• skills-only distribution + 3 correctness bugs found by real-world Claude testing (d5fc796)

Features

• claude-code: full adapter — prompt block with redacted copy, sensitive-path deny, redact-and-restore hooks, idempotent installer (5a37b72)
• cli: vault with HMAC placeholders + redact/restore + scan/pipe/allow/vault commands (ee7d251)
• codex: adapter (prompt block + tool-input protection, post no-op documented) + hooks.json/config.toml installer with managed TOML block (30d43c8)
• engine: gitleaks-derived detection engine — 222 converted rules, entropy/keyword/stopword gates, Luhn+IIN card rule, hybrid gitleaks pass (1ea6363)
• opencode: plugin with in-place prompt redaction, tool deny/restore, output redaction + installer (plugin-file and via-config modes) (9d8e4c8)
• scaffold secretgate CLI (family conventions, two-bundle tsup, vendored gitleaks rules) (6537602)
• status doctor, path-only/scoped rule semantics, self-scan dogfood clean, SKILL.md + README threat model, rules:sync (6bc1a6e)