v0.2.0

Changelog

• a740b65: chore(mcp): go mod tidy — mcp-go is a direct dependency ( <>)
• 4d75bd6: docs(plugin): correct add_server required-args in quick-reference ( <>)
• c1e8b45: feat(bootstrap): embedded hardening script + runner ( <>)
• 0720649: feat(cli): sshm init ( <>)
• 09fcaff: feat(cli): sshm mcp — start the stdio MCP server ( <>)
• ff97f70: feat(cli): sshm status ( <>)
• 1e9486d: feat(mcp): exec + exec_multi tools with safety filter ( <>)
• 5d0e8c8: feat(mcp): ops tools (bootstrap/gen_key/copy_id/tail_logs) ( <>)
• c653e42: feat(mcp): read-only tools (list/get/test/status) ( <>)
• 7f3f44c: feat(mcp): server skeleton + mcp-go dependency ( <>)
• aa8393c: feat(mcp): write tools (add/edit/remove server) ( <>)
• 6d15dad: feat(plugin): Claude Code plugin sshm-skill ( <>)
• 6e13a0b: feat(safety): append-only JSON-lines audit log ( <>)
• b6eb34c: feat(safety): dangerous command pattern filter ( <>)
• f5dfef7: feat(safety): sensitive data masking ( <>)
• fd5282a: feat(status): rich remote snapshot collector ( <>)
• 59c9e65: fix(cli): init exits non-zero on incomplete bootstrap ( <>)
• 7bc2f34: fix(mcp): audit records when exec bypassed the safety filter (Claude Sonnet 4.6 noreply@anthropic.com)
• 9abc008: fix(mcp): edit_server applies auth/key_path; validate host/auth/port ( <>)
• 1f0d189: fix(safety): catch rm -rf ~/ and uppercase -R; document guardrail scope ( <>)
• c50ed5a: fix(test): portable mcp integration build, dedicated CI step (Claude Sonnet 4.6 noreply@anthropic.com)
• d6d8c65: refactor(bootstrap): fix Run comment, wrap $PM, surface stderr (Claude Sonnet 4.6 noreply@anthropic.com)
• d63271d: refactor(cli): status renders ports comma-separated, aligns flag help ( <>)
• 9926972: refactor(mcp): mask test_connection error at the handler ( <>)
• 7ca471d: refactor(status): brace-group uptime fallback, relax ports grep ( <>)
• 92607b1: test(mcp): stdio integration test for the MCP server ( <>)
• 9e2efc5: test(safety): audit test covers Result masking and timestamp ( <>)
• fabcce1: test(safety): lock priv-key-first masking order; document over-masking ( <>)