v0.19.2

What's New

New Features

• Added comprehensive secret protection system with PreToolUse hooks that block direct reads of secret files (cat, grep, head, tail) and command-specific execpolicy rules for Codex CLI that prevent grep/awk access to known secret key names
• Secret consumers now support 1Password op:// reference resolution alongside plain values, enabling gradual migration from plaintext secret files to vault-backed references
• PreToolUse command rewriting automatically redacts secrets from tool output before transcript capture, with regex detection for AWS keys, Slack tokens, JWTs, and PEM headers plus gitleaks integration for high-entropy patterns
• Bootstrap and git hooks now stand down when roster sync owns the machine, preventing catalog conflicts during the roster-926 cutover (override with ROSTER_ROLLBACK=1)

Bug Fixes

• Fixed argv-position-aware execpolicy rules for grep/awk commands where the search pattern precedes the file path, closing the specific leak vector that bypassed original prefix-based rules
• Scratchpad entries now use millisecond-precision IDs to prevent collisions when multiple entries are added within the same second
• Bridge-retro artifact publishing resolves ~/.secrets via op run instead of direct sourcing, ensuring 1Password references work correctly in the publish pipeline

Release classification notes

Landmark classification notice: deterministic release signals (conventional:chore, conventional:docs, conventional:feat, conventional:fix, conventional:refactor, migration, security) disagreed with model classification; synthesis proceeded. deterministic floor found user-visible commit signals but model did not

0.19.2 (2026-07-10)

Bug Fixes

• artifact: bridge-retro invocation resolves ~/.secrets via op run (harness-kit-914) (2a05c5d)
• scratchpad: millisecond ids — same-second appends collided (26ddf71)
• secrets: argv-position-aware grep/awk key-name rules for Codex execpolicy (harness-kit-913 follow-up) (4fe8dc6)
• secrets: guard direct Read access to secret files (5dbcd70)

Features

• bootstrap: stand down when roster owns the machine (roster-926 cutover shim) (9ef6375)
• githooks: roster stand-down guard on post-commit/merge/rewrite re-links (roster-926 cutover shim) (148ec5c)
• relay: operator scratchpad — the pile of conversations-to-have (c8e0594)
• secrets: migrate known ~/.secrets consumers to op://-aware resolution (harness-kit-914, part 1) (962876c)
• secrets: PreToolUse output redaction + one-time transcript scan (harness-kit-915) (db6bf57)
• secrets: PreToolUse/execpolicy read-guard against ~/.secrets (harness-kit-913) (cfa55b1)