v0.3.0

Highlights

• Muse Code support: Live monitoring, opt-in enforcement, and forensic scanning of saved sessions (#59).
• Richer tool visibility: Retained tool inputs and results for rules and optional content export, plus improved MCP/browser context and subagent attribution (#64, #58, #48).
• More accurate command analysis: Improved POSIX and PowerShell parsing, with opt-in enforcement for supported static compound commands (#81, #82, #70).
• Machine-readable rule tests: New rules test --json output for automation (#67).
• Reliability fixes: Improved secret redaction, handling of oversized delivery batches, and recovery from incomplete record writes (#80, #56, #75).

Upgrading

• Record schema: Output now uses schema 0.5.0. Update downstream validators that enforce an exact version or closed schema (migration guide).
• Full-content exports: --content full now includes redacted tool arguments and results, which can contain source code, file contents, and patches. Use --content full --content-scope messages to keep message-only body exports (content capture).
• Installed integrations: Rerun numbat hook install for each installed agent with the same options to update generated hooks and plugins. Review host trust again if their definitions change (upgrade instructions).

Changelog

• 7d4c5ec Merge pull request #82 from perplexityai/fix/powershell-option-prefixes
• e8563ef Merge branch 'main' into fix/powershell-option-prefixes
• 24e06ea Merge pull request #80 from perplexityai/fix/redaction-url-boundaries
• db5afad Merge pull request #81 from perplexityai/fix/posix-dialect-inference
• 374b874 Merge pull request #79 from perplexityai/docs/readme-usage-notes
• 02b9964 fix(rule): recognize PowerShell option prefixes
• 2379293 fix(rule): prefer valid POSIX control-flow syntax
• 7ae35a2 fix(redact): bound URL queries at whitespace
• 3977fc9 docs: clarify README output and upgrade notes
• c99fb3e Merge pull request #59 from venkyg-sec/feat/muse-code-hooks
• a1ab6ed Merge pull request #78 from perplexityai/fix/timeline-subagent-label
• 0117ee5 fix(timeline): omit mixed subagent labels
• 1e2c582 rules: defer memory detection from Muse integration
• 75aad57 Merge pull request #77 from perplexityai/fix/shell-managed-executables
• d728ad8 Merge pull request #76 from perplexityai/fix/canonical-path-copying
• 443142f rule: avoid repeated proc-root suffix copies
• cc41a21 rule: leave additional shell-managed names unresolved
• 5d402d6 fix(hook): map Muse file tools to native targets
• 5c71260 feat(hook): support explicit Muse managed hook files
• bded7cd fix(muse): qualify memory write targets and document hook contracts
• eebbe47 Merge remote-tracking branch 'origin/main' into fix/muse-retained-frame-provenance
• 724970d fix(muse): preserve retained-frame identity and evidence
• 6942f99 build(deps): update Go dependencies (#54)
• ac6d0c5 Merge remote-tracking branch 'origin/main' into fix/muse-retained-frame-provenance
• 0084e58 feat(rules): add rules test --json machine-readable result contract (#67)
• 5111e6f fix(deps): reconcile parser and shell-guard projections
• 14f9e8a rule: keep shell-managed names and tilde patterns out of enforcement (#74)
• 6fe2e33 build(deps): bump actions/upload-artifact (#71)
• d08c724 fix(muse): satisfy lint and clarify hook environment
• b72df30 test(sequence): assert obsolete parser revisions stay invalid
• 509cffa fix(muse): validate public status and limit default previews
• 0227a19 fix(muse): preserve configuration and captured tool content
• b8e99f1 fix(deps): preserve conservative parser projection
• f76bab6 merge: update Muse support against main
• 618dbdd merge: update dependency change against main
• f15eb18 Fix records lost after a short write to the records file (#75)
• 20a5a52 rule: compare protected paths by canonical spelling (#69)
• 149e543 rule: resolve statically assigned command names (#66)
• d12ef10 rule: enforce static compound POSIX commands (#70)
• cea7686 Retain tool inputs and results for rules and content output (#64)
• 590d2ff build(deps): bump the go-modules group across 1 directory with 3 updates
• 1cedd55 build: update Go toolchain to 1.26.9 (#63)
• a2fc68d chore: add Meta copyright header to new Muse Code files
• 0909b24 Merge origin/main into feat/muse-code-hooks
• 77ece3a fix(codex): preserve subagent identity and correlation (#48)
• 3cf312f Preserve MCP inputs and browser context across capture paths (#58)
• 9df6ac4 fix(hook): resolve Junie project from project_path (#62)
• 339dba2 fix(hook): record Kiro SessionEnd (#61)
• 97e639c fix(extract,docs): stamp Muse at-rest events with recorded_at; list muse in cli.md
• db7e6bc Merge pull request #56 from ronheichman/psi/adapt-ship-batches-on-413
• a4a6f87 fix(extract): split MCP tool names in Muse at-rest parser
• bdd285c fix(ship): skip rejected records and bound configurable batches
• 5997c83 fix(ship): stop split delivery after cancellation
• 54af37b test(hook): verify Muse MCP tool calls need no new classifier code
• f72767c feat(extract): add Muse Code at-rest session parser
• 5c80914 rules(persistence,tamper): add Muse Code monitor-only detections
• a5eb5db docs: document Muse Code coverage, trust, and reload behavior
• 23cc044 feat(hook): add Muse Code live-hook support
• 70074dd fix(ship): clarify rejected record diagnostic
• 5231616 fix(ship): adapt batches after HTTP 413