AgentRinse 0.8.2

Fixed

• doctor now validates cleanup-plan config sidecars against their matching plan instead of misclassifying valid sidecars as malformed plans.

This preserves existing AgentRinse state and reports malformed, orphaned, or digest-mismatched sidecars separately from cleanup plans.

AgentRinse 0.8.1

Fixed

• macOS process ownership now bounds target-selected lsof scans and stops
  retrying after the first incomplete scan in an audit pass.

Safety

• Structured lsof output is NUL-delimited, size-capped, and rejected when
  malformed; deadline and output-limit failures kill only the exact child and
  settle without waiting for child exit.

Validation

• Lightweight tag v0.8.1 targets
  f550428b3369eb1825be6fe8e72e45992950ee65.
• Exact-main CI run 32612154668 and CodeQL run 32612154327 passed on that
  commit.

AgentRinse 0.8.0

Added

• Added explicit multi-repository cleanup campaigns with
  clean --profile fleet --repo <root>... --max-risk safe|recoverable,
  deterministic Git common-directory deduplication, and fleet-specific action,
  quarantine-byte, blocker, unknown-state, and diagnostic summaries.

Safety

• Git worktree reachability now uses bounded upstream, remote, and configured
  pin checks instead of enumerating every containing ref. Current-worktree
  protection is exact for worktrees and subtree-scoped for artifacts, ignored
  content has its own hard blocker, failed fleet repositories remain isolated,
  and empty applies create no lock or journal.
• Private state directories are now preflighted as a complete batch before any
  permission repair, with one verified Windows ACL update for the full batch.

Validation

• Lightweight tag v0.8.0 resolves to
  54c903ff59f111e136318d8d6dc19196745702e7.
• Exact-main CI run 32495608716 and CodeQL run 32495607994 passed on that
  commit.
• Validation-only Release run 32495940859 passed the validate job, including
  source/package checks, version matching, checksum verification, and packaged
  CLI smoke tests.
• Publish-only package, npm, and release-asset jobs were skipped.

AgentRinse 0.7.0

Added

• stateless JSON and NDJSON audits for an exact provider allowlist, including
  shell completion and configured-root support

Safety

• audit --no-state rejects output and state paths before discovery and never
  resolves or writes the AgentRinse state layout
• provider-scoped audits suppress Git, Docker, runtime, and artifact discovery,
  reject relative configured roots, and omit candidate actions so redirected
  output cannot authorize cleanup

AgentRinse 0.6.0

AgentRinse 0.6.0 expands recoverable provider cleanup to Zed while adding owner-bound maintenance diagnostics for more agent and Docker state.

Highlights

• Quarantine the exact stale Zed Zed.log.old rotated application log after 30 days, with a seven-day undo window.
• Resolve native macOS, explicit-root, Flatpak, and XDG Zed log locations without enumerating neighboring files.
• Report OpenCode snapshot Git maintenance and append-only server-log behavior without invoking Git or deleting logs.
• Inventory Cursor's global state database companions and report its owner-provided maintenance commands.
• Report version-and-revision-gated Grok session-start memory maintenance without invoking it.
• Inventory supported Docker Buildx cache with context, daemon, builder, worker, size, type, sharing, and conservative age evidence.

Safety

Active Zed logs, ACP logs, databases, threads, settings, credentials, extensions, crash reports, neighboring files, symlinks, active processes, and open descriptors remain protected. OpenCode, Cursor, Grok, Docker images, containers, networks, volumes, and build cache remain report-only.

Install

npm install -g agentrinse@0.6.0
# or
brew install vincentkoc/tap/agentrinse

The release workflow publishes the exact verified tarball to npm with provenance and attaches the tarball plus SHA-256 checksum to this release.

AgentRinse 0.5.0

AgentRinse 0.5.0 extends recoverable cleanup to provider-owned disposable files while preserving its fail-closed safety model.

Highlights

• Quarantine exact stale Claude debug logs and rebuildable changelog-cache files with a seven-day undo window.
• Undo or permanently purge explicitly selected provider-file recovery entries.
• Report Claude native retention behavior and Copilot native session/process-log maintenance.
• Persist native Windows audit and plan evidence with verified current-user or local Administrators ownership and explicit ACLs.
• Continue recoverable offline compaction for supported Codex SQLite state.

Safety

Provider sessions, transcripts, credentials, configuration, logical database records, branches, stashes, and Docker volumes remain protected. Provider-file mutation fails closed when the provider process is active, descriptors are open, or file identity/content changed after planning. Cursor, Zed, OpenCode, Grok Build, and Docker remain report-only.

Install

npm install -g agentrinse@0.5.0
# or
brew install vincentkoc/tap/agentrinse

The release workflow publishes the exact verified tarball to npm with provenance and attaches the tarball plus SHA-256 checksum to this release.

AgentRinse 0.4.0

Recoverable Codex state-database compaction with fail-closed recovery.

• audit the current Codex state, logs, goals, and memories SQLite contracts
• compact with VACUUM INTO, full integrity proof, fsync, locks, and atomic exchange
• retain exact originals for seven days with strict undo and resumable purge
• refuse active owners, open descriptors, non-empty WAL state, schema drift, insufficient space, or changed content
• add database backup manifests, schemas, doctor checks, and packaged lifecycle proof
• refresh the README with TokenJuice-style integration icons and command-first examples

Database mutation is experimental and requires both --allow-offline-vacuum discovery and the explicit experimental risk ceiling.

AgentRinse 0.3.0

Recoverable Git worktree cleanup with fail-closed recovery.

• quarantine fully proven inactive, clean, pushed linked worktrees
• undo and purge with durable manifests, recovery refs, and exact identity checks
• mutation-boundary provider, pin, Git-ref, process, mount, and pushed-state revalidation
• crash-safe AgentRinse lock ownership that preserves foreign operator locks
• packaged end-to-end quarantine, undo, and purge smoke proof

Whole-worktree mutation requires the explicit recoverable risk ceiling. Native Windows worktree mutation remains blocked.

AgentRinse 0.2.0

Agent-aware reachability and repository closeout.\n\n- structured Git worktree state, reachability, and live-process protection\n- Codex and Claude workspace roots plus explicit path/resource/ref pins\n- repository-scoped closeout audit, plan, and optional safe artifact apply\n- opt-in report-only agent runtime inventory\n- checksummed release package and npm trusted publishing\n\nMutation remains limited to exact configured rebuildable artifacts.

AgentRinse 0.1.0

First supported AgentRinse release.

• safe audit, plan, and exact artifact apply workflow
• persisted owner-only state and interruption journals
• active/stale lock inspection and guarded recovery
• doctor diagnostics, JSON/NDJSON output, redaction, and completions
• checksummed package assets and npm trusted publishing

See README.md and docs/ for operator guidance.