v0.12.0

0.12.0 (2026-06-03)

Features

• install: full-auto postinstall on global npm install + prepare crash fix (aa5cfb2), closes package.json#files
• memory+router: delete in-repo memory store, enforce token budget (d54e220)
• scanner: data-driven detection registry + detectionStatus (6951a72)
• security: write permissions.deny + consolidate SENSITIVE (WS1, partial) (32baf77)
• security: write permissions.deny into project .claude/settings.json (WS1) (c2e6a23)
• ux: non-developer desktop UX — slash commands, scoped allow, plain language (3d95a1b)
• workflow-config: auto-fill commands from the repo + --refill-config (2c16bbe)

Bug Fixes

• catalog: skip id-less items in tag audit (d04b5ab), closes #3
• context: preserve tokenEstimate in normalize; drop stale memory hook from install fragment (63e980c)
• doctor,guard: verdict truly first; well-formed import check; flag() for hooks; drop backticks in guard reasons (d562199)
• install: postinstall notice distinguishes added vs updated; settings 'ensured present' (e3737b8)
• scanner: address PR #50 review — chunked reads, typed bucket, hermetic test (385de24)
• workflow-config: skip derive on existing-no-refill; npx --no-install (5688f02), closes #51