v0.26.2

Release v0.26.2

v0.26.1

Fixed

• Proxy silent death on client disconnect — ignore SIGPIPE at process level and use MSG_NOSIGNAL on Linux sends. Previously, any send() to a closed client socket killed the proxy instantly with no error or log
• Proxy send error handling — check send() return values and log client disconnects instead of silently discarding
• Proxy upstream timeout — add 120-second timeout on upstream semaphore wait; hung connections now return 504 instead of blocking threads indefinitely

v0.25.8

Added

• Proxy log shows type breakdown per redaction (Credential x3, DB Connection x2)
• Proxy log includes actionable fix suggestion for the human operator
• Proxy log deduplicates repeated lines when conversation history re-scans same secrets

v0.25.7

Fixed

• Launch command strips leading -- from passthrough args (fixes execvp: No such file or directory)

v0.25.6

Added

• Proxy alert now includes actionable fix suggestion per secret type (use env vars, store in key file, use detectable keywords)

v0.25.5

Added

• Credential storage rules in CLAUDE.md snippet — prevents agents from echoing or storing plaintext credentials
• Setup step added to Quick Start — pastewatch-cli setup claude-code is now essential, not optional

v0.25.4

Fixed

• Credential false positives — documentation text like password: rotated, token: POST no longer triggers detection
• Proxy stderr log suppressed in launch mode to prevent TUI interference with interactive CLIs
• Added --quiet flag to proxy command

v0.25.3

Fixed

• Launch command uses fork/exec for proper TTY passthrough to interactive agents

v0.25.2

Fixed

• Launch command now passes TTY through to agent for interactive CLIs

v0.25.1

Added

• Bash command argument scanning — guard now scans full command string for inline secrets (DSNs, API keys, tokens)
• Bash tool handling in shell guard hook — blocks commands containing secrets before execution
• Test credential exclusions — AWS EXAMPLE keys and Stripe sk_test_ keys bypass guard blocking
• CodeQL code scanning and Dependabot dependency monitoring

Fixed

• VS Code extension workflow skips publish when version unchanged