# Changelog

## 0.7.0 - 2026-03-28

### Added
- added transcript-aware sensitive-file redaction for `read`, `write`, and `edit` tool payloads
- added correlation-based redaction of follow-up tool results for sensitive file operations
- added bash heuristics to redact outputs from obvious file-read commands targeting sensitive files
- added configurable `redaction.sensitiveFiles.extraPatterns` path matching
- added a stronger README warranty/liability warning and explicit manual-review guidance
- added regression tests for sensitive file tool calls, bash reads, and config-driven path patterns

### Changed
- run sensitive-file redaction before the generic pattern/secret scanner pass
- preserve transcript structure while replacing high-risk file contents with `[REDACTED_SENSITIVE_FILE_CONTENT]`
- expanded README coverage for sensitive-file redaction behavior and configuration

## 0.6.0 - 2026-03-28

### Added
- added Hugging Face dataset publishing via `@huggingface/hub`
- added merged global/project config files for publisher selection and dataset lists
- added Hugging Face token resolution from `HF_TOKEN` or pi `auth.json`
- added regression tests for Hugging Face token detection and auth-value resolution

### Changed
- refactored publishing so `/share-redacted` can publish to gist, Hugging Face, or both
- changed publication attestation text to cover non-gist targets too
- upload Hugging Face payloads into timestamped `sessions/...` folders instead of repo root
- expanded secret detection with explicit `hf_...` token redaction
- updated README for multi-publisher usage and config

## 0.5.0 - 2026-03-28

### Added
- added a detect-secrets-inspired secret plugin pipeline for auto-redaction and review
- added built-in secret plugins for private keys, provider tokens, bearer tokens, keyword assignments, and entropy-based opaque strings
- added regression tests for plugin initialization and private-key redaction

### Changed
- unified auto-redaction and review-mode secret detection so both use the same plugin stack
- expanded internal/private URL redaction to also cover `.home`, `.arpa`, and `.test`

## 0.4.0 - 2026-03-28

### Added
- added a transcript-style redaction review UI focused on under-redaction
- added manual literal and regex redaction actions with undo support
- added review-model tests for transcript extraction and manual redaction helpers

### Changed
- replaced the raw full-session editor as the default review step with a block-based reviewer
- kept the raw editor as an explicit escape hatch from the reviewer
- sanitized reviewer display output to avoid TUI glitches from ANSI/control sequences
- reduced false positives for file line references such as `README.md:32-49` and `package.json:23-38`

## 0.3.0 - 2026-03-28

### Added
- added regression tests for gist submission messaging

### Changed
- show the created gist URL in the final submission message
- use a single final notification so the gist URL does not get buried by a follow-up prompt
- fall back more gracefully when parsing `gh gist create` output

## 0.2.0 - 2026-03-28

### Added
- extracted redaction logic into `extensions/redaction.ts`
- added `bun test` coverage for privacy redaction heuristics
- added structured JSONL redaction with recursive string traversal
- added heuristic detection for long random-looking opaque tokens
- added explicit placeholders for opaque token classes:
  - `[REDACTED_OPAQUE_BASE64]`
  - `[REDACTED_OPAQUE_HEX]`
  - `[REDACTED_OPAQUE]`
- added dedicated UUID placeholder: `[REDACTED_UUID]`

### Changed
- strengthened privacy redaction for public gist publishing
- preserved likely-safe values such as model-like slugs and git hashes in safe context
- updated README development notes for test workflow