# Changelog

## 0.1.0 — 2026-05-04

Initial public release.

- 7 tools: `tmux_new`, `tmux_send`, `tmux_send_key`, `tmux_capture`, `tmux_expect`, `tmux_kill`, `tmux_list`
- Isolated `-L pi-harness` socket — never pollutes user's main tmux server
- Hardened against regex DoS (AST-level pattern rejection + 32KB input cap), tmux flag injection (strict session-name allowlist + reserved names), tmux command-separator injection in key names, and tmux's prefix-matching session targets (uses `=name` / `=name:` exact-match form)
- Adversarial verification across ~10 rounds of multi-model code review (opus + gpt-5.5 + gemini-3.1-pro)