v0.2.9

feat: add FileContentRegexSearch to FileClerk for streaming line-by-line regex search
feat: add RegexPattern value object for validated regex compilation
feat: honor SERVER_PUBLIC_IP_ADDR env var as primary source of truth in ReadServerPublicIpAddress
fix: bound public IP resolver requests with cancellable contexts
refactor: extract FileClerk error sentinels to package-level vars
refactor: replace ReadServerPublicIpAddress DNS+curl flow with native HTTP fan-out across multiple public IP resolvers
refactor: split DnsLookup config into DnsLookupSettings; move hostname and recordType to Execute()
docs: mention FileContentRegexSearch and SERVER_PUBLIC_IP_ADDR env var in README

v0.2.8

feat: add agent skills system with OpenAPI testing skill
docs: add skills for agents section to README
chore: add agent tool configs to gitignore

v0.2.7

Changelog

feat: add TrustedCidrsReader for TRUSTED_CIDRS env var
feat: add RequesterIpExtractor with XFF-aware IP extraction
feat: add HttpHeader value object with validation
feat: add IsLinkLocal to IpAddress and Contains to CidrBlock
refactor: replace ExtractIPDirect with RequesterIpExtractor at all call sites
refactor: simplify RequesterIpExtractor consumers for (IpAddress, error) return
refactor: drop echo from RequesterIpExtractor, unified header extraction with Direct/RemoteAddr keywords
fix: replace negation logic in CidrBlock and IpAddress with explicit checks (CWE-20, CWE-284)
fix: fail-closed on invalid IP_EXTRACT_DISABLE_TRUST and trim whitespace in CIDR parsing
fix: add loopback check to CidrBlock.IsPublic, fail-closed IpExtractHeaderReader, Header.Values for multi-header XFF, echo.NewHTTPError wrapping
refactor: move RequesterIpExtractor to presentation, unify TrustedIpsReader into TrustedCidrsReader

v0.2.6

Changelog

fix: switch UnixAbsoluteFilePath regex from allowlist to blacklist with security test suite
fix: switch UnixFileName regex from allowlist to blacklist with tilde and bracket support
fix: add tilde expansion pattern detection to UnixRelativeFilePath

v0.2.5

Changelog

fix: replace PasswordFactory with NewCypherSecretKey in EnvsInspector

v0.2.4

Changelog

fix: add missing os.Exit on interactive terminal path in LiaisonCliResponseRenderer
refactor: replace binary exit codes with BSD sysexits.h conventions in CLI renderer

v0.2.3

Changelog

feat: add SimpleCliResponseRenderer for simplified CLI error output
fix: allow glob wildcard in UnixFileName VO and forbid consecutive asterisks

v0.2.2

Changelog

refactor: add type assertion short-circuit to VO constructors

v0.2.1

Changelog

refactor: remove hardcoded "id" column assumption from PaginationQueryBuilder
fix: complete IsLocal() loopback detection for IPv4 range and IPv6
fix: strip IPv6 zone ID suffix in IpAddress value object
fix: replace RealIP() with echo.ExtractIPDirect() in presentation layer
fix: extract operatorAccountId from echo context in request input reader
chore: remove all agents related files
chore: update dependencies
fix: export Shell error const

v0.2.0

Changelog

feat: x509 certificate value objects and entity
feat: add PrivateKeyPemFactory to Synthesizer (supports RSA, ECDSA, DSA, Ed25519)
feat: add CertificatePemFactory to Synthesizer
feat: add CACertificatePemFactory to Synthesizer
fix: remove all hardcoded private keys/certificates from test files