Changelog

v0.4.3 (2026-02-23)

Documentation

• Replace Japanese text with English in npm install instructions

---

v0.4.2 (2026-02-23)

Fixes

• Scoped package name — renamed npm package from sensitive-canary to @coo-quack/sensitive-canary
• Homepage — added homepage field pointing to the documentation site

---

v0.4.1 (2026-02-23)

Improvements

• npm publish automation — release workflow now publishes to npm with provenance on merge to main
• Package metadata — added repository and files fields, removed private: true for npm publishing
• npm install docs — added npm install -g setup instructions to README and docs

---

v0.4.0 (2026-02-23)

Features

• Allow tags are now single-use — allow tags are consumed after the first tool call, preventing unintended persistent bypass across multiple tool uses in the same turn

Fixes

• Random bird emoji in block messages — PreToolUse block messages now use randomBird() instead of a hardcoded emoji, matching the existing behavior in other messages

Docs

• README restructured — new section order: Why → Quick Start → What Happens → Detection Rules → How It Works → Allow Tags
• Docs site headings unified — "How It Works" → "What Happens", "What Gets Detected" → "Detection Rules" for consistency with README

---

v0.3.1 (2026-02-23)

Fixes

• Bird emoji in PreToolUse block reason — the bird emoji now appears in the block message shown by Claude Code, not only in the terminal output

---

v0.3.0 (2026-02-23)

Features

• Allow + Mask tag priority — when both [allow-*] and [mask-*] tags appear in the same prompt, the first occurrence wins per category (secret, pii). [allow-all] and [mask-all] resolve both dimensions at once.

Fixes

• Plugin install command corrected to sensitive-canary@coo-quack

---

v0.1.0 (2026-02-22)

Initial release.

Features

• UserPromptSubmit hook — scans every prompt for secrets and PII before it is sent to the Anthropic API
• PreToolUse hook — blocks .env/.env.* files by name; scans file contents and Bash commands for secrets and PII
• 25+ detection rules — AWS keys, GitHub/GitLab PATs, Stripe keys, Slack/Discord/Telegram tokens, JWTs, SendGrid/Mailgun/Mailchimp keys, Anthropic/OpenAI API keys, database connection strings, and more
• PII detection — email addresses, credit card numbers (Luhn-validated), US SSNs, US/JP phone numbers, Japanese postal codes, private IPv4 addresses
• Entropy filtering — suppresses false positives on low-entropy generic-secret and env-assignment matches
• Allow tags — [allow-secret], [allow-pii], [allow-all] bypass specific categories per prompt
• [mask-xxx] tag handling — explains that prompt masking is unsupported and suggests the correct allow tag
• Environment variable expansion — Bash commands referencing $VAR / ${VAR} have their env values scanned
• Deduplication — repeated occurrences of the same secret value produce a single finding