v1.0.2

Added

• OpenClaw native plugin (openclaw-plugin/)
• Claude bundle plugin (.claude-plugin/)

Changed

• Updated TurboMCP dependency to 3.0.14

v1.0.0

Added

• sudo_run tool for privilege-elevated command execution via MCP
• Platform-specific elevation: sudo, pkexec, macos_osascript, windows_uac, and auto mode
• Allowlist-based policy system via SUDO39_ALLOWED_PROGRAMS environment variable
• Unsafe mode toggle via SUDO39_ALLOW_UNSAFE for unrestricted program access
• Runtime policy management tools: sudo39_policy, sudo39_add_allowed_program, sudo39_remove_allowed_program, sudo39_set_allow_unsafe, sudo39_reload_policy_from_env
• Confirmation-phrase workflow for all mutating admin operations
• MCP prompts for generating confirmation phrases (confirm_add_allowed_program, confirm_remove_allowed_program, confirm_set_allow_unsafe, confirm_reload_policy_from_env)
• Configurable per-execution timeout (SUDO39_TIMEOUT_SECS, default 30s)
• Configurable output capture limit (SUDO39_OUTPUT_LIMIT_BYTES, default 4 KiB)
• Askpass helper support via SUDO39_ASKPASS for non-interactive sudo -A
• Structured audit logging to stderr for all executions and policy changes
• No-password-in-context design: credentials never flow through MCP