v2.0.1

• Expand skill tool surface, harden hook timeout, document sqlite requirement (#22)
• Wire claude plugin validate into CI + pre-commit (#21)

v2.0.0

Breaking changes

• Default query semantics: phrase -> AND across tokens. Quoted strings remain
  literal phrases.
• Default --limit: 50 -> 10.
• JSON envelope: every command now returns {schema_version: 2, <command>: {...}}.
  v1 schema_version: 1 envelopes are gone.
• convo inspect --full semantics changed: was "no excerpt truncation," now
  "no message cap."
• Excerpt format: \x02HIT\x02 sentinels replaced with [match] brackets in
  prose; indices: [[start, end]] char offsets in JSON.

Added

• Default output is structured prose (--format=prose). JSON via
  --format=json or --json.
• --excerpt-chars N configures snippet window (default 600).
• --fields ts,session,command,excerpt projects fields tab-separated, one hit
  per line.
• --session <prefix> filter restricts search to one session.
• --tool is now prefix-match by default. --tool-exact for exact matching.
• --since accepts ISO dates (2026-04-01) in addition to shorthand
  (7d/24h).
• --project accepts basename/substring shorthand; ambiguous matches return a
  helpful error.
• convo inspect --timeline shows per-message structured view with relative
  timestamps.
• New commands: convo projects, convo tools, convo sessions for
  discovery.
• 0-hit responses include deterministic suggestions (hyphen-split, time-widen,
  filter-drop).
• Grep-style flags (-A, -B, -C, -E, -i) and invented flags
  (--quiet, --by-caller, etc.) rejected with helpful hints.

Removed

• +token no longer changes behavior (was AND-required; now AND is default).
• Top-level envelope keys outside the <command> wrapper.

v1.1.0

Added

• convo info --help now has an epilog describing the output sections.
• convo stats --help epilog now lists the hooks family alongside the
  legacy five.
• index, search, inspect, and stats now show concrete Examples:
  blocks in their --help output.
• convo --version now prints a gh-style three-line block: name+version,
  install path, repo URL.
• tests/test_stats_hooks.py covers the previously-untested stats hooks
  analytics module (counts by hook/decision, since/project filters).
• tests/test_db_migrate.py::test_upgrade_v1_to_v2_preserves_data exercises
  the v1→v2 migration on a populated DB.
• seed_guard_decision() helper in tests/_seed.py for guard_decisions
  rows.
• .gitattributes enforces LF line endings on text files for Windows
  parity.

Changed

• convo index-guard --path /missing.jsonl now exits 1 with
  convo: path not found: ... to stderr. Auto-discovery with no --path
  argument and no log present is unchanged (clean exit 0).
• .github/workflows/ci.yml test+smoke jobs now use setup-uv's
  python-version input instead of a separate uv python pin step,
  saving roughly 28 s per Windows run.
• __main__.py now also catches OSError errno 22/232 on Windows for
  broken-pipe handling.
• Three Windows skips in tests/test_db_snapshots.py converted from
  inline pytest.skip() to @pytest.mark.skipif.

Fixed

• .github/workflows/codeql.yml gains a top-level permissions: contents: read
  default. Closes Scorecard TokenPermissionsID alert.
• .github/workflows/ci.yml actionlint installer is now SHA-pinned instead
  of tag-pinned. Closes Scorecard PinnedDependenciesID alert.
• .claude/hooks/pre-bash-block-py-writes.sh strips shell line comments
  before regex-matching (was triggering false positives on path tokens
  inside # comments) and now also matches absolute-path redirects under
  src/convo/ and tests/.
• .claude/hooks/post-edit-semgrep.sh now branches on semgrep's exit code
  instead of grepping its stdout for emoji/keywords (the prior approach
  silently passed if output formatting changed).
• All four .claude/hooks/*.sh scripts now use set -euo pipefail.

Documented

• SECURITY.md notes that POSIX mode bits (0o600) are silently ignored
  on Windows; the DB inherits the parent directory's NTFS ACL.

v0.1.0

Initial public release.

Added

• convo index walks ~/.claude/projects/<slug>/*.jsonl and populates a local
  SQLite database (~/.claude/convo.db by default; CONVO_DB overrides).
  Idempotent via sha256; --full forces re-index. Per-file errors are contained.
• convo info reports schema version, row counts, last index time, top projects,
  and snapshot directory size.
• convo search "<query>" [--since SPAN] [--project P] [--tool T] [--limit N]
  runs FTS5 trigram search across messages, tool calls, and tool results.
  Supports +required / -excluded prefixes.
• convo inspect <session-id> renders a session timeline with inline tool calls.
  Accepts a UUID prefix; --full dumps untruncated content; --latest resolves
  the most recent session.
• convo snapshots lists snapshot files with name | size | age columns.
• convo backup <dest> / convo backup --auto writes a VACUUM INTO snapshot.
  Snapshot files are written 0600.
• convo restore <src> / convo restore --latest performs an atomic-swap
  restore from a snapshot; the source file is preserved.
• convo stats <family> aggregates over the corpus. Families: tools,
  commands, sessions, files, model.
• convo summary composes all five stats families into one report.
• convo diff compares the current window against the previous window of
  equal length and reports per-bucket deltas.
• --json on every read and write command emits
  {"schema_version": 1, "<command>": {...}}. Modeled errors emit
  {"schema_version": 1, "error": {"message": "..."}} on stdout.
• --version prints the installed CLI version.
• Claude Code plugin packaging under .claude-plugin/ with convo-search and
  convo-summary skills and a thin bin/convo wrapper that defers to the
  convo binary on PATH.

Known limitations

• Windows: os.replace against an open DB raises PermissionError. CI
  runs on Ubuntu and macOS only.
• Cross-filesystem restore: $CONVO_BACKUP_DIR and ~/.claude/convo.db
  must share a filesystem; the atomic-replace requires it.