v0.11.0

What's New

22 commits since v0.10.0. This release ships three weeks of safety improvements, new enforcement tools, and the migration to Claude Code's recommended hook output format.

Breaking Format Migration

All 27 hook files now use hookSpecificOutput.permissionDecision:deny instead of the deprecated decision:block format. The old format still works but may be removed in a future Claude Code version. If you run installer upgrade, your hooks will be updated automatically.

enforce-hooks

• --template command: Generate starter configs with --template minimal (3 rules), recommended (8), or strict (12)
• require-prior-read-file condition: Enforce that the model reads CLAUDE.md/AGENTS.md before acting
• Common Problems table: 9 frequent issues mapped to solutions in README
• Read-only audit mode recipe, expanded command recognition, dot-prefixed path fix

safety-check (15+ new warnings)

• v2.1.88 detection (pulled release: commands, skills, SessionStart all broken)
• Plan-mode + bypass permissions overlap (#41545)
• Plugin scope leak (#41523), MCP silent rejection (#41528)
• Hook timing, self-execution, worktree GIT_INDEX_FILE leak
• Shareable summary block for easy copy-paste audits
• And more: settings.local.json desync, PermissionDenied event, background agents, ripgrep bypass

bash-guard

• pip --target and --user sandbox escape detection
• Deep path traversal blocking (4+ levels of ../)

installer

• check subcommand: download and run safety-check audit in one command

Bug Fixes

• grep -c zero-match arithmetic error on WSL/Linux (#4, thanks @floatinglogic)

Documentation

• 6 new Known Limitations in enforce-hooks README (#41545, #41530, #41523, #41528, #41509, #41526)
• README troubleshooting entries for v2.1.88, hook stderr, PowerShell 7+

Stats

195 Rust tests + ~1736 hook tests (bash + PowerShell). 16 stars, 4 external contributors.

Full changelog: v0.10.0...v0.11.0

Full Changelog: v0.10.0...v0.11.0