v0.2.0

Added

• overshare browse shows a shared session's latest link in the preview and the session viewer,
  and y prints the whole link in the footer, so it can be copied by hand in terminals without
  OSC 52 clipboard support.
• --include-system-prompt (with --mode full) shares Claude Code's system prompt, redacted like the
  rest and shown collapsed above the first turn. Instruction files (CLAUDE.md, AGENTS.md) are still
  never shared; docs/redaction.md explains why.
• The token rail's charts are easier to read and navigate: hovering a bar shows a card with its
  context split into cache read, cache write and uncached input (drawn to scale), its output and
  cost, any cache events and, for the turn chart, the prompt, a small chart of the turn's model calls
  and its tool calls. Model-call bars in the turn box now go to the step the call produced when
  clicked, and their card lists what the call did (thinking, reply, tool calls).
• The viewer's loading screen is a short log of what it's doing (fetching from the share's host,
  reading the format and size, rendering N turns), with a spinner on the current step and how long
  each finished step took. It waits 300ms before showing, so fast loads don't flash it, and a failed
  load marks the step that failed above the error.

Removed

• The viewer's timeline and hybrid design variants, and the IBM Plex Sans font only hybrid
  used. Links and saved defaults that name either fall back to the reader's own variant.

Fixed

• Following a link to a different share in the viewer shows the loading screen instead of leaving
  the previous session up until the new one renders. A slower earlier load no longer replaces the
  newer one when it finishes last.
• A share with a malformed tool group (its calls or commands not a list) no longer stops the
  whole session from showing: the transcript shows that turn as a placeholder, as it already did,
  and the token rail renders around it. A model-call card shows a step it can't read as
  "couldn't be shown" instead of not opening.

Security

• overshare serve and demo refuse requests whose Host names a domain other than localhost, an
  IP address, the --host value or a name passed to the new --allowed-host, so a web page can't
  read the served shares through DNS rebinding.
• overshare serve no longer serves files beside the viewer directory whose names share its
  prefix (e.g. viewer/dist/standalone.html via /s/..%2fstandalone.html).
• A Claude Code session rewound to before a longer stretch of work no longer shares the discarded
  branch: only the turns on the current branch are exported, in every mode. Before, when the kept
  branch held less than half the session's messages, every entry in the file was exported. An
  unknown or empty --leaf is now an error (Claude Code and pi) instead of exporting the whole file
  or, for an empty one, the latest branch.