v1.1.0

Changes

• Protected paths — writes to .git, shell profiles (.bashrc, .zshrc, .profile, etc.), IDE configs (.vscode, .idea), package manager configs, hook configs, and other tool configs always go to the classifier regardless of allow rules. Matches Claude Code protected-paths behavior. Configurable via protectedPaths in settings with $defaults support.
• .gitignore and .gitattributes added to default protected paths.
• Symlink resolution — writes through symlinks (not-git → .git) are caught.
• Cross-project detection — writes to protected paths in other projects (e.g. ../other-project/.git/config) are caught via path segment scanning.
• Fixed missing repository.url in package.json.