terminal-system v1.1.5

Security hardening release.

• Auto-mode's dangerous-command denylist was trivially bypassable
  (/bin/rm -rf /, bash -c 'rm -rf /', find / -delete,
  curl URL | sh, chmod -R 000 /, and others all skipped
  confirmation). Replaced with an allowlist: :auto readonly (new
  alias for :auto on) now only skips confirmation for a fixed set of
  read-only programs with no shell metacharacters. Anything else
  always asks.
• Left-panel output is no longer sent to the AI engine as context
  unless explicitly enabled with the new :context on|off|show|clear;
  stored output is scanned for common secret patterns first
  (best-effort).
• terminal-system now runs on its own dedicated tmux server instead of
  the user's default one, so its mouse/copy-paste key bindings no
  longer leak into other tmux sessions.
• chmod -R <mode> / is now flagged as dangerous for any mode, not
  just 777. xclip moved from Depends to Recommends. Man page and
  docs updated.

Full details: CHANGELOG.md

terminal-system v1.1.3

Changed

• Pane typing now sends 6-character chunks per tmux send-keys call instead of one call per character — ~6x fewer subprocess spawns. Measured: 0.664s -> 0.377s to type a 67-character command (avg of 5 runs).
• AI engine model is now overridable via TS_CLAUDE_MODEL / TS_CODEX_MODEL env vars (unset by default, same behavior as before).

Fixed

• tmux send-keys -l silently drops an unescaped ; when it is the last character of the argument. The old one-character-per-call typing loop dodged this by accident; batching into multi-character chunks exposed it. Now only a chunk-trailing ; gets the \; escape.

terminal-system v1.1.1

Fixed: package description and script header comments still said "pane" while the man page, --help text, and bundled doc README already used "panel" for the terminal-system UI concept; made consistent.

Install: sudo apt install ./terminal-system_1.1.1_all.deb (requires bash, tmux, xclip).