Security hardening release.
- Auto-mode's dangerous-command denylist was trivially bypassable
(/bin/rm -rf /,bash -c 'rm -rf /',find / -delete,
curl URL | sh,chmod -R 000 /, and others all skipped
confirmation). Replaced with an allowlist::auto readonly(new
alias for:auto on) now only skips confirmation for a fixed set of
read-only programs with no shell metacharacters. Anything else
always asks. - Left-panel output is no longer sent to the AI engine as context
unless explicitly enabled with the new:context on|off|show|clear;
stored output is scanned for common secret patterns first
(best-effort). - terminal-system now runs on its own dedicated tmux server instead of
the user's default one, so its mouse/copy-paste key bindings no
longer leak into other tmux sessions. chmod -R <mode> /is now flagged as dangerous for any mode, not
just 777.xclipmoved from Depends to Recommends. Man page and
docs updated.
Full details: CHANGELOG.md