v0.7.0

New Features

• overlay: show full command with word-wrap instead of 120-char truncation
• overlay: smart regex suggestion for compound commands -- when some segments are already auto-allowed (readonly or existing rule), the suggested "yes/no always" rule targets only the uncovered portion (e.g. ls && weird_cmd suggests ^weird_cmd, not ^ls)
• overlay: OSC 777 desktop notification before popup (Ghostty, iTerm2, Konsole). Inside tmux, wraps in DCS passthrough so notifications reach the outer terminal. Requires set -g allow-passthrough on in tmux.conf

Bug Fixes

• compound: readonly segments count as covered in compound allow matching. go test ./... | tail -50 with user rule ^go now auto-allows (tail is readonly, filtered out). Previously fell through to overlay
• overlay: cross-session queue lock now lives at $(passthru_user_home)/passthru-overlay.lock.d instead of $TMPDIR. On macOS $TMPDIR is per-process so two CC sessions would not serialize. Fixes native-dialog cascade when session B runs while session A has an overlay open
• overlay: stale-lock recovery via mtime check. SIGKILLed hooks no longer leave zombie locks blocking every future overlay
• overlay: OSC notification writes to /dev/tty instead of stdout (stdout is captured by CC as the hook's JSON response, so the OSC sequence never reached the terminal)

New env vars

• PASSTHRU_OVERLAY_LOCK_TIMEOUT (default 180s)
• PASSTHRU_OVERLAY_LOCK_STALE_AFTER (default 180s)
• PASSTHRU_OVERLAY_UNALLOWED_SEGMENTS (set by hook, read by proposer)

#24 @nnemirovsky

v0.6.0

New Features

• compound command splitting for Bash tool matching (mirrors CC's splitCommand)
• read-only Bash command auto-allow with path validation (cat, head, tail, ls, etc.)
• auto-allow Agent, Skill, Glob, and WebSearch as internal tools
• anchored overlay-proposed Bash regexes with CC safe character class
• allowed_dirs schema support with bootstrap import of CC's additionalAllowedWorkingDirs
• overlay queue lock for serializing concurrent permission prompts
• OSC 777 desktop notification before overlay prompt (Ghostty, iTerm2)

Improvements

• security hardening: redirect bypass, path traversal, tilde expansion, bash 3.2 compat
• validate_rules and verify.sh enforce absolute paths for allowed_dirs
• find readonly regex blocks -fprint/-fprintf/-fls write predicates
• quote-aware redirect stripping in command splitter

#22 @nnemirovsky

v0.5.3

What's Changed

• feat(overlay): project-scope default + Tab toggle for rule scope by @nnemirovsky in #20

Full Changelog: v0.5.2...v0.5.3

v0.5.2

What's Changed

• feat(overlay): two-field rule editor, per-tool input display, Skill auto-allow by @nnemirovsky in #19

Full Changelog: v0.5.1...v0.5.2

v0.5.1

What's Changed

• chore(plan): archive overlay + ask support plan by @nnemirovsky in #16
• fix(overlay): pass env vars through temp file for tmux/kitty/wezterm popups by @nnemirovsky in #17
• fix(overlay): arrow-key dialog, human-readable input, dynamic popup height by @nnemirovsky in #18

Full Changelog: v0.5.0...v0.5.1

v0.5.0

What's Changed

• feat: terminal overlay for permission prompts + ask rule support by @nnemirovsky in #15

Full Changelog: v0.4.3...v0.5.0

v0.4.3

What's Changed

• fix(list): wrap long regex cells instead of truncating by @nnemirovsky in #14

Full Changelog: v0.4.2...v0.4.3

v0.4.2

What's Changed

• feat(audit): classify failed tool calls via PostToolUseFailure hook by @nnemirovsky in #13

Full Changelog: v0.4.1...v0.4.2

v0.4.1

What's Changed

• docs: overlay + ask + bootstrap hint + PostToolUseFailure plan by @nnemirovsky in #11
• fix(hint): re-fire bootstrap hint until all settings entries imported by @nnemirovsky in #12

Full Changelog: v0.4.0...v0.4.1

v0.4.0

What's Changed

• feat: add /passthru:list and /passthru:remove commands by @nnemirovsky in #10

Full Changelog: v0.3.1...v0.4.0