v1.0.49

1.0.49 — 2026-10-02

Bug Fixes

• Hook permission prompts now appear regardless of approval mode.
• Web searches, fetches, and image generation now correctly respect the prompt_policy setting and rule decisions before prompting.
• Allow once in permission cards now applies only to the next shell command instead of the whole session.
• pkill -f and pgrep -f commands are now rejected earlier when the pattern would kill their own shell wrapper.