manuelschipper/nah v0.11.0 on GitHub

Added ask_fallback: native for delegating unresolved asks to an interactive
runtime's native permission flow. Claude Code can use it with Auto Mode;
interactive Codex accepts it as its native default behavior, while headless
Codex resolves it to block and records the configured and effective modes.

nah run claude now allows Claude Code Auto Mode flags and classifies those
launches as guarded agent execution. Permission and hook bypass modes remain
rejected.
Codex apply_patch deletions now follow the filesystem_delete policy, so
project-local deletes use the same default behavior as rm through Bash.
Simplified the documentation navigation by removing the team and unattended
guides, promoting How it works and Threat model, consolidating content-pattern
configuration under Safety lists, and trimming the optional LLM reference.

sensitive_paths_default: block now escalates built-in ask-sensitive paths
and basenames even when no explicit sensitive_paths entries are configured.