0.42.2 (2026-06-05) Bug Fixes permissions: >&file redirect no allow + scope Gemini/Cursor config (ce36297) permissions: never auto-allow not evaluable cmds, defer to hosts (e1bc0bd) permissions: project-first config lookup for Gemini/Cursor (084fa84)