v1.5.0

What's Changed

Features

• Windows destructive command patterns — 22 new patterns (7 block, 15 ask) covering del /s /q, rd /s /q, rmdir /s /q, diskpart, PowerShell Remove-Item -Recurse -Force, reg delete, wmic delete, net stop, net user /delete, sc delete, bcdedit, icacls /grant Everyone, takeown, schtasks /delete, Stop-Service, Uninstall-Package
• Windows shell wrapper unwrapping — Extracts inner commands from cmd /c "...", powershell -Command "...", pwsh -c "..." before pattern matching
• Windows shell operation classifiers — Added write ops (copy, xcopy, robocopy, move, ren, icacls, attrib) and delete ops (del, rd, erase) to shell classifiers
• 144 total patterns (56 block, 88 ask) — up from 122 in v1.4.0
• 454 tests — all passing

Maintenance

• Added Buy Me a Coffee funding link
• Added HTML promo card for social media

Full Changelog: v1.4.0...v1.5.0