v4.0.7 - SQLite Job State & Windows Compatibility
Added
- SQLite-backed MCP job state storage — New
job-state-db.tswith WAL-mode SQLite for reliable job state persistence. Includes JSON fallback compatibility for environments without native modules. - Improved job management reliability — SQLite-first reads for check/wait/list/kill flows with automatic fallback to JSON file-based storage.
- PreCompact hook job summaries — Pre-compact hook now injects job summary data from SQLite into checkpoint content.
- Comprehensive test coverage — 74 new unit tests for job-state-db + 16 integration tests for SQLite job management.
Fixed
- Windows compatibility — Platform-aware path normalization (
toForwardSlash()),pathToFileURL()for bridge detection, cross-platform config/data directory resolution (getConfigDir()/getDataDir()), andshell: truefor CLI spawn on Windows. - Path traversal hardening — Strengthened
isAllowedPathand boundary checks withisAbsolute()guard for Windows drive-letter edge cases. Added security regression tests. - Worktree boundary validation — Hardened and clarified worktree boundary enforcement for MCP file/path handling across codex-core and gemini-core.
Changed
- Teleport command — Now uses
git worktree listandfs.rmSyncwith cross-platformpath.isAbsolute()checks. - LSP client — Updated URI construction to use
pathToFileURL()for Windows compatibility.
Full Changelog: v4.0.6...v4.0.7