What's Changed
Security
- team: Sanitize/validate
teamNamebefore filesystem and shell usage - team: Escape env values in legacy
launchCmdpath - team-server: Enforce
job_idvalidation in status/wait handlers
Bug Fixes
- launch: Stop spawning redundant OMC tmux HUD pane
- hooks: Treat non-zero exit codes with valid stdout as warning, not error
- hooks: Inject continuation guidance in PostToolUseFailure hook
- pre-compact: Pass
cwdexplicitly to job-state DB queries - team: Unify task storage paths with canonical
getTaskStoragePath - team: Make tmux worker bootstrap platform-aware
- team: Use correct base path in
validateResolvedPathfor task dirs - team: Handle outbox rotation edge case for
maxLines <= 1 - team: Suppress team continuation during explicit cancel
- team: Avoid implicit worker-timeout cleanup guidance
- persistent-mode: Scope idle notification cooldown by session
- persistent-mode: Enforce non-negative bounds for
sessionIdleSeconds - mode-registry: Preserve foreign session marker files in
clearModeState - installer: Quote node/script paths in generated command strings
- windows: Replace WMIC-only process queries with fallback strategy
Other
- chore: Remove unused imports and dead code
- docs: Align Windows support policy messaging
- test: Clean up outbox files in team-status test, new security test coverage