Story

Release highlights

• Refused batch script CLI spawning on Windows : Blocked spawning .bat / .cmd CLI scripts (including npm's claude.cmd shim) on Windows to prevent command injec...
• Windows cmd.exe metacharacter rejection : resume and session_id values containing cmd.exe metacharacters ( & | < > ^ % ! " ) or newlines now raise ValueError...
• Dash-prefixed extra_args value binding : extra_args now uses --flag=value form when the value starts with - , preventing a dash-leading value from being misi...