v0.9.1

What's new

git-safe: --no-verify bypass detection

Blocks git commit --no-verify, git push --no-verify, and -n shorthand. Prevents agents from skipping pre-commit hooks and GPG signing. Works in both bash and PowerShell hooks.

worktree-guard: squash merge false positive fix

Two-tier detection replaces SHA-only comparison:

• Tier 1: git cherry for patch-level equivalence (single-commit squash, cherry-pick, rebase)
• Tier 2: per-file comparison for multi-commit squash where individual patches differ but combined result matches base

Fixes #40137.

116 PowerShell hook tests on Windows CI

Full test coverage for all four PS1 hooks (file-guard, git-safe, branch-guard, session-log) running on windows-latest. Tests caught 2 real bugs: case-insensitive -match needed in git-safe PS1, and --force-with-lease detection gap.

51 documented platform limitations

3 new entries since v0.9.0: hook input lacks agent context (#40140), ExitWorktree squash merge false positive (#40137), runtime deletes .kiro/ directories (#40139), failed marketplace auto-update deletes plugins (#40153).

Stats

~1670 total tests (up from ~1550 in v0.9.0).

Full Changelog: v0.9.0...v0.9.1