Skip to content

v7.4.2 — The Full-Audit Release

Latest

Choose a tag to compare

@kzicherman kzicherman released this 01 Aug 23:15
· 38 commits to main since this release
67b924e

An 11-agent, adversarially-verified audit swept every CCC subsystem — hooks, console, vendors, dependencies, docs, click-first UX, tests — and everything confirmed got fixed across PRs #89, #91, #92, #93.

Highlights

🔧 The compaction error is gone. Every /compact with Commander installed triggered "Hook JSON output validation failed" — the PostCompact hook emitted output Claude Code's validator rejects (its hookSpecificOutput union has exactly 20 events, verified against the CLI binary itself, and PostCompact isn't one). The emit layer now guards the union and degrades gracefully, and the contract test drives every emitter under its real registered events so this class of bug can't ship green again.

🤖 Mission Control tells the truth. Finished subagents used to stay "working" forever — only 78 of 3,337 telemetry rows ever joined start↔stop. The roster now joins on agent_id with a backward-compatible fallback. Staleness warnings can actually fire, and the Memory tab's "Shown" tile reports what's actually rendered.

🔑 Keyless everywhere, for real. Every shipped surface — MCP guide, Cursor/Windsurf adapters, config templates, example configs — now tells one story: the hosted MCP is free for everyone, no account, no license key, 100-call/mo anti-abuse cap, silent local fallback. A test now pins the templates keyless.

🔐 Security: the rtk vendor picked up 6 upstream security fixes (v0.44.2 — history DB and logs are now owner-only); root npm audit is 0 vulnerabilities; site advisories cut 19→12; /ccc-connect credentials are captured via a hidden-input terminal command with proper JSON escaping — never through chat.

🎯 Click-first gaps closed: /ccc-tuneup reachable by chips, all 11 domain routers picker on bare invocation, hub counts computed instead of hardcoded, 4-chip max respected everywhere.

📦 8 vendor refreshes · docs truth pass (real counts: 82 skills / 44 handlers) · version gate learned 4 new blind-spot patterns.

Full detail: CHANGELOG.md

Upgrade: Settings → Plugin Marketplace → update commander, or /ccc-update for the guided walkthrough.