v0.7.0

Structured Messages & Worktree Safety

Teammates now report results in a structured XML format, making it easier for the lead to parse status, summary, and branch info.

• Structured completion messages with <task-result> format
• Read-only agents (explore/plan) get a shorter tool list, saving context tokens
• Extracted requireLead/requireTeamMember validation helpers across all 13 tools

Dirty Worktree Protection

team_cleanup now checks for uncommitted changes before removing worktrees. If any teammate has uncommitted work, cleanup blocks and warns — even with force: true. Pass acknowledge_uncommitted: true to proceed after reviewing.

• team_shutdown warns when a teammate has uncommitted changes
• team_cleanup blocks on dirty worktrees, lists affected members and branches
• force: true no longer bypasses the uncommitted check (it only aborts sessions)
• Periodic stale worktree GC in the watchdog for shutdown/error members past threshold

Also in this release

• Canonical worktree root guard — prevents worktrees-inside-worktrees
• Workspace directory shown in team_status output
• Worktree paths allowlisted in session permissions (no more approval prompts)
• README updated: install instructions now include required external_directory permission setup
• 370 tests (up from 350)

Full Changelog: v0.6.5...v0.7.0