ClawAI Coding Agent 1.92.0

1.92.0

Security hardening and a better command line. Commands the agent runs are still not sandboxed: a command can read or write anywhere you can. These changes make the built-in tools and the checks around commands much harder to get around.

• A folder you limit the agent to (write scope) now also covers .git, Windows alternate data streams (file.txt::$DATA) and renames of whole folders, so a limited agent can no longer plant a git hook or edit a protected file through an alias.
• After a command or a git action, the agent now checks for new files in .git (hooks and config) and directly beside your workspace, and removes them. It cannot see a write into a deeper folder or to another drive.
• Windows npm and npx argument quoting is fixed: arguments that could be read as extra commands (", &, |, <, >, ^) are refused.
• Git options that run other programs or write to files outside the workspace are refused.
• Searching with a regular expression or a glob can no longer freeze the agent; patterns that could run forever are refused.
• Approvals are strict: only a real "yes" approves. Anything else counts as "no".
• Numbers given to file tools must be whole numbers.
• Command line: --list-models shows the models you can use; busy servers are retried; the reason a run failed is shown; common tool name variants are understood; and a failing check shows the end of its output.

Verified release

• All split CI gates passed for commit .
• The attached VSIX is the exact final artifact produced after every CI gate passed.
• The same VSIX is published to the Visual Studio Marketplace.

Installation

Download , run Extensions: Install from VSIX... in VS Code, select the file, and reload the window.