A Windows-focused fix release: native paths are no longer lost when guards inspect command-style input from unregistered tools, the Hermes Agent plugin now works on Windows, and audit-log project filtering handles Windows paths.
Fixed
- Fixed guards losing native Windows paths in command-style input from tools outside the adapter registry. Such input is now parsed with PowerShell rules on Windows, so policy and secret protection recognize targets such as
C:\Users\<user>\.cc-safety-net\policy.json. Metadata-onlylsandstaton these inputs stay allowed in Standard mode and are blocked in Strict and Paranoid. (#101, #102) - Fixed the Hermes Agent plugin erroring on Windows. The generated pre-tool-call hook no longer requests a POSIX-only process session that Windows rejects, and an analyzer timeout now terminates the analyzer process tree with
taskkilland still returns an explicit block. (#104) - Fixed
cc-safety-net logs --projectnot matching directories nested under the given project on Windows, where the filter assumed/path separators. (#106)