4.2.8

What's new

Run initialization and locking

• nexus run init no longer overwrites an existing run unless --force is passed, protecting active run state.
• Stale lock reaping preserves replacement locks so concurrent lock handoffs stay safe.
• Task worktree IDs are validated to prevent path traversal and lossy collisions.

Verification hardening

• Verification plan filtering rejects outside-worktree symlinks.
• Targeted plans execute only validated targets.

Upgrade

npm install -g @mohammad154/opencode-nexus@4.2.8
nexus install

Then restart OpenCode.