Skip to content

v0.3.1-beta - audit hardening (rebuilt binaries)

Pre-release
Pre-release

Choose a tag to compare

@phase3dev phase3dev released this 09 Jun 09:55
· 28 commits to main since this release
b12baf2

Same two fixes as v0.3.0-beta (empty thinking summaries on Opus 4.7/4.8, missing context-usage icon), with the launchers hardened per an external security/robustness audit (PR #4). No behavior change for normal use.

  • Windows wrappers no longer shell out to claude.cmd/.bat: they resolve the npm shim to node + cli.js and spawn with shell:false, so argument metacharacters can no longer be interpreted locally.
  • --flag=value argument forms handled; CC_THINKING_DISPLAY validated; context-icon patch skips ambiguous bundles.

Assets: claudemax.exe (both fixes), claude-think.exe (thinking only), claude-context.exe (icon only), SHA256SUMS.txt.

Verify a download with sha256sum -c SHA256SUMS.txt (or certutil -hashfile <exe> SHA256 on Windows).