v1.18.52
v1.18.52
- Clean up forked tool process trees and IPC files when callbacks fail, with bounded descendant termination.
- Make host Grep/Glob honor repository ancestor and nested
.gitignorerules without losing traversal limits. - Classify normalized tool inputs fail closed when permission prompts may run, and preserve read-receipt/worktree/Git/Bash/MCP safeguards.
- Add regression coverage for search parity, callback cleanup, process-tree cancellation, and parallel safety classification.
Validated with composer validate --strict, composer audit --format=plain, composer run lint, composer test, and the SDK public API snapshot verifier.