- Fix permission pattern: Bash(codeagent-wrapper*) → Bash(*codeagent-wrapper*) - Fix spec-init <<< here-string triggering Claude Code security check - Unify all platforms to use permissions.allow (remove Hook + jq dependency) - Auto-migrate: clean up old Hook and old permission entries on upgrade