Cline CLI 3.0.63 closes a Windows binary-hijack path and stops subagents re-asking for approval

Three fixes in this build are worth the upgrade on their own.⁴ On Windows, a program planted in your workspace could run in place of the real one, because Windows resolves a bare program name by searching the working directory before PATH. Configured subagents no longer ask you to approve their own tool calls after you have already approved the delegation — with concurrent siblings that was also unsafe, since several children could act on one approval. And compaction now fires on the provider's reported token usage rather than a character estimate, which matters for dense content like disassembly or minified sources.

Relevant to: Anyone running the Cline CLI on Windows, and anyone who has delegated work to configured subagents.