The getUsername() function now validates the system username against a safe regex pattern and falls back to "claude-code-user" if it contains unexpected characters, preventing potential issues with unusual usernames.
Evidence
Username validation with regex test — function xe() at line ~104573
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
