fix: Prevent command injection and stale state in test runner

apps/ui/src/components/ui/test-logs-panel.tsx

@@ -61,6 +61,12 @@ function getStatusIndicator(status: TestRunStatus | null): {
         className: 'bg-blue-500/10 text-blue-500',
         icon: <span className="w-1.5 h-1.5 rounded-full bg-blue-500 animate-pulse" />,
       };
+    case 'pending':
+      return {
+        text: 'Pending',
+        className: 'bg-amber-500/10 text-amber-500',
+        icon: <Clock className="w-3 h-3" />,
+      };
     case 'passed':
       return {
         text: 'Passed',

apps/ui/src/components/views/board-view/worktree-panel/worktree-panel.tsx

@@ -280,33 +280,36 @@ export function WorktreePanel({
   );
 
   // Handler to start tests for a worktree
-  const handleStartTests = useCallback(async (worktree: WorktreeInfo) => {
-    setIsStartingTests(true);
-    try {
-      const api = getElectronAPI();
-      if (!api?.worktree?.startTests) {
-        toast.error('Test runner API not available');
-        return;
-      }
+  const handleStartTests = useCallback(
+    async (worktree: WorktreeInfo) => {
+      setIsStartingTests(true);
+      try {
+        const api = getElectronAPI();
+        if (!api?.worktree?.startTests) {
+          toast.error('Test runner API not available');
+          return;
+        }
 
-      const result = await api.worktree.startTests(worktree.path, { projectPath });
-      if (result.success) {
-        toast.success('Tests started', {
-          description: `Running tests in ${worktree.branch}`,
-        });
-      } else {
+        const result = await api.worktree.startTests(worktree.path, { projectPath });
+        if (result.success) {
+          toast.success('Tests started', {
+            description: `Running tests in ${worktree.branch}`,
+          });
+        } else {
+          toast.error('Failed to start tests', {
+            description: result.error || 'Unknown error',
+          });
+        }
+      } catch (error) {
         toast.error('Failed to start tests', {
-          description: result.error || 'Unknown error',
+          description: error instanceof Error ? error.message : 'Unknown error',
         });
+      } finally {
+        setIsStartingTests(false);
       }
-    } catch (error) {
-      toast.error('Failed to start tests', {
-        description: error instanceof Error ? error.message : 'Unknown error',
-      });
-    } finally {
-      setIsStartingTests(false);
-    }
-  }, []);
+    },
+    [projectPath]
+  );
 
   // Handler to stop tests for a worktree
   const handleStopTests = useCallback(

apps/ui/src/components/views/project-settings-view/testing-section.tsx

@@ -64,12 +64,14 @@ export function TestingSection({ project }: TestingSectionProps) {
     setIsSaving(true);
     try {
       const httpClient = getHttpApiClient();
+      const normalizedCommand = testCommand.trim();
       const response = await httpClient.settings.updateProject(project.path, {
-        testCommand: testCommand.trim() || undefined,
+        testCommand: normalizedCommand || undefined,
       });
 
       if (response.success) {
-        setOriginalTestCommand(testCommand);
+        setTestCommand(normalizedCommand);
+        setOriginalTestCommand(normalizedCommand);
         toast.success('Test command saved');
       } else {
         toast.error('Failed to save test command', {