Deep-link injection guard: --handle-uri invocations with extra arguments after the URI are now rejected with an explanatory message, blocking URI-based argument injection. (search for "claude: rejected deep-link invocation — unexpected arguments after the URI")
Artifact upload precondition retry: Uploading an artifact now detects HTTP 412 (create-only precondition failed) and returns a clear message: "upload 412: this version was already written (create-only precondition). Re-run publish to mint a fresh version." (search for "this version was already written (create-only precondition)")
Transcript third-party marker filtering: When sharing session history, transcripts containing third-party markers are now silently excluded rather than included verbatim. The raw transcript and recent sessions lists are independently filtered. (search for "rawTranscriptJsonl withheld from session history: contains_3p_transcript_markers")
Model [1m] suffix handling made case-insensitive: Functions that strip or normalize the [1m] model suffix now use case-insensitive matching (/\[1m\]/i), preventing edge cases where mixed-case suffixes were not recognized. (search for "/\\[1m\\]/i")
Interactive command detection message updated: The message shown when a command appears blocked on an interactive prompt now says "Stop this task" instead of "Kill this task", matching the updated UI terminology. (search for "The command is likely blocked on an interactive prompt. Stop this task")
tmux session cleanup label corrected: The worktree cleanup option now reads "Keep worktree, end tmux session" instead of the previous "Keep worktree, kill tmux session". (search for "Keep worktree, end tmux session")
