MCP server "not found" errors now include a "Did you mean…" suggestion when a similarly-named server exists (search for "Did you mean \"")
Attachment processing is now skipped for bare-fork sessions, preventing unnecessary work when the fork has no display context (search for "t.options.bareFork")
The --scope project flag in plugin commands no longer produces a literal string with a backtick when the plugin source name is unsafe to embed in shell (search for Yg("plugin install", e.source, "--scope project"))
Sandbox Linux: Re-applied denyRead file masks are now properly re-exposed after denyWrite binds, preventing a class of read-protection bypass (search for "[Sandbox Linux] Re-applying denyRead file mask re-exposed by denyWrite bind:")
Worktree cleanup now properly unlinks configured reparse points before removal, and skips configured reparse points that fall outside the worktree path (search for "[worktree] unlinked configured reparse point before removal:")
auto-copy notification timeout is now correctly Math.max(existingTimeout, 4000) rather than always 4000ms, preventing the notification from being cut off when the underlying operation set a longer timeout (search for "Math.max(S.timeoutMs, 4000)")
