What
Cross-session messaging resolves both paths before comparing directories when deciding whether a .sock file is a sibling socket, and rejects one further class of path outright. The local HTTP server now destroys the socket after logging a client response error instead of leaving it open.
Details
- The regexes matching PEM private-key BEGIN and END lines in the secret scanner moved from shared module-level globals, which carried match position between calls, into fresh per-call instances.
- The auto-mode classifier's latch for a rejected beta moved from a single module-wide boolean into per-session state, so one session no longer latches it for another.
- All four are unconditional.
Evidence
Client response error:
Strings lifted out of the shipped bundle, so the claim above can be checked against them.