v0.12.0

Known limits of --json in this release. Branch on the exit status, not on an ok field: expand --json success carries "ok": true, while search, list-repos and query success documents carry no ok field (every failure envelope is "ok": false). query --json exits 0 when the LLM request fails and the command falls back to the raw retrieved context; the fallback is only visible in the answer text. Argument and unknown-option errors exit nonzero with the structured envelope as described below. Tracked as agent-tasks df880cbc.

Security

• Bump hono (transitive, via @modelcontextprotocol/sdk) to 4.13.7,
  closing GHSA-gqvv-2mrq-wpjv, GHSA-g6gw-c38x-mqfc, and GHSA-crvj-82cr-hjcx.
• Bump vitest, @vitest/mocker, and @vitest/coverage-v8 (dev only) to
  4.1.11, closing GHSA-82fw-gwwq-j7x9.
• Bump qs (transitive, via @modelcontextprotocol/sdk and express) to
  6.16.0 in the lockfile, closing GHSA-x5fp-wj9c-mxmx and GHSA-4mjr-xmp4-gh2g.
• Bump fast-uri (transitive, via @modelcontextprotocol/sdk and ajv) to
  3.1.7 in the lockfile, closing GHSA-5jgf-p345-68v8, GHSA-f65p-4m7j-42xc,
  GHSA-fph4-wmhf-6fwf, and GHSA-jqff-g426-hqxp.

Added

• CLI query, search, list-repos, and expand now accept a per-command
  --json flag for stable machine-readable output. Search JSON includes full
  chunk text and explicit null values for missing metadata; diagnostics stay
  off stdout, and JSON-mode errors return a structured envelope with a nonzero
  exit status, including argument and unknown-option errors detected before a
  command action starts.