1.1.12

• Added a heading outline to the artifact viewer, opened with t, so a long markdown document's structure is visible at a glance and you can jump straight to a section instead of scrolling.
• Added non-interactive answers for more read-only slash commands in print mode, so -p "/permissions", /hooks, /help, /changelog and /config each emit one tab-separated record per line — or a structured payload under --output-format json and stream-json — without starting an agent turn, spending quota or leaving a conversation behind, with /help listing exactly the commands print mode answers and /changelog printing the release notes.
• Added machine-readable output to the models and agents subcommands through an --output-format flag accepting json and stream-json, and moved their error messages and progress spinner off stdout so captured output contains only the list.
• Added a disable-slash-command: true flag for a skill's SKILL.md frontmatter, which hides that skill from the / menu and from /name resolution while leaving it discoverable and invocable by the model, so a large skill library no longer floods the command menu.
• Added rendering for alert callouts ([!NOTE], [!TIP], [!IMPORTANT], [!WARNING], [!CAUTION]) and for carousel blocks in markdown artifacts, which previously showed as raw markup.
• Improved terminal hyperlink support, enabling clickable links over SSH and in hyperlink-capable tmux, keeping word-wrapped URLs clickable past their first line, linking URLs that the markdown renderer had left as plain text including ones inside code blocks, no longer highlighting unrelated links together on hover, and fixing horizontal scrolling and text selection on lines that contain a link.
• Improved tool call headers so every native and MCP tool call carries a short summary of what it is doing instead of a bare name or a raw argument blob, with the same summary naming background tasks and subagents in the activity list and the matching action phrase describing the request in permission prompts.
• Improved headroom for large toolsets by raising the per-session limit on tool declarations, so heavy MCP, plugin and skill setups stop being rejected for having too many tools.
• Improved sign-in with Application Default Credentials by resolving the quota project automatically, so service-account logins work without extra configuration.
• Improved repository detection so a Git repository nested inside a larger multi-repository checkout resolves to the intended root, with submodules and worktrees covered.
• Improved headless -p runs so the agent settles a choice itself where it would otherwise ask, instead of stalling on a question nobody is there to answer.
• Improved the schedule tool by dropping the redundant Timer Cancelled notification when a one-shot timer with an early-termination condition is cancelled, and by naming both the condition and the exact sender whose message satisfied it in the step result.
• Improved file paths in tool step lines by collapsing your home directory to ~ instead of truncating the front of the path, so the interesting end of a long path stays on screen.
• Fixed --mode being ignored in headless -p runs, where a valid value such as accept-edits or plan was never applied and an unrecognized value produced no warning at all.
• Fixed startup diagnostics being swallowed into the log file instead of reaching the terminal, including crash notices, the --conversation not-found warning, the --print and --prompt-interactive conflict, conversation load errors, and the --mode and --agent warnings.
• Fixed a character disappearing from your submitted prompt where it wrapped at the terminal's right edge, caused by the echoed prompt being indented after it had already been wrapped to the full width.
• Fixed file citations in a response losing their line numbers, so a cited range renders as path:10-25 again instead of just the file name.
• Fixed a write-in answer in a multi-select question discarding the boxes you had already ticked, and fixed a stale write-in being submitted after you went back to a predefined option.
• Fixed large background tasks crowding out the prompt by limiting each active item below the input box to a single line.
• Fixed corruption of config.json by writing user config atomically, so a crash or a concurrent writer can no longer leave a truncated file that silently breaks settings persistence.
• Fixed the CLI giving up on a slow OS keyring after one second and falling back to empty storage, which forced a re-login; it now waits five seconds, as every other keyring operation already did.
• Fixed conversation preview titles derived from the first user message by cutting them at the first line and capping them at 500 characters, so a large pasted or scripted prompt no longer produces a multi-megabyte stored title.
• Fixed a crash on Windows when resolving the conversation transcript path, by honoring the path's drive letter in the trajectory log artifact converter.
• Fixed a subagent going silent on its parent when its own message failed to send, and fixed the parent being handed an empty notice when a subagent went idle without a final response.
• Fixed the read_url_content tool leaking a connection on every call, which could eventually exhaust the machine's available ports.
• Fixed the status line reporting model quota that was always one fetch out of date, so it now matches the quota you actually have left.