Release notes

FEATURE

Print mode now understands slash commands and skills

When you want to hand a review to print mode (a mode that runs one command and returns its result without opening a window), you can now type -p "/my-skill review this diff" directly. The opening slash command is recognized, and its skill is expanded and applied instead of being handed to AI as literal text. A newline or Tab between command and arguments also works; if you need to send slash text unchanged, add --disable-slash-commands. It is like a mailing counter finally separating recipient and address fields instead of treating the whole label as a note.

FEATURE

Start chatting while MCP tools finish loading

When you open an interactive chat and an MCP server is slow or stuck, your first turn no longer waits at the door with it. MCP (Model Context Protocol, a protocol that connects AI to outside tools) servers load in the background for an interactive session. Headless and one-shot runs still wait, so their only scripted turn sees the complete toolset. When a connection returns after dropping, MCP no longer makes you complete authentication all over again. It is like starting passenger check-in while the baggage carts catch up, while a one-flight charter still waits until every bag is aboard.

FEATURE

Approved commands stop asking again, and temp files can be written

Within one conversation, a command pattern you have already approved no longer makes you press Allow again when that pattern appears later. The approval lasts for the conversation; it does not open the gate to every command, only later commands matching the approved pattern. Another common interruption is gone too: the default system temporary directory now includes permission to create and update files, not only read them. It is like a visitor badge: security remembers the kind of entry checked today, while a locker you could open but not put anything into finally gets its key.

BUGFIX

Hooks stop trapping work and fire only when they should

After you add a stop hook (a small program triggered by a particular event) to an automated flow, it can no longer trap work forever if it asks to continue every time. Once consecutive continuations reach your configured limit, that hook can no longer block and the turn ends normally. PostToolUse hooks are fixed too: they used to fire on non-tool steps such as user input and model replies, then ignore their configured matchers. They now act only under the right conditions. It is like a stage manager who kept calling curtain-call actors back and mistook audience chatter for a lighting cue; now curtain calls have a limit and cues require the right signal.

BUGFIX

Pasted blocks delete cleanly and artifact views return correctly

After pasting a long piece of text, the input can collapse it into one paste placeholder. Deleting it now removes the whole block. Before, the display removed one character at a time and left a visible fragment, while sending still submitted the full content, making it hard to know what had been deleted. The artifact viewer is fixed as well: syntax highlighting remains when you return from editing, and leaving artifact details returns you to the correct panel. It is like removing a sticky note in one piece instead of leaving a corner on the desk while its original remains hidden in a drawer, then returning to the same gallery after viewing an exhibit.

BUGFIX

Streaming JSON stops listing tools your build does not have

When your program consumes stream-json output from a headless run (a format that sends the run as JSON lines), its opening init event now lists only tools that are truly available in your build. Before, it could advertise tools that could not be found when work began, leaving a receiver that planned from the list on empty ground. This changes the tool sign at the starting line; it does not add tools, it makes the announcement match the toolbox at hand. Like an event map that no longer lists booths already removed, so visitors do not queue up only to find nothing at the door.

Original changelog

Original changelogPrint mode now understands slash commands and skills
Added slash-command and skill expansion to print mode, so a headless run such as `-p "/my-skill review this diff"` now resolves and applies the skill instead of sending it as literal text, with `--disable-slash-commands` to opt out.
Fixed slash commands not being recognized when separated from their arguments by a newline or tab, so a prompt starting with a command followed by a newline is now parsed as a command instead of being sent verbatim.
Original changelogStart chatting while MCP tools finish loading
Improved interactive startup so a slow or hanging MCP server no longer stalls the first agent turn, loading MCP servers in the background for the interactive session while headless and one-shot runs keep blocking so their single scripted turn still sees the full toolset.
Fixed MCP servers forcing a full re-authentication after a dropped connection.
Original changelogApproved commands stop asking again, and temp files can be written
Improved permission grants so a pattern approved at a prompt is recorded for the rest of the conversation, letting later commands that match it run without prompting again.
Improved the default system temporary-directory grant to cover writes as well as reads, so agents no longer trigger a permission prompt when creating or updating files there.
Original changelogHooks stop trapping work and fire only when they should
Fixed stop hooks that always block hanging the agent forever; after a configurable number of consecutive continuations, the hook can no longer block and the turn ends normally.
Fixed `PostToolUse` hooks firing on non-tool steps such as user input and model responses, which also caused them to ignore their configured matchers.
Original changelogPasted blocks delete cleanly and artifact views return correctly
Fixed deleting into a collapsed paste placeholder removing one character at a time, which left a visible fragment in the prompt while the full pasted content was still submitted; the block is now deleted atomically.
Fixed the artifact viewer losing syntax highlighting when returning from the editor view, and returning to the wrong panel when exiting the artifact detail view.
Original changelogStreaming JSON stops listing tools your build does not have
Fixed the headless `stream-json` `init` event advertising tools that are not available in your build.