2.1.89

Removed: Get-DnsClientCache and ipconfig /displaydns from auto-allow (DNS cache privacy)

Added:

• "defer" permission decision to PreToolUse hooks — headless sessions can pause at a tool call and resume with -p --resume
• CLAUDE_CODE_NO_FLICKER=1 environment variable for flicker-free alt-screen rendering
• PermissionDenied hook that fires after auto mode classifier denials
• Named subagents to @ mention typeahead suggestions
• MCP_CONNECTION_NONBLOCKING=true for -p mode and bounded --mcp-config server connections at 5s
• Auto mode: denied commands now show notifications and appear in /permissions → Recent tab with retry option
• /buddy command for April 1st

Fixed:

• Edit(//path/**) and Read(//path/**) allow rules to check resolved symlink targets
• Voice push-to-talk activation for modifier-combo bindings and Windows WebSocket upgrade issues
• Edit/Write tools doubling CRLF on Windows and stripping Markdown hard line breaks
• StructuredOutput schema cache bug causing ~50% failure rate
• Memory leak from large JSON inputs retained as LRU cache keys
• Crash when removing messages from very large session files (>50MB)
• LSP server zombie state after crash
• Prompt history entries with CJK or emoji being silently dropped at 4KB boundaries
• /stats undercounting tokens and losing historical data
• -p --resume hangs and -p --continue not resuming deferred tools
• claude-cli:// deep links on macOS
• MCP tool errors truncating multi-element error content
• Skill reminders and system context being dropped when sending messages with images via SDK
• PreToolUse/PostToolUse hooks receiving relative paths instead of absolute paths
• Autocompact thrash loop with actionable error
• Prompt cache misses in long sessions
• Nested CLAUDE.md files being re-injected multiple times
• --resume crash with tool results from older CLI versions
• Misleading "Rate limit reached" message
• Hooks if condition not matching compound commands or env-var prefixes
• Collapsed search/read group badges duplicating during parallel tool use
• Notification invalidates not clearing immediately
• Prompt disappearing after submit during background messages
• Devanagari and combining-mark text truncation in output
• Rendering artifacts after layout shifts
• Voice mode microphone permission on macOS Apple Silicon
• Shift+Enter submitting instead of newline on Windows Terminal Preview
• UI jitter during streaming in iTerm2 with tmux
• PowerShell tool incorrectly reporting failures on Windows 5.1
• Out-of-memory crash with Edit tool on very large files (>1 GiB)

Improved:

• Collapsed tool summary showing "Listed N directories" for ls/tree/du
• Bash tool warning when formatter/linter modifies previously-read files
• @-mention typeahead ranking source files above MCP resources
• PowerShell tool prompt with version-appropriate syntax

Changed:

• Edit now works on files viewed via Bash sed -n or cat without separate Read call
• Hook output over 50K characters saved to disk instead of injected
• cleanupPeriodDays: 0 now rejected with validation error
• Thinking summaries no longer generated by default in interactive sessions
• Task notifications preserved when backgrounding with Ctrl+B
• PowerShell external-command arguments with quotes and whitespace now prompt instead of auto-allow
• /env now applies to PowerShell tool commands
• /usage hides redundant "Current week (Sonnet only)" bar for Pro and Enterprise
• Image paste no longer inserts trailing space
• Pasting !command into empty prompt enters bash mode

Documentation:

• TaskCreated hook event and blocking behavior documented