janhq/jan v0.8.7 on GitHub

Jan v0.8.7: shell switch, image size limit, and fixes

A minor update to v0.8.6. Your data and settings carry over; one MCP clean-up runs on first launch (below).

Turn the shell tool off in chat. The chat input's tool menu has a Shell switch. Off, the model is not given the shell tool; web search, fetch and your MCP tools keep working. On by default, and shown when the shell can run sandboxed and the model supports tools (#9222).
A separate size limit for images. Settings > Attachments > Max Image Size (MB): default 10, range 1 to 100 (#9312).
Built-in subagents for the Jan agent: explore (read-only by default), research, review and debug, each with its own model (#9261).

A thread no longer leaves its project when you attach a document (#9197, thanks @enkynakamura).
Pasted code with @decorators is sent as typed; only an @ followed by a real file or folder is a reference (#9291).
Stop ends the whole turn, including a tool that is running or waiting for approval (#9241).
A web page read by the built-in fetch tool is kept within the model's context window (#9283).
Chat with a local model no longer fails behind a proxy or VPN: requests to Jan's own engine always go direct (#9182).
Windows: a ^ in a command name (cm^d runs cmd) now always asks for approval (#9315).
macOS explains why Jan asks for Local Network access (#9318).
The sidebar's Jan label is back on Windows and Linux (#9242).

On first launch, the hosted Exa MCP server that v0.8.3 added to the default list is removed. Servers you added, and an Exa entry you configured with your own key, are kept (#9010).

A sandboxed shell command can ask to run outside the sandbox, with your approval each time (#9239).
A tool call outside a run's allowed_tools is refused (#9254); a subagent's permission prompt is denied when nobody can answer it (#9259).
Windows: edits match CRLF files, and unusable file names such as con.txt are refused (#9262, #9263).
jan cli mcp add works on a fresh install (#9257); an MCP server that never answers is given up on (#9281).
Compaction summaries use your small model when one is set (#9252); the terminal UI gains search and clearer subagent and background-command rows.

On NVIDIA GPUs, the engine logs the driver version at start, and a crash caused by a driver too old for the engine says to update the driver.
A model download stopped by a network error says why in more cases (#9294), and a failed model-list fetch records the address it could not reach in the app log (#9292).

With Shell off, a model that calls the shell anyway ends its reply instead of continuing without it (#9319).
Auto compact needs Max Context Tokens set for remote models; Jan does not detect a remote model's context window yet (#9317).
Local models do not run on Intel Macs, as in v0.8.5.

Full Changelog: v0.8.6...v0.8.7