2026-03-06
- Users are prompted for shell commands with potentially dangerous expansion or substitution use cases, additional guardrails for malicious exploits
- Block /share gist for EMU and GHE Cloud users with clear error messaging
- Elicitation enum and boolean fields now require Enter to confirm a selection, with a ✓ indicator for confirmed values vs ❯ for the browsing cursor
- MCP servers can now request users to visit a URL for out-of-band interactions such as OAuth flows or API key entry
- Improve explore agent precision and large repository support with better context sharing
- Diff mode displays cleanly on Windows with CRLF line endings