Added
- Add support for enterprise allow-auto-only policy so /allow-all auto works while full allow-all remains blocked.
- Allow enterprise-managed sandbox policy to enforce a proxy URL while credentials remain user-controlled
Improved
- The /sandbox configuration dialog groups the git, gh, and (on macOS) keychain settings under a new Auth tab, and the settings keys moved from
sandbox.gitAuth/sandbox.ghAuthtosandbox.auth.git/sandbox.auth.gh. There is no migration: the old keys are ignored in settings files, and SDK requests that still send them are rejected as invalid rather than ignored - Added a
worktreeBaseRefsetting that controls whether/worktree,/worktree new, and--worktreestart from HEAD or the remote default branch. All three now default to HEAD; previously--worktreestarted from the remote default branch. - Model picker groups models into Recent, Recommended, New, and other sections, and Shift+Tab switches grouping views.
- Large monorepos now use tgrep (trigram-indexed grep for fast regex search in large codebases) instead of ripgrep
Fixed
- A tool directory inside your workspace that is on PATH (.venv/bin, node_modules/.bin, an in-repo GOPATH) no longer turns that part of the workspace read-only in the sandbox