Added
- Add /config to open a sidebar configuration screen in the CLI
- Add /sandbox Network host allow/deny rules without replacing your configured upstream proxy
Improved
- Apply managed Edit and Write rules to recognized native shell redirections and supported in-place sed operations
- Show active scheduled prompts in the CLI footer by default
- Use /worktree, /move, and --worktree without enabling experimental mode
- Make /collect-debug-logs and --collect-debug-logs available to all users
- /sandbox disable turns the sandbox off for the current session when your organization's policy allows bypass
Fixed
- Plugin agents expand ${PLUGIN_ROOT} placeholders in mcp-servers frontmatter
- Skills from directories added with --add-dir are no longer missing when a skills load races the directory registration
- A relative
--additional-mcp-config @<file>path now resolves against the session working directory under--resume=<id>and--worktreeinstead of the launch directory, and~/expands. - Windows sandbox denials of loopback and local network access prompt to re-run the command outside the sandbox
- Approved sandbox retries are labeled sandbox relaxed while network policy stays enforced, or sandbox bypassed when fully unsandboxed; failed bypasses explain that host permissions still apply
- Cancelling an MCP tool call now notifies the MCP server and cleanly ends the turn.
- Scrolling the wheel with mouse capture off no longer walks backwards through prompt history in terminals that report DEC private mode 1007 (alternate scroll), such as Ghostty
- MCP OAuth requests additional scopes when needed and retries the tool call
- Changing reasoning effort now takes effect before the next logical request in an active turn, while retries keep their original effort
- Automatic compaction now saves a checkpoint that appears in /session checkpoints
- Windows CLI artifacts run without requiring the Visual C++ Redistributable
- Keep terminal theme colors consistent at startup and during live appearance changes
- Interactive mode submits startup prompts even when model discovery is still loading.
- MCP tools with boolean property or array-item schemas work with Gemini instead of causing a 400 error
- An enterprise-managed sandbox policy delivered by MDM or a managed settings file no longer discards sandbox.allowBypass, so bypass prompts and /sandbox disable work as the policy intends
- The managed sandbox startup notice no longer says sandboxing can't be turned off when your organization's policy allows a session opt-out; it names /sandbox disable instead
- Viewing or attaching an image in a format the model cannot read, such as BMP or TIFF, no longer leaves the session unable to send any further message; the image is now reported as an unsupported format that you can convert to PNG, JPEG, WebP or GIF
- The YOLO status indicator reflects the active session after switching sessions
- Computer Use now stays in sync across /computer and whole-plugin /plugin toggles.
- Pressing Enter in the Sessions tab now foregrounds the highlighted session, even when a background refresh rebuilds the list at that moment, instead of sometimes opening a different session
- Indexed search on Windows prevents new disk-space leaks when updating indexes
- Keep long /ask responses visible after generation completes
- When session history is truncated or compacted just as a turn finishes, the "Working" indicator now clears instead of staying up for the rest of the session
- COPILOT_ALLOW_ALL no longer refuses to start the CLI on values such as 1, 0, yes or an empty string, and falsey values now disable automatic tool approval instead of enabling it