Added
- Open /share without arguments to view a full-screen action menu for sharing the current session
Improved
- /sandbox can keep sandboxing enabled for the current session without enabling it globally
- Trusted repository plugins install and update automatically before chat runs.
- Rename the built-in browser plugin to browser-use and keep existing browser plugin preferences working after upgrade
- Sandbox allows local network access by default so commands can reach localhost and private-network services.
Fixed
- Plan, autopilot, and shell mode badges stay visible while startup components load and the agent works. The badge replaces the mode suffix that used to trail the activity text (
Working - plan), and the startupLoading:row now truncates its diagnostics to keep the status row on one line - Sandboxed commands can write package and build caches when developer tool access is enabled.
- Windows CLI Git commands now recover from thread-access-denied startup failures.
- A skill
allowed-toolsrule keeps commas inside its arguments instead of being split apart. Where a list's structure is ambiguous, its unscoped rules now prompt instead of being granted. - MCP resource dashboard stays interactive while inventory adapters refresh
- Retry image-bearing Responses requests with smaller payload limits when providers reject oversized bodies
- Complete usage reporting no longer shows partial status or phantom unattributed spend after resume when billing data is complete.
- Assisted permissions send nested PowerShell and bash -c commands that only expand plain-data environment variables, single-quoted PowerShell, and PowerShell variable and alias statements to the permission judge instead of requiring unnecessary manual approval
- Path-specific instruction files in the repository root .github/instructions are now applied automatically when the agent reads or edits a matching file
- Start git, shell commands, and MCP servers on Windows when process snapshot thread enumeration fails