1.0.71-0

Added

• Add a pinned prompts setting in /settings to control prompt pinning
• Add Repo and Repo (local) scope tabs to the /settings dashboard

Improved

• Use targeted validation commands and lighter install guidance by default
• Use ctrl+x → x to close a session and ctrl+x → h to hide the split sidebar

Fixed

• Interactive shell commands now fail with a retryable "reconfiguring" message instead of an "unknown shellManager handle" error after the shell manager is disposed, and a detached command's completion notification is no longer lost when the shell context is reconfigured while a read is in progress
• Reject custom-agent names that would create hidden files
• Reject malformed --allow-tool and --deny-tool patterns with an error message
• Show retained shell output in /tasks Shell Details for finished tasks
• Remove duplicate Error: prefixes from plugin command failures
• Shell completions stop suggesting subcommands as flag values
• Show singular message counts in /usage activity graph
• Keep /cd from switching to files or inaccessible directories
• Dismissing the quick-help overlay with ? no longer leaves a stray ? in the prompt
• --sandbox and --no-sandbox now show their "ignored" warning during interactive startup when the sandbox feature is unavailable (previously it was only visible in non-interactive mode)
• Show the full command with its arguments (not just the wrapper) in the /mcp server detail view
• Hide the inert navigate and view-log hints in the empty /lsp logs (LSP Services) panel
• Exit non-interactive prompt runs with a failure code when a prompt is blocked before responding
• Show the Auto discount in the redesigned inline model picker
• New sessions start in the default directory instead of the active session's cwd
• Fish completion only offers enum values for closed-choice flags

1.0.70

2026-07-09

• Add GPT-5.6 model support
• Show a single Error prefix for mcp and skill command failures
• Show the real parse error when --agent selects a malformed custom agent
• web_fetch works through mandatory HTTPS proxies
• Hide / search on the Gists tab
• Treat superseded subagent runs as cancellations instead of failures
• Add paginated session.mcp.resources read/list/listTemplates RPCs for MCP server resources
• preToolUse hooks that exit with code 2 deny tool calls
• Create draft skills when Forge finds a clear workflow pattern
• Hide the GitHub App install nudge in remote terminals
• Pin plugins to an exact commit SHA using the sha field in plugin source configuration
• Add --sandbox and --no-sandbox flags to turn the OS-level shell sandbox on or off for the current session only, without changing your saved sandbox setting (useful with -p)
• Add /refine to rewrite a rough, stream-of-consciousness prompt into a clear one
• Add --repo and --local flags to /settings and /model
• Add a setting to show or hide timeline timestamps
• Let a trusted repository pin the model, effort level, and context tier and extend the URL/MCP/skill deny lists via .github/copilot/settings.json
• Expose SDK APIs to manage live MCP servers in running sessions
• Show the active user's models after /user switch
• Declining an extension's permission prompt no longer disables tool approvals for the rest of the session
• Avoid redundant background agent notifications after a blocking read_agent returns its result
• Startup auth errors recommend the real copilot login command
• Keep merge-semantics settings editable in /settings
• Re-sync managed plugins when their cache is missing or empty
• Copy the last assistant response even after command echoes
• Persist the last-logged-in user on every login so a restarted runtime client stays authenticated
• Hide /agent picker navigation hints when there is nothing to select
• Open the plan file or research report with Ctrl+Y in any mode
• Keep terminal color scheme changes in sync over SSH and remote shells
• Prefill /chronicle search so it can accept a query
• Show a distinct scrollbar thumb glyph in the /model picker on the no-color path (--no-color, non-color terminals) so the scroll position stays visible
• Skip launching a browser in remote terminals
• Arrow keys in /search and reverse search stay in search instead of switching tabs
• Restore tool event ordering so permission prompts appear after tool start
• Show only one cancellation message when streaming is aborted
• Keep /pr tables aligned in compact timeline view
• Show clear validation errors for empty or non-ASCII skill and command names
• Keep footer selection highlights aligned when the session bar is open
• Fail fast when marketplace plugin git auth needs a terminal prompt
• Dismiss other pending read and fetch sandbox-bypass prompts after you disable the sandbox
• Fix a crash on Windows triggered by desktop toast notifications
• Improve GPT-5.6 commentary guidance for tool-driven progress updates
• Highlight the sidebar toggle hint in the input footer
• Make markdown links and bare URLs in the timeline and tool output clickable
• Reclaim the blank line under the home tab bar: the timeline (and Sessions+Current split) sits flush under the tabs when a prompt is pinned, keeping one breathing line only while nothing is pinned
• Press Tab to switch the context window in /model
• Long-running sessions refresh enterprise managed settings hourly
• Mark locally-spawned MCP servers that run inside the sandbox in /mcp list (e.g. connected (sandboxed))

1.0.70-0

Added

• Pin plugins to an exact commit SHA using the sha field in plugin source configuration
• Add --sandbox and --no-sandbox flags to turn the OS-level shell sandbox on or off for the current session only, without changing your saved sandbox setting (useful with -p)
• Add /refine to rewrite a rough, stream-of-consciousness prompt into a clear one
• Add --repo and --local flags to /settings and /model
• Add a setting to show or hide timeline timestamps
• Let a trusted repository pin the model, effort level, and context tier and extend the URL/MCP/skill deny lists via .github/copilot/settings.json
• Expose SDK APIs to manage live MCP servers in running sessions

Improved

• Improve GPT-5.6 commentary guidance for tool-driven progress updates
• Highlight the sidebar toggle hint in the input footer
• Make markdown links and bare URLs in the timeline and tool output clickable
• Reclaim the blank line under the home tab bar: the timeline (and Sessions+Current split) sits flush under the tabs when a prompt is pinned, keeping one breathing line only while nothing is pinned
• Press Tab to switch the context window in /model
• Long-running sessions refresh enterprise managed settings hourly
• Mark locally-spawned MCP servers that run inside the sandbox in /mcp list (e.g. connected (sandboxed))

Fixed

• Show the active user's models after /user switch
• Declining an extension's permission prompt no longer disables tool approvals for the rest of the session
• Avoid redundant background agent notifications after a blocking read_agent returns its result
• Startup auth errors recommend the real copilot login command
• Keep merge-semantics settings editable in /settings
• Re-sync managed plugins when their cache is missing or empty
• Copy the last assistant response even after command echoes
• Persist the last-logged-in user on every login so a restarted runtime client stays authenticated
• Hide /agent picker navigation hints when there is nothing to select
• Open the plan file or research report with Ctrl+Y in any mode
• Keep terminal color scheme changes in sync over SSH and remote shells
• Prefill /chronicle search so it can accept a query
• Show a distinct scrollbar thumb glyph in the /model picker on the no-color path (--no-color, non-color terminals) so the scroll position stays visible
• Skip launching a browser in remote terminals
• Arrow keys in /search and reverse search stay in search instead of switching tabs
• Restore tool event ordering so permission prompts appear after tool start
• Show only one cancellation message when streaming is aborted
• Keep /pr tables aligned in compact timeline view
• Show clear validation errors for empty or non-ASCII skill and command names
• Keep footer selection highlights aligned when the session bar is open
• Fail fast when marketplace plugin git auth needs a terminal prompt
• Dismiss other pending read and fetch sandbox-bypass prompts after you disable the sandbox
• Fix a crash on Windows triggered by desktop toast notifications

1.0.69

2026-07-07

• Label built-in file edits with a (sandbox policy) badge instead of (sandboxed), since they follow the sandbox policy on a best-effort basis rather than running in the OS-level sandbox
• Reload installed plugin extensions without restarting a session
• Add a /plugins dashboard to manage installed plugins
• Open quick help from an empty prompt without leaving a stray ?
• Add minimal reasoning effort for gemini-3.5-flash
• Show a scrollbar in the /model picker list
• Show disabled servers as disabled in /lsp test
• Let built-in file edits bypass the sandbox when you approve it
• web_fetch now follows the active sandbox network policy (denying outbound or local targets the policy blocks) and, when the host opts in via sandbox.allowBypass, lets you approve a one-time bypass from the fetch prompt
• Show exact local assistant usage in Chronicle and session SQL
• Confirm before resuming a remote session from a different repository
• Delay read-only remote session creation until you send the first message
• Display reasoning-effort labels in the CLI footer
• Show descriptions for sandbox userPolicy settings in /settings
• Reject explicitly empty --name= values when starting a session
• Create delegate PRs against the current branch by default, with /delegate --base to choose another PR target branch
• Make /copy fall back to wl-copy on Wayland
• Improve /sandbox add-path suggestions so they open only when you ask for them
• Improve /chronicle cost-tips with more precise evidence-backed recommendations
• Hold Alt (Option on macOS) while scrolling to move one line at a time
• Resume and switch large sessions faster
• Speed up /diff rendering and scrolling on large diffs
• Keep the full /model picker on screen when the timeline is full, re-snapping as its details banner grows so the search box and hint bar are no longer clipped below the terminal
• Hide transient console windows when the CLI starts helper processes on Windows
• Auto-approval timeline entries now include the request subject, such as the command, path, URL, or tool name
• /allow-all auto now requires experimental mode (/experimental on or --experimental) instead of the AUTO_APPROVAL env var or feature flag
• Show /rubber-duck in pre-auth help and self-documentation
• Include files inside new untracked directories in /diff local edits
• A prompt taller than the screen stays scrollable when its top scrolls off, instead of collapsing to a pinned header
• Require Copilot login before ACP authenticate returns success
• Show the full assistant response in prompt mode when --stream is off
• Disconnect a repo-scoped plugin's MCP server when the repo disables it or the session leaves the declaring repository
• Prevent copilot init from hanging in non-interactive mode
• Reject empty --session-id= values instead of ignoring them
• Reject empty --resume= values instead of starting a new session
• Preserve emoji in truncated timeline tool arguments
• Show plain Shift+Enter in /terminal-setup output
• Keep session resume working when token timing includes fractional milliseconds
• Complete @-mentions for files whose names start with [DIR]
• Sign in to MCP servers through the CLI OAuth callback flow
• Reveal the full /user switch picker when the timeline is full so its hint bar is no longer clipped below the terminal
• Add /mcp list to show attached MCP servers and their status, and allow /mcp list and /plugin list to run while the agent is working
• Allow opening the /mcp manager while the agent is working to enable or disable servers mid-turn; add, edit, delete, and re-auth stay paused until the turn finishes
• Add auto allow-all mode that auto-approves requests an LLM judge evaluates as acceptable
• Add a stayInAutopilot setting (default false) that keeps the CLI in autopilot mode after an autopilot task completes
• Pinned prompts keep their full frame aligned while scrolling
• Suppress macOS pasteboard stderr during clipboard reads and writes
• Keep colons intact in rendered markdown output
• Warn when multiple plugins define the same MCP server
• Collect debug logs without truncating large files or dropping multiline secrets
• Find PRs from worktree branches when the local branch name differs from the PR head ref
• Skip the autopilot permission prompt when bypass mode is disabled by policy
• Allow WSL UNC paths for local files in the CLI
• Apply --reasoning-effort reliably when the CLI starts
• Keep slash-command picker rows intact in tab-expanding terminals
• Keep model switches working when tool call IDs include punctuation
• Double-press Esc now interrupts the running main turn (flushing queued messages), or stops background agents when the main agent is idle
• Prevent benign Windows crash reports when the CLI exits
• Wrap clipboard writes in tmux passthrough so copy reaches the outer terminal
• OAuth-gated MCP servers now register their tools after reconnect
• Keep CLI authentication working in one-shot sessions
• Ctrl+C dismisses ask_user and elicitation prompts like Escape
• Show Authenticate for cancelled MCP OAuth requests
• Keep /help from listing rewind/undo twice
• Keep MCP servers in needs-auth after OAuth cancellation
• Hide staff-only commands from pre-auth help and self-documentation
• Surface skill loading errors and warnings in skill list
• Browse and filter models more easily in the CLI model picker
• Resume sessions faster by removing quadratic work when rebuilding the timeline
• Warn when static context uses most of the prompt budget and block requests when little conversation room remains
• Improve CLI responsiveness when reading and writing session databases
• Improve slash-command and theme picker option descriptions
• Remove inert sandbox host lists and the Clear policy on exit toggle
• Add file and folder completion to /sandbox path entries
• Update a backgrounded session's branch label in the Sessions split view when its working directory changes
• Skip unnecessary MCP reloads when returning to an already-loaded session
• Prevent the tgrep indexer from running out of memory on large monorepos, and fall back to ripgrep if the indexer is killed instead of repeatedly restarting it

1.0.69-3

Added

• Let built-in file edits bypass the sandbox when you approve it
• web_fetch now follows the active sandbox network policy (denying outbound or local targets the policy blocks) and, when the host opts in via sandbox.allowBypass, lets you approve a one-time bypass from the fetch prompt
• Show exact local assistant usage in Chronicle and session SQL

Improved

• Improve /sandbox add-path suggestions so they open only when you ask for them
• Improve /chronicle cost-tips with more precise evidence-backed recommendations
• Hold Alt (Option on macOS) while scrolling to move one line at a time
• Resume and switch large sessions faster
• Speed up /diff rendering and scrolling on large diffs
• Keep the full /model picker on screen when the timeline is full, re-snapping as its details banner grows so the search box and hint bar are no longer clipped below the terminal
• Hide transient console windows when the CLI starts helper processes on Windows
• Auto-approval timeline entries now include the request subject, such as the command, path, URL, or tool name

Fixed

• Confirm before resuming a remote session from a different repository
• Delay read-only remote session creation until you send the first message
• Display reasoning-effort labels in the CLI footer
• Show descriptions for sandbox userPolicy settings in /settings
• Reject explicitly empty --name= values when starting a session
• Create delegate PRs against the current branch by default, with /delegate --base to choose another PR target branch
• Make /copy fall back to wl-copy on Wayland

Removed

• /allow-all auto now requires experimental mode (/experimental on or --experimental) instead of the AUTO_APPROVAL env var or feature flag

1.0.69-2

Added

• Show /rubber-duck in pre-auth help and self-documentation

Improved

• Sign in to MCP servers through the CLI OAuth callback flow
• Reveal the full /user switch picker when the timeline is full so its hint bar is no longer clipped below the terminal

Fixed

• Include files inside new untracked directories in /diff local edits
• A prompt taller than the screen stays scrollable when its top scrolls off, instead of collapsing to a pinned header
• Require Copilot login before ACP authenticate returns success
• Show the full assistant response in prompt mode when --stream is off
• Disconnect a repo-scoped plugin's MCP server when the repo disables it or the session leaves the declaring repository
• Prevent copilot init from hanging in non-interactive mode
• Reject empty --session-id= values instead of ignoring them
• Reject empty --resume= values instead of starting a new session
• Preserve emoji in truncated timeline tool arguments
• Show plain Shift+Enter in /terminal-setup output
• Keep session resume working when token timing includes fractional milliseconds
• Complete @-mentions for files whose names start with [DIR]

1.0.69-1

Added

• Add /mcp list to show attached MCP servers and their status, and allow /mcp list and /plugin list to run while the agent is working
• Allow opening the /mcp manager while the agent is working to enable or disable servers mid-turn; add, edit, delete, and re-auth stay paused until the turn finishes
• Add auto allow-all mode that auto-approves requests an LLM judge evaluates as acceptable
• Add a stayInAutopilot setting (default false) that keeps the CLI in autopilot mode after an autopilot task completes

Improved

• Browse and filter models more easily in the CLI model picker
• Resume sessions faster by removing quadratic work when rebuilding the timeline
• Warn when static context uses most of the prompt budget and block requests when little conversation room remains
• Improve CLI responsiveness when reading and writing session databases
• Improve slash-command and theme picker option descriptions

Fixed

• Pinned prompts keep their full frame aligned while scrolling
• Suppress macOS pasteboard stderr during clipboard reads and writes
• Keep colons intact in rendered markdown output
• Warn when multiple plugins define the same MCP server
• Collect debug logs without truncating large files or dropping multiline secrets
• Find PRs from worktree branches when the local branch name differs from the PR head ref
• Skip the autopilot permission prompt when bypass mode is disabled by policy
• Allow WSL UNC paths for local files in the CLI
• Apply --reasoning-effort reliably when the CLI starts
• Keep slash-command picker rows intact in tab-expanding terminals
• Keep model switches working when tool call IDs include punctuation
• Double-press Esc now interrupts the running main turn (flushing queued messages), or stops background agents when the main agent is idle
• Prevent benign Windows crash reports when the CLI exits
• Wrap clipboard writes in tmux passthrough so copy reaches the outer terminal
• OAuth-gated MCP servers now register their tools after reconnect
• Keep CLI authentication working in one-shot sessions
• Ctrl+C dismisses ask_user and elicitation prompts like Escape
• Show Authenticate for cancelled MCP OAuth requests
• Keep /help from listing rewind/undo twice
• Keep MCP servers in needs-auth after OAuth cancellation
• Hide staff-only commands from pre-auth help and self-documentation
• Surface skill loading errors and warnings in skill list

Removed

• Remove inert sandbox host lists and the Clear policy on exit toggle

1.0.69-0

Added

• Add file and folder completion to /sandbox path entries

Fixed

• Update a backgrounded session's branch label in the Sessions split view when its working directory changes
• Skip unnecessary MCP reloads when returning to an already-loaded session
• Prevent the tgrep indexer from running out of memory on large monorepos, and fall back to ripgrep if the indexer is killed instead of repeatedly restarting it

1.0.68

2026-07-01

• Add support for the kimi-k2.7-code model
• The focused field in the /mcp config form is marked with a "❯ " chevron, not color alone
• Keep IDE tools available during transient IDE disconnects, returning a clear error while disconnected and recovering automatically when the IDE reconnects
• Tab completion shows slash command aliases inline (e.g. /pr automerge|agentmerge)
• Stop hooks from erroring and denying every tool when a session's working directory or git worktree has been deleted
• Keep the footer model status in sync when reasoning effort or context tier changes
• Avoid duplicate skill and command parse errors from symlinked scan roots
• Update the Sessions sidebar branch after /cd and /worktree
• Find agents and instructions under Win32 extended-length paths on Windows
• Show descriptions for slash-command input choices
• Prevent terminal corruption when copying selected timeline text on macOS
• Fold symlinked sandbox paths into a single row
• Browse, resume, and switch between sessions from the agents screen
• Code review retries transient git failures when gathering changes
• Skip malformed plugin manifests and keep loading valid plugins
• Show plan budget details in the statusline and /usage for supported plans
• Render Thai and Devanagari text correctly in clipped output
• Keep file edits and patches within the sandbox filesystem policy
• Preserve wrapped OSC 8 hyperlink IDs in terminal output
• Let device-managed settings override server-managed settings
• Keep embedded /skill tokens in skill prompt context
• Let git commands work from repo subdirectories in the sandbox
• PowerShell variable references no longer trigger content-policy refusals
• Tell the agent when the working directory changes between turns so it uses the new directory for commands and relative paths
• Default to a steady vertical-bar cursor in interactive sessions
• Disable cursor blinking at startup without changing cursor shape
• Reject sandbox path edits that conflict with symlinks in other lists
• Keep the status line visible when the slash-command picker opens
• Custom agents keep their tool filters in nested subagents
• Preserve multibyte characters (emoji, accents, non-Latin text) in the /diagnose session log excerpt

1.0.67

2026-06-30

• Disabling the sandbox for the rest of the session now takes effect immediately, so shell and search commands stop re-prompting to bypass it mid-turn
• Subagent sessions keep parent tool restrictions
• Show warnings and errors when host custom agents fail to load
• Require session limits to be at least 30 AI credits
• Add Claude Sonnet 5 as a supported model
• Allow tool calls to continue when hooks time out
• Ctrl+Q now enqueues the highlighted slash-command argument completion
• MCP OAuth against Microsoft Entra servers behind a tenant vanity domain (e.g. Copilot Studio) no longer fails to refresh or re-authenticate (AADSTS9010010 / AADSTS90023)
• Prompt mode exit summary shows a resume hint to continue the session