2026-07-23

• Typing ? while the /search bar is open enters it as text instead of opening quick help
• Add support for Open Plugin Spec v1 plugin manifests and mcp.json configuration
• IDE integration reconnects reliably when the CLI reloads MCP servers or changes directory
• Multi-turn subagent timelines show every prompt and response in the correct order after reopening /tasks
• Subagent timelines identify whether prompts came from the main agent or another subagent
• Show a first-run splash to opt into the default sandbox
• Adding support for gemini-3.6-flash
• The /mcp add and /mcp edit wizard now preserves = characters in environment variable values (such as base64 padding), so secrets and tokens are stored correctly.
• Remote session uploads stop retrying permanent Mission Control 400/404 responses
• Show Tab in /settings footer to switch scope tabs
• Downscale oversized tool-result images so CAPI Responses requests continue
• When multiplexing sessions, a session's open dialog no longer leaks into another session; eligible pickers reopen when you switch back
• The $ interactive shell shortcut now opens a shell even while the agent is working
• Fully honor the skill disable-model-invocation flag
• Warn when a participating language server reports a different symbol than the one requested
• Steering interrupts shell output waits without stopping the running command
• Increase the Responses request size limit
• Plan mode now allows session-folder planning artifacts while still blocking clear file mutations outside the session folder.
• Add /model plan (or /model --plan) to pick a model used while in plan mode; pass a model id, off to clear, or no id to open the picker. Reverts to the session model when you leave plan mode.
• Resume search matches session titles even when whitespace differs

Added

• Add support for Open Plugin Spec v1 plugin manifests and mcp.json configuration

Improved

• Subagent timelines identify whether prompts came from the main agent or another subagent

Fixed

• IDE integration reconnects reliably when the CLI reloads MCP servers or changes directory
• Multi-turn subagent timelines show every prompt and response in the correct order after reopening /tasks

Fixes and changes

Fixes and changes

Added

• Show a first-run splash to opt into the default sandbox
• Adding support for gemini-3.6-flash

Improved

• When multiplexing sessions, a session's open dialog no longer leaks into another session; eligible pickers reopen when you switch back
• The $ interactive shell shortcut now opens a shell even while the agent is working
• Fully honor the skill disable-model-invocation flag
• Warn when a participating language server reports a different symbol than the one requested
• Steering interrupts shell output waits without stopping the running command
• Increase the Responses request size limit
• Plan mode now allows session-folder planning artifacts while still blocking clear file mutations outside the session folder.

Fixed

• The /mcp add and /mcp edit wizard now preserves = characters in environment variable values (such as base64 padding), so secrets and tokens are stored correctly.
• Remote session uploads stop retrying permanent Mission Control 400/404 responses
• Show Tab in /settings footer to switch scope tabs
• Downscale oversized tool-result images so CAPI Responses requests continue

Added

• Add /model plan (or /model --plan) to pick a model used while in plan mode; pass a model id, off to clear, or no id to open the picker. Reverts to the session model when you leave plan mode.

Improved

• Resume search matches session titles even when whitespace differs

2026-07-20

• Anthropic subagents continue working when additional directories are configured
• Resolve relative links in custom agent instructions from the agent file location

2026-07-20

• An agentStop hook that always blocks no longer loops indefinitely: the CLI now ends the turn after 8 consecutive blocks, and agentStop hooks receive a stop_hook_active flag so they can detect a forced continuation and self-limit
• Add opt-in git and gh authentication inside the OS sandbox
• Sandbox macOS keychain access now defaults off for tighter isolation; re-enable it in /sandbox if a command needs it
• Lifecycle and subagent hook commands run in the current session directory after /cd
• Deleting an MCP server with /mcp delete stops its running background process
• Toggling /sandbox restarts only local MCP servers and leaves remote servers connected
• Command approvals no longer carry over to another repository after you switch with /cd
• The GitHub tab's Open in web action now reliably launches your browser on Windows
• Preserve pasted prompt content when changing models through Ctrl+X /model
• Corrected the added-line count shown when creating a file so files ending in a trailing newline no longer report one extra line
• /worktree and /move no longer fail to create a worktree for an auto-generated branch name when many similarly-named branches or a leftover worktree directory already exist: the numeric-suffix search is no longer capped at 5 and now skips stale unregistered worktree directories (an explicitly supplied branch name still errors on a collision)
• /worktree no longer intermittently runs the kickoff task in the main repo instead of the new worktree
• /worktree and /move now propagate folder trust to the new worktree before switching when the source is already trusted (avoiding a spurious folder-trust prompt in that case), /move addresses its git stash precisely so a concurrent stash can't misplace changes, and worktree creation skips a leftover directory instead of failing
• Show the exit resume hint for a renamed session with no messages when its workspace is only available as a cached snapshot
• Show a connected message after a slow MCP server eventually connects
• Add update/uninstall verbs to /plugins, let enable/disable/remove target plugins, MCP servers, or skills via --plugin/--mcp/--skill flags or a positional kind, and support installing skills with /plugins install --skill
• Add a /plugins help command plus skill, MCP, and marketplace management for full /plugin parity
• Session exports keep angle brackets intact in inline code and top-level fenced code blocks
• Show MCP server status correctly for names like constructor and proto
• Keep the session highlight on the nearest live row when closing a session, in both the Sessions split view and the standalone Sessions tab
• Pad inline hex color swatches once inside Markdown lists
• Type $ at the prompt to open an interactive shell in the current session directory (enable it with /settings shellShortcut on; off by default)
• Nested markdown lists render correctly in buffered output (-p --stream off and detail screens): sub-bullets are no longer glued onto the parent item's line or flattened, and are indented under their parent
• copilot skill list now strips terminal control characters from skill names and descriptions, so a crafted skill can no longer inject ANSI escape sequences into the listing output.
• Install skills from the CLI with copilot plugins install --skill <file, URL, or directory> (add --scope project to a file or URL install to install into the repository)
• Show default values in /settings and let booleans cycle back to default
• Require SSO for remote control when managed settings demand it
• Mask secret values in /settings show output
• Show hex color codes written as inline code (e.g. #FF0000) as color swatches, and add a renderHexColors setting (on by default) to toggle hex-color swatches
• Add /model --session (-s) to change the model, reasoning effort, or context window for just the current session, leaving global settings unchanged.
• Detect VS Code, Cursor, and Windsurf through parent processes in /terminal-setup
• The Sessions sidebar is now navigable with the keyboard and mouse (arrows open and focus it and move the selection, and Enter or a click switches to a session; press n to spawn a session or x twice to close one from the keyboard); /settings can disable it or stop restoring remembered sessions
• Add --plugin, --mcp, and --skill flags for plugin mutations
• Add skill removal support to copilot plugins remove --skill
• Wrap ask-user and elicitation inputs in the split-pane chat view
• Modified vim keys (Ctrl+K, uppercase J/K) no longer move the selection in tool-permission prompts and other text-input select menus; only unmodified j/k, the arrow keys, and Ctrl+P/Ctrl+N navigate.
• /terminal-setup now refuses to modify a VS Code keybindings.json that contains a JSON syntax error (instead of rewriting it and reporting success), matching its documented invalid-JSON handling.
• Reveal full file paths when expanding compact editing rows
• Make the plan-approval menu deterministic across models
• Keep /add-dir directories visible in the agent context across turns
• Multi-turn subagents are always enabled, so you can send follow-up messages to running agents
• Enable tool search for Claude Haiku 4.5+
• Emoji shortcodes like 🎉 no longer render with a spurious trailing space in printed and PR/issue/gist output
• Deliver scheduled prompts as steering messages when the agent is busy

Added

• Add --plugin, --mcp, and --skill flags for plugin mutations
• Add skill removal support to copilot plugins remove --skill

Improved

• Reveal full file paths when expanding compact editing rows
• Make the plan-approval menu deterministic across models
• Keep /add-dir directories visible in the agent context across turns

Fixed

• Wrap ask-user and elicitation inputs in the split-pane chat view
• Modified vim keys (Ctrl+K, uppercase J/K) no longer move the selection in tool-permission prompts and other text-input select menus; only unmodified j/k, the arrow keys, and Ctrl+P/Ctrl+N navigate.
• /terminal-setup now refuses to modify a VS Code keybindings.json that contains a JSON syntax error (instead of rewriting it and reporting success), matching its documented invalid-JSON handling.

Added

• Multi-turn subagents are always enabled, so you can send follow-up messages to running agents
• Enable tool search for Claude Haiku 4.5+

Improved

• Deliver scheduled prompts as steering messages when the agent is busy

Fixed

• Emoji shortcodes like 🎉 no longer render with a spurious trailing space in printed and PR/issue/gist output