1.0.89

2026-09-28

• Left-clicking supported ask_user and elicitation form inputs focuses them and places the cursor at the clicked position
• Add support for Claude Code rule files in .claude/rules as custom instructions
• Sessions in the sidebar show a blue dot when they finished a turn you have not opened yet
• Auto suggests a routing tier and lets you switch with a shortcut or click
• Auto shows a quick feedback prompt after switching away to a manually selected model
• MCP pre-registered OAuth clients honor configured oauthScopes.
• In local sessions, Esc Esc in an empty chat input takes back a prompt whose turn the model has not started answering and removes it from the conversation
• Add GPT-6 Sol and GPT-6 Luna to the model picker when available
• Adding support for claude-opus-5.5
• Shell output no longer shows trailing command completion metadata.
• Timeline output stops auto-following while text selection is active
• server/tool and server/* tool filters now match MCP tool names that contain a slash
• Queue exit commands while an agent response is still running
• Extensions no longer fail to load under enterprise managed settings while managed MCP policy is still being applied
• Fixed Git failures in applications launched from CLI shells when empty environment variables are dropped, on Git 2.36 or newer.
• Sessions sidebar saves opened and closed tabs as they change, rather than only on exit
• Agent shell commands in sandbox can access session files and logs
• Fix Auto tier selection to cycle correctly in /model and remove the unsupported Fast profile; a previously stored, exported, or resumed Fast preference now falls back to Balance instead of routing on it
• Run wrapped gh and git commands, such as timeout 60 gh ..., correctly in sandboxed sessions
• ACP sessions stay connected when clients pause reading large responses
• Gemini models no longer fail every request with 400 invalid request body when an MCP server exposes a tool whose schema puts a type or properties beside anyOf, such as a nullable discriminated union
• GitHub MCP tools connect correctly on first CLI startup after sign-in
• Ask-user forms keep custom Other answers separate across questions
• MCP config loading keeps valid workspace servers when sibling entries are invalid
• Delete old sessions succeeds when run directly in the CLI
• Claude requests above attachment size limits now recover automatically before sending.
• Listing shells shows running shells first, so a shell still running in the background is no longer hidden behind a long list of finished ones
• View tool honors line ranges when providers send flattened view_range arguments
• In local sessions, Up in an empty chat input recalls the pending message and leaves queued prompts in the queue
• PR creation now follows repository pull request templates, preserving required sections and checklist structure.
• Configure automatic indexed search activation with TGREP_FILE_COUNT_THRESHOLD
• Direct plugin installs can now be enabled and disabled. One already recorded as disabled now stops loading; re-enable it with copilot plugin enable
• Sandboxed commands on supported Windows versions can access localhost when Local network access is on
• Autocomplete model IDs in /model and /model plan argument pickers
• Show managed Connector consent progress with a copyable authorization URL during connect and reconnect.

1.0.89-7

Fixes and changes

1.0.89-6

Improved

• PR creation now follows repository pull request templates, preserving required sections and checklist structure.
• Configure automatic indexed search activation with TGREP_FILE_COUNT_THRESHOLD

Fixed

• Shell output no longer shows trailing command completion metadata.
• Timeline output stops auto-following while text selection is active
• server/tool and server/* tool filters now match MCP tool names that contain a slash
• Queue exit commands while an agent response is still running

1.0.89-5

Added

• Left-clicking supported ask_user and elicitation form inputs focuses them and places the cursor at the clicked position
• Add support for Claude Code rule files in .claude/rules as custom instructions
• Sessions in the sidebar show a blue dot when they finished a turn you have not opened yet

Fixed

• Extensions no longer fail to load under enterprise managed settings while managed MCP policy is still being applied
• Fixed Git failures in applications launched from CLI shells when empty environment variables are dropped, on Git 2.36 or newer.
• Sessions sidebar saves opened and closed tabs as they change, rather than only on exit
• Agent shell commands in sandbox can access session files and logs

1.0.89-4

Added

• Auto suggests a routing tier and lets you switch with a shortcut or click
• Auto shows a quick feedback prompt after switching away to a manually selected model

Improved

• Direct plugin installs can now be enabled and disabled. One already recorded as disabled now stops loading; re-enable it with copilot plugin enable

Fixed

• Fix Auto tier selection to cycle correctly in /model and remove the unsupported Fast profile; a previously stored, exported, or resumed Fast preference now falls back to Balance instead of routing on it
• Run wrapped gh and git commands, such as timeout 60 gh ..., correctly in sandboxed sessions
• ACP sessions stay connected when clients pause reading large responses
• Gemini models no longer fail every request with 400 invalid request body when an MCP server exposes a tool whose schema puts a type or properties beside anyOf, such as a nullable discriminated union
• GitHub MCP tools connect correctly on first CLI startup after sign-in

1.0.89-3

Fixed

• Ask-user forms keep custom Other answers separate across questions

1.0.89-2

Added

• MCP pre-registered OAuth clients honor configured oauthScopes.
• In local sessions, Esc Esc in an empty chat input takes back a prompt whose turn the model has not started answering and removes it from the conversation

Improved

• Sandboxed commands on supported Windows versions can access localhost when Local network access is on
• Autocomplete model IDs in /model and /model plan argument pickers

Fixed

• MCP config loading keeps valid workspace servers when sibling entries are invalid
• Delete old sessions succeeds when run directly in the CLI
• Claude requests above attachment size limits now recover automatically before sending.
• Listing shells shows running shells first, so a shell still running in the background is no longer hidden behind a long list of finished ones

1.0.89-1

Added

• Add GPT-6 Sol and GPT-6 Luna to the model picker when available

Fixed

• View tool honors line ranges when providers send flattened view_range arguments
• In local sessions, Up in an empty chat input recalls the pending message and leaves queued prompts in the queue

1.0.89-0

Added

• Adding support for claude-opus-5.5

Improved

• Show managed Connector consent progress with a copyable authorization URL during connect and reconnect.

1.0.88

2026-09-22

• Add optional OSC 777 terminal notifications for direct Ghostty and WezTerm sessions.
• Text selection now works in bottom-anchored dialogs, including login device codes
• Preserve /allow-all during managed-settings refresh failures, and remember exact session approvals for missing paths without granting their parent directory; exact grants are visible in /list-dirs and cleared by /reset-allowed-tools
• Sandboxed network denials from proxy tunnel failures now show bypass guidance
• Custom-agent startup now distinguishes model-list load failures from an empty catalog, preventing false unavailable warnings and silent required-agent deselection
• Pressing Enter in freeform ask_user prompts adds a new line; submit with Ctrl+Enter or Ctrl+S as a fallback
• A custom agent's reasoning-effort now applies when the agent is selected, instead of only its model. An explicit --reasoning-effort still wins, and a level the selected model does not offer is reported and left unapplied
• Deferred MCP tools whose registered name needed sanitizing or shortening are now listed under that name, so tool search can find them, and deferred MCP tools with no resolvable server name are now listed with the other tools instead of being left out of the reminder
• Prompt mode now warns when it stops waiting for background tasks and explains how to change the timeout limit.
• Resuming sessions no longer stalls when MCP permission prompts are pending
• MCP tools recover more reliably from transient listing, connection, and OAuth failures
• Hook commands without an explicit cwd again run in the project root instead of the session's current directory, so repo-relative hook scripts still resolve from a subdirectory.
• Enterprise managed settings now apply to sessions opened in ACP mode (copilot --acp), by AHP hosts (copilot --ahp-host), and by the published --server session, which previously ran with no managed MCP, permission, or plugin policy.
• GitHub MCP scope escalation now uses the CLI OAuth app's registered /callback redirect URI
• Agents from a plugin mounted with --plugin-dir now appear in server-mode sessions
• Session and subagent start hooks combine successful additional-context contributions within the hook-output limit
• Cached MCP tools stay scoped to environment-resolved server addresses and headers
• Session resume preserves pending conversation events when saving fails and explains that retrying is safe
• Support namespaced custom skills and ignored skill directories during skill discovery
• MCP and plugin views show server display names and plugin descriptions for clearer status.
• Resuming large local sessions keeps transcript memory bounded for smoother CLI performance.
• Prompt to update GitHub authorization when Connectors need reauthorization
• Indexed search supports glob filtering and --files listings with accurate ripgrep fallback behavior.
• Run /fork during active turns to branch work without waiting.
• In the Sessions tab, rows you can dismiss now take x then x again to confirm: a local session is permanently deleted, while a session backed by a server is only closed and its conversation is left on the server. The footer says which of the two the highlighted row will do, and shows no x hint for rows that cannot be dismissed.