Improved

• Resume large sessions faster by showing recent history first while older messages load.

Fixed

• Repeated read_agent calls now consistently return the full turn history unless since_turn is provided

Added

• Hooks can now receive the current OpenTelemetry trace context and emit correlated spans: inputs gain traceparent (plus tracestate when the span has vendor state); command hooks also get env vars.

Fixed

• Hook lifecycle events (hook.start/hook.end) from hooks inside a subagent are now recorded on that subagent's session and re-emitted on its parent, instead of being dropped on an internal session.

Removed

• Removed the PLUGINS_DASHBOARD opt-out and the legacy skills picker it kept alive. /skills, bare /mcp, and /mcp show (with no server name) always open the dashboard; /mcp config still opens the dedicated MCP wizard.

Added

• Windows: remote MCP servers protected by Microsoft Entra ID can now sign in through the OS authentication broker (WAM), usually with no prompt at all. Other platforms, --device-code, and machines without the broker library keep the existing browser flow.

Fixed

• Repeatedly resuming the same session no longer crashes while telemetry is being replaced

Fixed

• An MCP server blocked by an enterprise policy now shows as blocked in /mcp instead of spinning as pending forever

Improved

• Show model data retention warnings with links in the /model picker

Added

• Add xhigh reasoning effort support for Grok 4.6

Improved

• Path-sourced plugins in a local (directory-source) marketplace now load live from their real directory, so editing one takes effect on /restart or a new session — no /plugin update
• Skills and custom agents are discovered from directories added with --add-dir

Fixed

• Signing out of an account now clears its cached enterprise managed settings, so signing back in generally re-fetches the policy rather than re-applying the one cached before sign-out

Added

• Startup now offers to restore sessions that were still open when their CLI went away, so a crash or a machine restart no longer means reopening each terminal by hand
• models.list now includes service-published infoMessages and warningMessages per model
• Add copilot app to open the GitHub Copilot app in the current directory

Improved

• Use Ctrl+Space to toggle voice dictation.
• A session sandboxed by an enterprise managed policy now says so on the timeline, including when the policy arrives mid-session, instead of leaving the footer's sandbox chip as the only hint that commands are being restricted
• forceRemoteSettingsRefresh now fails closed: when set, the cached managed-settings policy is never served or used as a fetch-failure fallback (skipping both the 1h fast path and the 24h stale fallback), so a failed startup fetch blocks on the unconfirmed policy instead of reverting to a possibly-stale cached one. Concretely, until a fresh policy is fetched the session applies the restrictive undetermined-policy posture: non-default MCP servers are blocked, bypass-permissions mode cannot be enabled, and policy-gated plugin install/update mutations are blocked

Fixed

• An enterprise managed-settings policy is no longer rejected when permissions.disableBypassPermissionsMode carries an unrecognized value; it is now logged and enforced as disable.
• Sandboxed builds on Windows create their scratch caches on first run, so cargo, go, Gradle, and ccache work without a warm cache
• On macOS and Linux, shell commands resolve the same tools a bash login shell does, including project environments activated from a profile

Added

• Add defaultMode and defaultPermissionMode settings to choose startup mode and approval behavior for new interactive sessions
• Add --with-token to copilot login to read an auth token from stdin

Improved

• ACP clients receive subagent IDs, raw event subscriptions, and live title, mode, command, and plan updates
• Show each user instruction file separately in /instructions
• Managed settings now win per entry for enabledPlugins and extraKnownMarketplaces, so a plugin or marketplace your organization pins can't be overridden locally

Fixed

• Canvas windows open and refresh in the background instead of stealing focus from your terminal

Fixed

• A prompt sent while the agent is working no longer leaves a second copy of itself stuck as (pending) at the bottom of the transcript after it has been answered

Fixes and changes