1.0.88

2026-09-22

• Add optional OSC 777 terminal notifications for direct Ghostty and WezTerm sessions.
• Text selection now works in bottom-anchored dialogs, including login device codes
• Preserve /allow-all during managed-settings refresh failures, and remember exact session approvals for missing paths without granting their parent directory; exact grants are visible in /list-dirs and cleared by /reset-allowed-tools
• Sandboxed network denials from proxy tunnel failures now show bypass guidance
• Custom-agent startup now distinguishes model-list load failures from an empty catalog, preventing false unavailable warnings and silent required-agent deselection
• Pressing Enter in freeform ask_user prompts adds a new line; submit with Ctrl+Enter or Ctrl+S as a fallback
• A custom agent's reasoning-effort now applies when the agent is selected, instead of only its model. An explicit --reasoning-effort still wins, and a level the selected model does not offer is reported and left unapplied
• Deferred MCP tools whose registered name needed sanitizing or shortening are now listed under that name, so tool search can find them, and deferred MCP tools with no resolvable server name are now listed with the other tools instead of being left out of the reminder
• Prompt mode now warns when it stops waiting for background tasks and explains how to change the timeout limit.
• Resuming sessions no longer stalls when MCP permission prompts are pending
• MCP tools recover more reliably from transient listing, connection, and OAuth failures
• Hook commands without an explicit cwd again run in the project root instead of the session's current directory, so repo-relative hook scripts still resolve from a subdirectory.
• Enterprise managed settings now apply to sessions opened in ACP mode (copilot --acp), by AHP hosts (copilot --ahp-host), and by the published --server session, which previously ran with no managed MCP, permission, or plugin policy.
• GitHub MCP scope escalation now uses the CLI OAuth app's registered /callback redirect URI
• Agents from a plugin mounted with --plugin-dir now appear in server-mode sessions
• Session and subagent start hooks combine successful additional-context contributions within the hook-output limit
• Cached MCP tools stay scoped to environment-resolved server addresses and headers
• Session resume preserves pending conversation events when saving fails and explains that retrying is safe
• Support namespaced custom skills and ignored skill directories during skill discovery
• MCP and plugin views show server display names and plugin descriptions for clearer status.
• Resuming large local sessions keeps transcript memory bounded for smoother CLI performance.
• Prompt to update GitHub authorization when Connectors need reauthorization
• Indexed search supports glob filtering and --files listings with accurate ripgrep fallback behavior.
• Run /fork during active turns to branch work without waiting.
• In the Sessions tab, rows you can dismiss now take x then x again to confirm: a local session is permanently deleted, while a session backed by a server is only closed and its conversation is left on the server. The footer says which of the two the highlighted row will do, and shows no x hint for rows that cannot be dismissed.

1.0.88-2

Fixed

• Text selection now works in bottom-anchored dialogs, including login device codes

1.0.88-1

Fixed

• Preserve /allow-all during managed-settings refresh failures, and remember exact session approvals for missing paths without granting their parent directory; exact grants are visible in /list-dirs and cleared by /reset-allowed-tools
• Sandboxed network denials from proxy tunnel failures now show bypass guidance

1.0.88-0

Added

• Add optional OSC 777 terminal notifications for direct Ghostty and WezTerm sessions.

Improved

• Support namespaced custom skills and ignored skill directories during skill discovery
• MCP and plugin views show server display names and plugin descriptions for clearer status.
• Resuming large local sessions keeps transcript memory bounded for smoother CLI performance.
• Prompt to update GitHub authorization when Connectors need reauthorization
• Indexed search supports glob filtering and --files listings with accurate ripgrep fallback behavior.
• Run /fork during active turns to branch work without waiting.
• In the Sessions tab, rows you can dismiss now take x then x again to confirm: a local session is permanently deleted, while a session backed by a server is only closed and its conversation is left on the server. The footer says which of the two the highlighted row will do, and shows no x hint for rows that cannot be dismissed.

Fixed

• Custom-agent startup now distinguishes model-list load failures from an empty catalog, preventing false unavailable warnings and silent required-agent deselection
• Pressing Enter in freeform ask_user prompts adds a new line; submit with Ctrl+Enter or Ctrl+S as a fallback
• A custom agent's reasoning-effort now applies when the agent is selected, instead of only its model. An explicit --reasoning-effort still wins, and a level the selected model does not offer is reported and left unapplied
• Deferred MCP tools whose registered name needed sanitizing or shortening are now listed under that name, so tool search can find them, and deferred MCP tools with no resolvable server name are now listed with the other tools instead of being left out of the reminder
• Prompt mode now warns when it stops waiting for background tasks and explains how to change the timeout limit.
• Resuming sessions no longer stalls when MCP permission prompts are pending
• MCP tools recover more reliably from transient listing, connection, and OAuth failures
• Hook commands without an explicit cwd again run in the project root instead of the session's current directory, so repo-relative hook scripts still resolve from a subdirectory.
• Enterprise managed settings now apply to sessions opened in ACP mode (copilot --acp), by AHP hosts (copilot --ahp-host), and by the published --server session, which previously ran with no managed MCP, permission, or plugin policy.
• GitHub MCP scope escalation now uses the CLI OAuth app's registered /callback redirect URI
• Agents from a plugin mounted with --plugin-dir now appear in server-mode sessions
• Session and subagent start hooks combine successful additional-context contributions within the hook-output limit
• Cached MCP tools stay scoped to environment-resolved server addresses and headers
• Session resume preserves pending conversation events when saving fails and explains that retrying is safe

1.0.87

2026-09-21

• Add user and managed startup defaults for the Auto routing tier, including strict and user-overridable organization policy
• Consecutive steering prompts in the same mode combine into one pending message. Press Up in an empty chat input to take it back for editing, including pasted text and attachments. The recall hint appears in the pending message. Ctrl+C stops the running turn instead of removing pending prompts one at a time. Ctrl+Q queued prompts remain separate. Use Ctrl+P to browse history without withdrawing prompts. Available for local sessions; commands and prompts already being processed cannot be recalled.
• A worktreePathTemplate setting decides where /worktree, /move, /new and --worktree create worktrees. Set for example ~/src/worktrees/{repo}/{branch}; {repoPath}, {repo}, {branch} and {branchSlug} are supported. Unset keeps the current layout, <repo>.worktrees/ with slashes in the branch name flattened to dashes.
• Number-key selection in the question dialog works for choices 10 and beyond
• Sandbox proxies work on Windows, and a proxy with a username and password works on every platform
• /keep-alive (and /caffeinate) no longer reports that sleep is prevented when the sleep inhibitor exits immediately on startup instead of acquiring the lock (e.g. no session bus on WSL/containers/headless); it now reports the failure.
• Prompt mode exits successfully when a child task fails but the parent recovers.
• Resume very large local sessions and continue with new prompts reliably.
• Keep --yolo enabled after startup policy checks for authenticated unmanaged sessions
• Empty strictKnownMarketplaces allowlists now hide and block built-in plugin marketplaces.
• Mouse-selected text is visibly highlighted in /help and /mcp show screens
• Tear down the processes an internal git command started when it times out, so a slow repository status check no longer leaves them running and consuming memory.
• MCP auth status warnings stay accurate during reconnects and startup refreshes
• Pull request badge and GitHub status tabs remain available after auth or branch refreshes
• A failing MCP server no longer removes other servers' tools
• copilot mcp list and copilot mcp get now report the built-in github-mcp-server when you are signed in, instead of showing it only in the interactive /mcp view
• MCP servers that advertise list-change capabilities but do not implement subscriptions now connect instead of failing
• Extension permission handlers approve subagent tool requests without leaving duplicate CLI prompts
• Secrets exported in the launching shell are no longer written to debug logs when a session is created or resumed
• Managed plugin commands load organization marketplace policy with environment, GitHub CLI, broker, and persisted authentication
• Session resume no longer hangs while reconnecting MCP servers
• Configure per-server MCP slow-connection warning thresholds with slowConnectionThresholdMs
• Show live elapsed time for execution subagents in timeline entries
• Enable the rubber-duck agent for every model family and for low-cost-tier session models
• Reduce allocation overhead when repainting blank terminal areas.

1.0.87-0

Added

• Add user and managed startup defaults for the Auto routing tier, including strict and user-overridable organization policy
• Consecutive steering prompts in the same mode combine into one pending message. Press Up in an empty chat input to take it back for editing, including pasted text and attachments. The recall hint appears in the pending message. Ctrl+C stops the running turn instead of removing pending prompts one at a time. Ctrl+Q queued prompts remain separate. Use Ctrl+P to browse history without withdrawing prompts. Available for local sessions; commands and prompts already being processed cannot be recalled.
• A worktreePathTemplate setting decides where /worktree, /move, /new and --worktree create worktrees. Set for example ~/src/worktrees/{repo}/{branch}; {repoPath}, {repo}, {branch} and {branchSlug} are supported. Unset keeps the current layout, <repo>.worktrees/ with slashes in the branch name flattened to dashes.

Improved

• Configure per-server MCP slow-connection warning thresholds with slowConnectionThresholdMs
• Show live elapsed time for execution subagents in timeline entries
• Enable the rubber-duck agent for every model family and for low-cost-tier session models
• Reduce allocation overhead when repainting blank terminal areas.

Fixed

• Number-key selection in the question dialog works for choices 10 and beyond
• Sandbox proxies work on Windows, and a proxy with a username and password works on every platform
• /keep-alive (and /caffeinate) no longer reports that sleep is prevented when the sleep inhibitor exits immediately on startup instead of acquiring the lock (e.g. no session bus on WSL/containers/headless); it now reports the failure.
• Prompt mode exits successfully when a child task fails but the parent recovers.
• Resume very large local sessions and continue with new prompts reliably.
• Keep --yolo enabled after startup policy checks for authenticated unmanaged sessions
• Empty strictKnownMarketplaces allowlists now hide and block built-in plugin marketplaces.
• Mouse-selected text is visibly highlighted in /help and /mcp show screens
• Tear down the processes an internal git command started when it times out, so a slow repository status check no longer leaves them running and consuming memory.
• MCP auth status warnings stay accurate during reconnects and startup refreshes
• Pull request badge and GitHub status tabs remain available after auth or branch refreshes
• A failing MCP server no longer removes other servers' tools
• copilot mcp list and copilot mcp get now report the built-in github-mcp-server when you are signed in, instead of showing it only in the interactive /mcp view
• MCP servers that advertise list-change capabilities but do not implement subscriptions now connect instead of failing
• Extension permission handlers approve subagent tool requests without leaving duplicate CLI prompts
• Secrets exported in the launching shell are no longer written to debug logs when a session is created or resumed
• Managed plugin commands load organization marketplace policy with environment, GitHub CLI, broker, and persisted authentication
• Session resume no longer hangs while reconnecting MCP servers

1.0.86

2026-09-17

• Custom agents can opt into repository instruction files (AGENTS.md, copilot-instructions.md, CLAUDE.md) by setting include-custom-instructions: true in their frontmatter.
• Resuming an active session without plugin-directory, discovery, or working-directory overrides preserves marketplace plugins and skills after reload. Configuration read or validation failures no longer discard active plugins; missing-file and intentional-removal behavior is unchanged.
• /sandbox policy now reports local-network access using your configured setting
• The status row now says it is waiting for background shells, instead of "Working", when a turn ends while an attached background shell such as a dev server is still running.
• Resume sessions even when transcript files contain recoverable corruption
• Expanded reasoning text in the compact timeline is no longer dimmed, so it is as readable as the rest of the timeline.
• Autopilot stops after accepted task completion instead of continuing unexpectedly

1.0.86-2

Fixes and changes

1.0.86-1

Added

• Custom agents can opt into repository instruction files (AGENTS.md, copilot-instructions.md, CLAUDE.md) by setting include-custom-instructions: true in their frontmatter.

Fixed

• Resuming an active session without plugin-directory, discovery, or working-directory overrides preserves marketplace plugins and skills after reload. Configuration read or validation failures no longer discard active plugins; missing-file and intentional-removal behavior is unchanged.
• /sandbox policy now reports local-network access using your configured setting
• The status row now says it is waiting for background shells, instead of "Working", when a turn ends while an attached background shell such as a dev server is still running.

1.0.86-0

Fixed

• Resume sessions even when transcript files contain recoverable corruption
• Expanded reasoning text in the compact timeline is no longer dimmed, so it is as readable as the rest of the timeline.
• Autopilot stops after accepted task completion instead of continuing unexpectedly