Release notes

Local sessions can now be pinned even when not synced to the cloud, and the desktop app brings the current working directory into sessions. Token usage is counted only on successful turns, and unrelated unread sessions are preserved when a window regains focus.

File tools now preserve legacy text encodings like ISO-8859-2 and CP1250 instead of converting them. Browser panel suggestions are deduplicated and better ranked, and prompt history recall in the composer is refined.

Added whole-process sandbox support on macOS for safer command execution. MCP status and auth notices now stay scoped to their session instead of leaking into untouched sessions, plus fixes for image-only messages, plan todos, and wide markdown tables.

You can now disable individual skills and see how skill settings resolve across scopes. Fixed a bug where the agent would loop on repeated tool calls, along with fixes for plugin loading, hook execution, concurrent settings writes, Mission Control chat repainting, and sidebar button alignment.

Added a unified Mission side panel and a button to add local project folders. /clear now preserves the current model and autonomy settings, password-protected PDFs no longer lock up the session, and MCP sign-ins refresh tokens silently without duplicate prompts.

Stdio MCP servers now time out on connect instead of hanging, and grep/glob timeouts surface as actionable errors. Fixed theme auto-detection over remote terminal sessions, todo status colors, and completion notification timing. Desktop app fixes include mission settings updates, audio/badge notifications, persistent model defaults, and resilience when local storage is unavailable.

New droid computer port-forward command forwards ports from a droid computer to your local machine. Session search is now faster and returns better-ranked results, and app startup is quicker with parallel boot phases.

Slash commands are now organized by category for easier browsing, and a new setting lets you control whether data syncs to the cloud. Fixed MCP tool name validation, MCP OAuth authentication, background process handling in droid exec, $EDITOR support for allow/deny lists, Gemini reasoning block parsing, droid SSH connections, and cross-org login.

Lowered memory use during long and idle sessions. Fixed MCP authentication basic auth fallback, file encoding preservation, session hook rendering, and organization switching.

Plugins can now be enabled or disabled individually, and Tab completes slash commands. Bug fixes include proper error exit on invalid API key, interrupted agent on cancelled AskUser prompts, and cleaned-up Windows background processes.

Skill slash commands are now available when connecting from external editors, and MCP tool results returned as JSON now render as formatted markdown. Also includes Mac installer branding and fixes for session reconnection, org switcher selection display, and desktop MCP authentication callbacks.

Set Droid's autonomy level from the command line with --auto, and organizations can centrally govern MCP server and plugin marketplace access. Fixes include status correctly clearing after interrupt, event hooks combining correctly, and reduced UI flicker during connection drops.

Redesigned hooks manager for viewing and configuring hooks, added terminal setup support for WezTerm, and enabled search within chat transcripts. Improved search speed by avoiding unnecessary cache rebuilds.

Projects can now be archived to keep the project list tidy. MCP authentication failures now include resolution guidance, and MCP configuration parse errors are surfaced instead of failing silently.

Prompts can now be opened and edited in an external editor for composing longer messages. Fixed cursor key handling when caps lock is on and a crash when connecting before onboarding finishes.

App users can now rewind conversations to earlier states with /rewind-conversation, and organizations can centrally control hooks settings. Bug fixes include reasoning indicators for non-thinking models, stale shimmer on completed execute steps, Windows hooks quoting, and MCP server logo colors.

Plugin marketplace definitions can now reference plugins published as npm packages, and desktop will ask for confirmation before quitting or closing when an active Droid session is running. Also includes improved long-session chat performance, a polished MCP authentication success page, and a fixed rate limit reset display for sub-hour resets.

Fixed MCP OAuth banner overlapping the top bar and improved MCP sign-in reliability for servers that advertise no scopes.

Air-gapped CLI binaries are now properly signed and published, ensuring air-gapped installs receive the latest builds.

A new commandBlocklist setting prevents specified commands from running even under full autonomy. MCP servers can now authenticate using Client ID Metadata Documents (CIMD), and the welcome screen adds sign-in CTAs.