- Custom sandbox profiles can now kernel-deny specific files and directories for reads/writes
- Marketplace plugins in subdirectories of a git repo can now be installed and loaded correctly
- Folder trust prompt now appears before starting a session when the feature is enabled
- Preview panes no longer hibernate while actively viewed
- Keyboard shortcuts help now expands inline for individual entries instead of only sections
- Idle detection can now ignore background tasks when the env flag is set (off by default)
- Sandbox deny lists now accept glob patterns like
**/*.pemin addition to exact paths - Local MCP servers now auto-recover after disconnects or session expiry
- OIDC sessions with
XAI_API_KEYpresent no longer lose refresh on idle - Inline video previews now show an install command only when the package manager is on PATH
list_dirnow reliably shows all immediate child directories even inside large monorepos- Clicking a model in the dashboard
/modeldropdown no longer opens the wrong session - Strikethrough now only applies to
double tildes; singletildesrender literally - Session cycling with
Ctrl+[/]now switches from the session you are currently viewing - Prompt history (Up /
Ctrl+R) now shows the complete recent list instead of a scrambled partial one - Authentication now correctly prefers the session method when both API key and cached token are present
Fetched June 30, 2026
