Devin Release Notes

Fixed

• In Remote-SSH and Remote-WSL windows, the Agent Window folder picker correctly sets the session’s working directory. It lists the window’s remote folders and no longer offers local ones.
• In Remote-SSH and Remote-WSL windows, file links in the Agent Window (citations, diffs, settings and plugins) now open from the remote machine.
• The status bar no longer disappears after you switch from Agent mode to IDE mode.
• On macOS, banners at the top of the window no longer interfere with the window controls.
• IDE mode now offers Devin Cloud whenever your account has Cloud access, the same as the Agent Window. The “Devin for Cloud” team setting is removed.
• The “Connect your GitHub account” callout now has a “Don’t notify me again” option.
• A dropped connection during sign-in no longer signs you out. Devin Desktop retries instead.
• Devin Local sessions load again after an update that previously left them failing with “Failed to list sessions”.

Fixed

Members whose org role has no Devin Cloud session permissions can see, open and start Devin Local sessions again.

On Windows, devin is available in a new terminal (PowerShell, Command Prompt, Windows Terminal and Git Bash) right after Install Devin CLI, without signing out first. On macOS and Linux, running Install Devin CLI again refreshes the link instead of failing.

A saved sign-in keeps working after updating on machines where the editor’s own connections to the Devin servers fail.

Devin Local sessions no longer crash when a terminal command prints an inline image (sixel, iTerm2 or kitty).

Choose Your Own Default Agent

Settings > Preferences now has a Default agent setting: pick the Devin mode new sessions you start in the web app use, or keep following your organization’s default. You can also star a mode in the agent picker to make it your default, and it applies to sessions you start from Slack too.

Quote Elements from HTML Attachments

You can now quote part of an HTML file Devin attaches: pick an element in the rendered preview, add a note and send it, the same way as in the browser Preview tab.

Prompt to Switch the Interface Language

Users whose browser is set to Japanese, Spanish or Portuguese are asked, in that language, whether to switch Devin’s interface to it.

GitHub Issue Assignment Triggers and @Devin-prefix Filter

GitHub issue automations can trigger when an issue is assigned or unassigned and filter on the assignee. GitHub triggers can also filter on whether a comment, issue, pull request or review starts with an @Devin mention.

LLM Filter in the v3 API and Terraform Provider

An automation’s LLM filter (llm_check) can now be configured through the v3 automations API and the devin_automation Terraform resource.

Turn on Automatic Reviews from a Pull Request

On a session’s PR card, Analyze now reviews the pull request and keeps reviewing it on every push, with a one-time analysis available from the arrow next to it. On a pull request Devin has not reviewed yet, Review PR lets you turn on auto-review for that PR, for all your pull requests or (admins) for every pull request in the repository. When an earlier commit was reviewed but not the latest, the review page says which commit was last reviewed and offers to review again once or on every push.

Suggest a Change from the Diff

Selecting lines of a diff on a GitHub or GitLab pull request in Devin Review now offers Suggest change, which opens a review comment prefilled with a suggestion for those lines.

Finding Status Updates in the v3 API

The code scan finding status API (dismiss, resolve and reopen findings, single and bulk) is now part of the public v3 API.

Scan-complete Summaries by Slack DM or Email

The scan-complete summary is announced and delivered as a Slack DM when Slack is connected, and by email otherwise.

Private Sessions from Microsoft Teams Channels

Messaging Devin privately in a Teams channel now starts a session and sends you a private card with the session link. You can move the conversation into a channel thread, where Devin quotes your message and summarizes what it has done, or keep it private and follow it in the web app.

Sensitivity-label Policy: Unlabeled Files and Files MCP

Enterprise admins can let Devin read images and other files that cannot carry a sensitivity label while the Microsoft Teams attachment sensitivity-label policy is on, and can open a short visual guide to what people see in Teams for unlabeled, allowed and blocked files. The policy now also applies to file reads through the Microsoft 365 Files MCP.

Playbooks Are Moving to Skills

Playbooks are becoming Skills, and accounts move one at a time. When your account moves, each playbook becomes a skill with the same instructions, the Playbooks pages become read-only with a link to the skill each playbook became, and the Playbooks API reads and writes the skill, so automations, @playbook mentions and !playbook macros keep working. New accounts created from October 24, 2026 start with Skills and have no Playbooks.

SharePoint Support in the Microsoft 365 Files MCP

The Microsoft 365 Files MCP can now find SharePoint sites, list their document libraries, and browse, read and write files in them using the scopes you already grant. The Microsoft 365 skills cover SharePoint document libraries, batched mail reads and a clearer confirmation flow for writes.

Redesigned Customize Page

The Customize page has been redesigned. You get a page for each layer you administer (yourself, your organizations, your enterprise) with one search across its skills, rules, hooks, MCPs and plugins. A layer’s plugin list now includes everything a wider layer installs for it, plugins that still need an MCP connection are listed first and can be connected from their row, a plugin’s details list its Required and Optional dependencies so you can install or connect them from there, and items from a layer you manage can be edited in place.

Download and Read Blueprint Files

Blueprint files can be downloaded from Settings > Blueprints > Files, and their contents read through the v3 API for organization and enterprise blueprints. Saved browser profiles are excluded.

Blueprint Schema Errors Shown Inline

When you save a blueprint that is valid YAML but does not match the blueprint schema, the editor shows the error directly under the YAML, naming the field and the problem.

New Agent Window

The Agent Window now runs the same interface as the Devin web app: the sessions sidebar, session view, Automations, Review, Wiki, settings, and Command Palette (⌘K) match app.devin.ai, and follow your Devin Desktop theme.

Sessions

• Drag a session from the sidebar onto an open session to view up to 8 sessions side by side.
• Group sidebar sessions by workspace, with a ”+” on each group to start a session in that folder.
• Start a child session from any session’s “More” menu.
• Sessions grouped into Spaces now appear under a parent session in the sidebar.

Files, changes, and terminals in every session

• A Files view shows a local session’s working directory or a cloud session’s machine as a file tree next to the editor.
• The Changes tab now works for local sessions, with per-file diffs and a “Since last seen” scope.
• Terminal in a session’s add-tab menu opens a terminal on the session’s machine, or a local shell in the session’s folder.
• Cmd/Ctrl+O opens a local file in the Agent Window, and Cmd/Ctrl+Shift+F searches the text of the session’s files.
• Files open in the Agent Window’s editor support code actions and rename.
• Select code in an editor tab and press Cmd/Ctrl+L to quote it into the chat.

Cloud sessions

• The IDE button in the top right opens a Remote SSH window on the session’s machine.
• App previews open in a Preview tab, with a URL bar, port switching, device sizes, and an element picker.
• Cloud sessions connected to your machine read unsaved edits from open editors.
• Code scan sessions show a scan badge and open their Findings view beside the chat.
• Customizations and settings now match the same UI as Devin Cloud.

New shortcuts

• Cmd/Ctrl+. cycles the agent mode, Cmd/Ctrl+[ and Cmd/Ctrl+] go back and forward, Cmd/Ctrl+Shift+L copies a link to the session, and Cmd/Ctrl+Shift+E marks a session done. Typing anywhere focuses the composer.
• Settings → Preferences → Appearance lets you pick the interface and code fonts and their sizes.

Changed

• Pressing Enter while Devin is working steers the running turn; Cmd/Ctrl+Enter queues the message until the turn ends.
• Configured MCP servers can be @-mentioned.
• The command palette searches the content of Local sessions, not only their titles.
• On Windows, WSL distros can be used as remote agent hosts alongside SSH hosts, and remote hosts are listed in the Cloud / Local picker.
• Devin no longer opens files in the background when it edits them. Turn “Auto-open edited files” back on in Devin Settings → Editor → User Interface to restore this.
• Agent diff zones are off by default, so agent edits are applied directly to files. Re-enable them in Devin Settings → Editor → User Interface → Agent diff zones.
• Agent edits are saved without running format-on-save or code actions. Enable “Run save actions on agent edits” to restore the previous behavior.
• Worktrees are no longer deleted automatically once a repository has more than 19 of them.
• Plugins can declare platforms: [cloud] or platforms: [local]; Devin Desktop only activates plugins that apply locally.

Fixed

• Electron 42.11.16 and Node.js 24.22.1 for the remote server, with the October 2026 security fixes.
• Long sessions stay responsive while replies stream, and scrolling long transcripts is smoother.
• MCP servers from every configured registry can be installed, not only those from the first registry.
• MCP tool calls that need approval in Devin Local show their Allow / Reject controls.
• Saving agent environment variables restarts the affected local agent, so new sessions use the updated values.
• The “System notifications” switch in Devin settings now turns agent notifications on and off.
• Ctrl+Shift+C copies in terminals again, and the Send Terminal to Chat shortcut works on Windows and Linux.
• Markdown files of a cloud session open as a rendered preview again.

Dev Containers

• onCreateCommand, updateContentCommand, postCreateCommand, postStartCommand and postAttachCommand from devcontainer.json, Features and image metadata now run, and dotfiles are installed from remote.devinDevContainers.dotfiles.*.
• remoteEnv, customizations.vscode.settings, extensions, forwardPorts and shutdownAction apply.
• New Dev Containers: Rebuild Container and Rebuild Container Without Cache commands; a Rebuild prompt when devcontainer.json, the Dockerfile or the Compose file changes; a Reopen in Container prompt when you open a folder with a Dev Container configuration.
• Slim images without curl, wget or procps work, and a Dev Container window is trusted when its host folder is trusted.
• In IDE mode, a chat tab whose agent could not start a session says why and offers Retry, and enabling a third-party agent no longer shows “Failed to load more sessions”.

Added

• Steering improved to immediately interrupt Devin when a new message is received, without losing progress on long-running terminal commands.
• /rename with no argument generates a new session title from the conversation so far. /rename <new title> still sets the title you give it.
• /pickup (and /handoff from a cloud session) gives the new local session a summary of the cloud session as background context.
• Set read_config_from.cloud: set it to false to keep your Devin Cloud account’s MCP servers and personal plugins out of the CLI. Plugins your organization requires still load.
• [Experimental] Introduced a new DEVIN_SESSION_STORE=files option to keep session history as a folder of files instead of SQLite, so devin -r works when your home directory is on NFS, SMB or another shared filesystem.
• Hooks:
  • fail_closed: true blocks the action a hook guards when the hook itself fails to run, instead of going ahead without it.
  • A hook can end the agent’s turn from any event with stop: "<reason>" in its output (Claude-format hooks: continue: false / stopReason: ).
  • PostToolUse hooks can replace a tool result before the model reads it with hookSpecificOutput.updatedToolOutput, for example to redact content a tool returned.
• New /confetti command.

Changed

• Tool calls show as compact single-line summaries in the transcript; press Ctrl+O for the full tool cards. Commands that exit with a nonzero status show a red cross.
• Use the new agent.verbosity setting to control how much detail is shown in the transcript.
• The tool approval prompt is now Allow, Bypass mode and Deny. Use ←/→ on Allow to pick how long the grant lasts (Once, Session, Project, Always), and press e to edit the command.
• The /model picker lists models in the same order as Devin Desktop.
• The /config editor looks like the model picker: a search box on top, the setting’s description under the list, and values in one aligned column.
• /context draws one bar per section (system prompt, tools, messages, free) in the same style as /session-stats.
• The session picker (devin --resume, /resume, devin ls) opens as soon as the session list is read instead of taking seconds on a large sessions database; type-to-search matches session titles only. /resume with no id opens the picker over the running session.
• devin models on its own lists the available models.
• A session you own is made private when your machine connects through a devin --cloud session or Devin Desktop local access, not only through devin connect <code>. Only the user whose machine is connected can approve a local tool call or turn on bypass permissions from the cloud session.
• /loop and its agent.model_mixture setting are removed. Use /goal to keep Devin working on an objective until it is done.

Fixed

• Interrupting a turn (Esc-Esc, Ctrl+C, or a steer message) no longer waits for an MCP server that is still connecting or waiting for OAuth sign-in.
• MCP servers that answer the server/discover probe with an incomplete result (for example MCP Toolbox for Databases) now connect instead of failing with “expected initialized result”.
• GPT-5.x / GPT-6 models can use ask_user_question and todo_write again, in normal and plan mode.
• A message with more image data than the server accepts no longer leaves the session failing every later turn with “Request payload is too large”; the images that do not fit are dropped and the turn continues.
• Reopening a session (devin -r, or a click in the Devin Desktop sidebar) no longer moves it to the top of the session list; a session moves only when you send a message, rename it, or change its mode, model, or directory.
• A change saved to your personal or org plugin in Customize is picked up by the next session, instead of only after the plugin cache’s refresh interval.
• A hook matcher written as a list of strings ("tool_name": ["shell", "bash"]) matches any of them.
• Local tool use: a local_exec command that names a credential path without ~ ($HOME/.aws/..., %USERPROFILE%\..., an absolute home path) now always asks for approval, as the ~ form already did.
• Windows: devin acp no longer leaks memory while sessions sit idle.
• The thinking-level shortcut (Opt+T / Alt+T) steps through the levels in order (low, medium, high, xhigh, max) and leaves Fast Mode unchanged.
• When the connection drops mid-response, text already streamed stays in the transcript while the request is retried, and repeated failures show as one notice instead of a line per retry.
• Rendering: the input box no longer jumps by a line while a reply streams in, wrapped list lines line up under the item’s text, and the session title, tip and placeholder no longer run into the model name or folder path in narrow terminals.

“Received Feedback” Rows Open the PR Comment

Clicking a “Received feedback from …” row in a session opens that pull request comment, following your PR link preference. Rows covering several comments expand to show each one.

Quote a Devin Review Finding into the Chat

In a session’s PR review, each Devin Review finding has a “Quote in chat” button on its inline comment and in the findings list, and Cmd+I quotes the open inline finding into the chat.

Devin Review Supports Bitbucket Cloud

Devin Review now supports Bitbucket Cloud. Connect a Bitbucket Cloud workspace under Settings > Connections: review webhooks are installed automatically, with the install status and a Refresh button in the connection’s details, and members can link their personal Bitbucket Cloud account so Devin Review posts as them.

Merge Past Repository Rules You Are Allowed to Bypass

Users whose GitHub account may bypass a repository’s merge requirements can now merge a blocked pull request directly from Devin Review, after confirming.

Reactions on /devin Review Comments

Commenting /devin review on a GitHub pull request now gets a 👀 reaction when the review starts and a 👍 when it completes.

Resolved Counts in Analytics Only Include Findings Fixed in Code

Devin Review analytics now count a finding as resolved only when it was fixed in code, by a later push or by Devin. Findings dismissed by a reviewer and duplicates no longer count, so resolved numbers will be lower.

Support Lite Mode in Devin Oncall

Oncall responders and incident investigations can now be configured to run in Lite mode.

Request-access Link for Repositories Not Yet in Devin

Enterprise admins can set a “Request access link” under Settings > Connections, with an optional separate link for GitHub and for GitLab. Members see it next to repositories that are not connected to Devin yet when picking a repository.

Gerrit Webhooks Installed Automatically

Connecting a Gerrit server now sets up Devin’s webhook on the projects the service account is allowed to configure, when the server has the webhooks plugin. Projects where it cannot are reported with the reason.

Hook Matchers Written as a List

A hook matcher written as a list of strings now matches any of them, not only the first.

Non-Latin Organization Names

Organizations can now be created with names in Japanese and other non-Latin scripts.

Clearer Work Log While Devin Works

The current step in the work log shows what Devin is doing as soon as that summary is ready instead of “Deciding action”, and status lines no longer narrate internal housekeeping.

Devin Oncall Is Now Generally Available

Devin Oncall is now available to all organizations. Responders watch your Slack or Microsoft Teams channels and PagerDuty incidents, triage new alerts, bug reports and support requests, and investigate them using your telemetry tools, code, deployments and runbooks to post a likely root cause and recommended next actions. Devin can also join incident channels to keep investigating and maintain a self-updating incident report, and recurring Oncall reports summarize incidents investigated, issues identified and fixes shipped. Find it under Oncall in the sidebar; organization admins connect tools and manage responders.

Rules Editor for Devin Review

Review settings has a new rules editor: exclusions and review rules sit in one list of expandable rule cards, and their targets are picked inline.

Clearer Notice for Unreviewed Changes

When a pull request was reviewed at an earlier commit and newer commits have not been reviewed, Devin Review now says “Latest changes haven’t been reviewed” instead of “Devin hasn’t reviewed this pull request”, and offers “Review now” to run a one-off review of the latest commit without turning on automatic review for the pull request.

CI Status for Commits, Branches and Tags

Devin can now check CI status for a commit, branch or tag (for example a post-merge run on main), not only for a pull request, on GitHub, GitLab, Azure DevOps and Bitbucket Cloud and Data Center. Bitbucket build statuses are now visible to Devin on pull requests and commits.

Webhook Auto-install Results for GitLab and Bitbucket Data Center

The webhook settings for GitLab (with automatic webhook install enabled) and Bitbucket Data Center now show what the last automatic install did for each project or group and flag hand-made Devin webhooks that would cause duplicates.

Propose Edits to Shared Plugins and Skills

Devin sessions can now propose edits to organization and account plugins and skills even when the session’s creator can’t edit them. An admin with the right permission approves the change.

Attachment Classification by Sensitivity Label

Enterprise admins can configure Microsoft Teams attachment classification once per enterprise; it applies to every organization in the enterprise. Files with an allowed Microsoft sensitivity label are shared with Devin and files with a blocked label are rejected; unlabeled files and SharePoint or OneDrive links ask the sender to classify them before Devin receives them, and the card explains when a file was not shared and why.

Recover a Crashed Session from Teams

When a Devin session crashes, Microsoft Teams posts a message in the thread saying so, and replying in the same thread retries the session.

Teams Admin Alerts

Settings → Microsoft Teams warns when a Teams admin has blocked the Devin app and explains how to allow it. Admins who manage Teams get a Notification Inbox alert when their connection needs attention or when a Teams automation stops receiving messages from its channel.

Teams Tag Mentions

Devin can mention a Teams tag (for example @Design Reviewers) when it posts to a channel through the Microsoft 365 MCP, so everyone in the tag is notified.

Clearer Group-chat Permissions

In Teams group chats, members who can’t message the chat’s existing Devin session now see why.

Turn Off Nightly Memory Dreaming

You can now turn off nightly memory dreaming from the Memory tab while keeping personal memory on in your sessions.

Multiple Side Chats from One Message

A message that already has a side chat can start another: its side-chat button opens a menu of the message’s threads with a “New side chat” option.

Command Palette Finds Archived Sessions

Cmd+K session search now includes archived sessions, marked with an icon.

Queued Messages Stay Editable While Devin Is Idle

Queued messages can be sent, edited, removed or reordered after Devin stops or the session goes to sleep, instead of being locked until the next turn.

Open Chat Images in a Tab

Images in the chat can be opened as a tab from the image viewer, so you can view an image alongside the conversation.

Numbers Follow Your Display Language

Numbers across Devin (usage, dashboards, counts) now use the thousands separator and decimal mark of your selected display language instead of the browser locale.

Browser Previews Wake Sleeping Sessions

Opening a browser preview of a sleeping session restarts the servers behind the preview automatically, without a chat message. The visitor may need to reload once the server is back.

/devin Commands on GitLab Merge Requests

/devin review and /devin comments now work on GitLab merge requests.

Bitbucket Cloud Merge Readiness

Devin Review shows merge readiness for Bitbucket Cloud pull requests: ready, or blocked by required approvals, default-reviewer approvals, builds or requested changes when the branch enforces its merge checks.

Word-level Highlights for Edited Lines

In Devin Review diffs, an edited line shows which words changed even when lines were added or removed right next to it.

List and Search Pull Requests

Devin can list and search a repository’s pull requests by state, author, branch or title on GitHub, GitLab, Azure DevOps, Gerrit and Perforce Swarm, instead of opening PRs one at a time.

Git Tools for Issues, Labels, Assignees and Branch Protection

Devin has built-in tools for issues (view, list, create, comment, edit), repository labels, PR assignees, repository info and branch protection rules on GitHub. Repository info and branch protection also work on GitLab, Azure DevOps, Bitbucket and Gerrit, and the issue and label tools on GitLab.

Bitbucket Data Center Webhooks Installed Automatically

Bitbucket Data Center connections now set up their own webhooks: one per project the access token administers, covering every repository in it. Projects created later are picked up within a day.

Explain and Search Missing Repositories on GitHub

When a repository is missing from the repository picker, Devin can explain why and search your repositories by name on GitHub and GitHub Enterprise Server as well as GitLab, and points you to linking your personal account when that is the cause.

Personal Azure DevOps Connections per Tenant

Linking a personal Azure DevOps account now works when it belongs to more than one tenant: Personal connections lists one entry per tenant, and a failed connect shows an error.

Microsoft Teams: Separate Direct Messages and Group Chats Access Settings

Teams Default Access now has separate “Direct messages” and “Group chats” settings, so admins can control them independently of channel access.

Microsoft Teams: Forwarded Messages as Context

Devin now sees the content of messages forwarded to it in Teams as quoted context, separate from your comment.

Enterprise Setting to Hide the Legacy MCP Marketplace

Enterprise admins can turn off “Show legacy MCP marketplace” in Enterprise settings → Plugins to hide the legacy MCP marketplace and custom MCP entry points and stop Devin from adding such MCPs itself. MCPs already added keep working.

Google Calendar: Suggest Meeting Times

The Google integration can suggest meeting times, ranking slots by how many attendees are free and showing who can’t make each one. Google MCP installs that grant only some permissions now work for the services granted.

SAML Single Logout on Sign-out

Signing out of an enterprise SAML SSO login can also end the session at the identity provider, when a sign-out URL is configured for the connection.

Chat Width Preference

A new Chat width preference (Preferences → Appearance, or the command palette’s Accessibility menu) widens the session chat and composer on large screens, so code blocks and tables need less horizontal scrolling.

Interrupting Devin Keeps the Partial Reply

When you send a message while Devin is still writing a reply, the part of the reply you already saw stays in the chat instead of disappearing.

Virtual Environment Picker Uses Your Starred Default

New sessions use your starred virtual environment default unless you pick another one in the composer; the picker resets your selection across reloads.

Session Links in Devin’s Messages Render as Chips

Links to another Devin session inside Devin’s messages now show as a chip with the session’s ticket key and title (or the session title), styled like other inline chips.

Child Sessions Show in the Sidebar Across the Archive Split

A child session now appears in the sidebar on its own when its parent is on the other side of the archive: an unarchived child of an archived parent shows in Recents, and an archived child of an active parent shows in Archived.

Filenames on Diff and Patch Attachments

Diff and patch attachment chips in a session now show their filename, so multiple patches in one message can be told apart.

Browser Previews Shared to Slack

When Devin opens a browser preview in a Slack-started session, the thread gets an “Open preview” link, and Devin no longer repeats the link in chat.

Review Manager Role

Admins can assign a new org-level “Review manager” role (Member permissions plus Manage Review). Anyone with the Manage Devin Review permission can now edit Review settings and review rules and search repositories in Review settings without also being an account, org or Git integrations admin.

Merge Method Remembered per Repository and Branch

Devin Review remembers the merge method you last picked for each repository and target branch, so you don’t have to reselect “Squash and merge” on every PR.

Export Findings as SARIF

Code-scan findings can now be exported as SARIF 2.1.0 — from the scan page’s export menu and from the findings export API — in addition to CSV.

Microsoft Teams

Saving a Teams message automation now fails with a clear explanation (and a docs link) when Devin can’t watch the channel, for example when the Devin app isn’t added to the team; previously the automation saved but never triggered. The channel picker no longer offers private and shared channels, which message triggers don’t support. Automation replies always link to both the session and the automation. When several Devin accounts share one tenant, a thread reply reaches every automation that answered it, and Devin explains when a chat or thread belongs to a different Devin account than yours. Enterprise customers on a devinenterprise.com domain sign in to Teams through their enterprise API host.

GitHub Enterprise Server App Permissions

Newly registered GitHub Enterprise Server apps request the same permissions as the github.com app: code scanning, secret scanning and code quality (read), Actions (write) and repository creation, plus the team_add webhook.

New Observability Plugins

Splunk, Elastic, Dynatrace, Chronosphere and Google Cloud Monitoring are now available as plugins.

Clearer MCP Server and Plugin Approval Cards

MCP server requests in a session now say which action is requested (delete, enable, disable) and keep showing the server’s name after you approve or deny; plugin approval prompts in organizations without an enterprise say “organization” instead of “enterprise”.

Repositories and Blueprint APIs Promoted to V3

The repositories and snapshot-setup (blueprint/build) endpoints are now part of the stable v3 API at /v3/...; the /v3beta1/... paths continue to work.

Terraform Provider: Repository Indexing, Blueprints and Repositories

The Devin Terraform provider now has resources for repository indexing, blueprints and blueprint files, and a repositories data source.

SSO-only Enterprise Members are Routed to Their Enterprise Sign-in

Members of SSO-only enterprises on a dedicated domain who also have an old personal account are now sent to their enterprise sign-in page instead of looping back to the login screen.

Added

• New /goal <objective> command: Devin keeps working on the objective across turns, continuing automatically each time a turn ends, until it reports the goal complete or blocked. /goal shows its status, /goal resume continues after an interrupt, and /goal clear drops it. A run pauses itself after 50 turns. Not available on prompt-based plans.
• Added steering support: a message typed while Devin is working is handed to the running turn instead of waiting in the queue: Devin reads it at its next step, with nothing cancelled. Cmd+Enter (Ctrl+Enter on other platforms) queues the message until the turn ends instead.
• Provider billing: when your account can pay for a provider’s models with a provider plan such as your ChatGPT plan, the model picker marks those models with an asterisk. Press Ctrl+S in the picker or use /billing (/billing on|off) to switch the plan on or off for your account.
• Press Alt+Enter in the model picker (/model, Alt+M) to switch models for the current session only. Enter still saves the pick as the default for new sessions. Rebind it with model_picker.confirm_for_session.
• New config.json settings:
  • typewriter: set it to false to show streamed text as soon as it arrives
  • agent.subagent_model: the model for subagent_explore and custom subagents that don’t set their own
  • local_tools_bypass_permissions: start every local-tools connection, such as devin connect, with Bypass Permissions on; deny and ask rules still apply
• devin plugins install owner/repo accepts repositories that ship only skills/<name>/SKILL.md and no plugin manifest, such as anthropics/skills.
• DEVIN_SESSIONS_DIR moves the session history database to another directory, for example a local scratch disk when your home directory is on NFS.
• Plugins can declare where they apply with platforms (cloud, local, or both) in the plugin manifest, and plugin hooks can use PLUGIN_ROOT for bundled files and PLUGIN_DATA for data that survives plugin updates.
• PreCompact and PostCompact command hooks run before and after context compaction, with manual and auto trigger matchers. Hook failures do not block compaction, and the existing PostCompaction hook remains supported.
• MCP improvements:
  • Added support for MCP servers on protocol revision 2026-07-28.
  • devin mcp list and devin mcp get show a Source: line for each server, naming the config file or plugin it was loaded from.
  • HTTP and SSE requests to MCP servers send a User-Agent: Devin-CLI/<version> (<ide>) header unless the server’s configured headers set one.
  • [Private Preview] Devin CLI can now connect to remote MCPs configured in Devin Cloud. Only enterprise-level MCPs will be reached.
  • When an MCP server rejects its saved OAuth sign-in and it cannot be refreshed, the credentials are removed and you are told once; the server asks you to sign in again the next time it is used.
• The REPL reports its status (idle, working, blocked on a prompt, done, or failed) to the terminal with OSC 7501, so terminals that support it can show which Devin sessions need you. disable_osc turns it off.
• Sandbox permission prompts can offer to let every run of a command (for example go build) run outside the sandbox, which saves it to sandbox.excluded.allow.
• devin connect: cloud sessions can view image files on the local machine and copy files between the local machine and the session VM. When a rule forces an approval for a command a cloud session runs on your machine, the approval card names the rule and where it comes from.
• In a multiline prompt, Ctrl+U at the start of a line removes the line break, so repeated Ctrl+U clears the prompt line by line.
• Added the ability to force open sessions that are currently open elsewhere/held by a stale process.
• Ctrl+C clears a non-empty draft, including image attachments, without interrupting the running task. Press it with an empty input to cancel the task.
• devin cloud with no subcommand opens a Devin Cloud session, the same as devin --cloud, and devin --cloud no longer warns about running from your home directory or asks you to trust the current directory.

Changed

• Permission prompts forced by an organization-managed “ask” rule now say so.
• Changing the thinking effort of the current model mid-session no longer discards the prompt cache on models that support per-message effort (Claude Opus 5, Opus 5.5, Fable 5.1, and GPT-6).
• In ACP clients, /normal is an alias of /code, /context shows a table of tokens and percent per section, and a /bug report that fails to submit fails the request with the reason.
• Session search results are ordered by relevance instead of recency, and the /model picker lists recommended models right after your recently used ones.
• Visual polish: Markdown headings follow one color hierarchy, muted text in the light theme meets WCAG AA contrast, warnings are marked with a triangle (▲), pending tool calls use a yellow dot, command cards no longer show the Session: and Timeout: lines, /login-status lists its fields in aligned columns, the login flow is cleaner, and the devin update progress bar is a solid bar.

Fixed

• Smart mode asks less often, with routine commands auto-approved. Destructive Git comands, requests that send data, and writes outside your project still require approval.
• Improved performance:
  • Deferred background tasks during startup to make the CLI even faster to start.
  • Switched to gzip for all API requests. Set "proxy": { "gzip": false } in config.json if a proxy cannot handle compressed requests.
  • Reduced redraw/rendering overhead for long sessions.
  • Optimized parsing for repos many skills.
• A plugin with a non-semver version (for example v2 or 2024.01) loads instead of being rejected, and a marketplace that lists plugins from its own repository at a branch is downloaded once per install instead of twice.
• devin --cloud and devin --cloud -p report the failure at once when the Devin API refuses the connection or the host does not resolve, instead of hanging or retrying for about 31 seconds, and -p prints the server’s reason when the cloud session cannot start.
• Cloud WebSocket connections (/org, /handoff, devin connect) and plugin bundle downloads go through the configured proxy like every other API call.
• Re-authenticating from inside a session opens the deployment you signed in to (Fed, EU, or a dedicated tenant) instead of app.devin.ai.
• Sessions on a model router such as Adaptive no longer get stuck on “Authentication failed: an internal error occurred” once the cached model assignment expires, for example after the machine slept overnight.
• In devin acp, a session no longer picks up another repository’s rules, skills, or repo plugins after running a command, and agent messages streamed live carry a timestamp.
• Choosing “Yes, switch to bypass mode” (or “switch to accept edits”) on one permission prompt also approves the session’s other open prompts that offered the same switch.
• In autonomous (sandbox) mode, Write(...) allow rules auto-approve matching file edits.
• Sandboxed commands on Linux no longer fail with “Couldn’t connect to server” when they open a connection before the sandbox’s network proxy is ready.
• read_config_from in a project’s .devin/config.json holds for everything loaded from that project, even when your user config turns the provider on, and skills from a provider that is turned off can no longer be invoked by name or found by skill search.
• Rules: .devin/global_rules.md and .devin/rules/ still load with read_config_from.windsurf = false, devin rules list honors read_config_from, a rule that is both always-on and path-triggered is injected once, and rule files in a directory created mid-session are loaded.
• Hooks: a hook file that declares Claude Code’s Notification or SubagentStop events no longer loses all of its hooks, and Windsurf-format command and write hooks fire on GPT models.
• Plugins: optional plugins pinned to a branch and marketplace plugins with nested agent profiles in a private repository load, and one unreadable plugin no longer hides the others offered alongside it.
• Session history on a network filesystem (NFS, SMB, Lustre, AFS) no longer fails with session/list failed, disk I/O error, or database is locked.
• Command output containing terminal escape sequences (such as OSC 8 hyperlinks) no longer leaks into your terminal, and non-ASCII model output no longer occasionally turns into �.
• A background shell the agent kills disappears from the shell tray, and an environment variable whose value contains a NUL byte no longer makes every shell command fail to start.
• /usage refreshes the account’s ACU total and limit instead of showing the values from startup.
• --model <slug> no longer fails with Unknown model when the server is slow to return the model list on a cold start.

Devin Desktop

• Added support for connecting to MCP servers on protocol revision 2026-07-28 (server/discover, no initialize).
• Enterprise admins can now set an Extension marketplace URL in the Devin Desktop team settings. When set, Devin Desktop searches for and installs extensions from that marketplace only. See Admin controls.
• Improved performance for very large or deeply nested folders.
• Replaced folder and git-@ mention system with a faster integration while removing the code context @-mention category.
• The model picker remembers the variant you last used for each model family, instead of resetting to the family default.
• [Private Preview] Devin Desktop can now connect to remote MCPs configured in Devin Cloud. Only enterprise-level MCPs will be reached.

Memory and dreaming

Devin now remembers what it learns about you and your work across sessions. Memory is personal to you and not shared with your organization; you can review its files and turn it on or off from Settings > Customization > Memory. Each night Devin reviews your recent sessions and refines what it remembers under Recent dreaming sessions in the Memory tab. Org admins can turn memory on or off for their organization, and enterprise admins can force it on or off for every organization.

Session resume window is now 14 days

Sessions can be resumed for 14 days after they go to sleep (previously 30 days). Session history remains available after that; starting new work from an older session requires a new session.

Font family and size settings

Settings > Appearance now lets you choose the font family and font size used in the session transcript and editor.

Command palette and Find

Command palette actions now show their keyboard shortcuts, and Cmd/Ctrl+F in a session reaches more content, including collapsed tool output and PR descriptions.

Transcript diff cards for large edits

When Devin rewrites a large file, the transcript now shows a real diff instead of a ‘file replaced’ summary; edits above roughly 5,000 lines show line counts only, and temporary files created and deleted within one step no longer appear as changes.

Notification settings and inbox

Settings > Notifications now gives every notification type its own switch, and the inbox adds All/Unread tabs, a mark-as-read icon, muting a notification type directly from a row, and a hover preview from the bell icon.

User preferences sync across apps and devices

Most user preferences (dismissed banners, Review scope, sidebar and wiki toggles, last repository selection, and more) are now stored on the server, so they follow your account across the web app, Devin Desktop, and devices instead of being saved per browser.

Hide Microsoft Teams sessions from your team

The “Hide from team” session action now also works for sessions started from Microsoft Teams, so teammates won’t see them in team views like All Sessions.

Repository AGENTS.md loaded on setup

When Devin sets up a repository, it now reads the AGENTS.md at the repository root and follows its instructions for the session.

Attachment links in PRs

Attachment URLs Devin posts into PRs use your tenant domain on dedicated tenants, and on Enterprise plans they no longer expire after 7 days.

Devin Ultra available regardless of data retention setting

Devin Ultra is now available to all enterprises with the Ultra preview enabled, including those with zero data retention; previously Ultra was unavailable when a data-retention restriction was in place.

Manage findings permission

A new Manage findings permission for code and security scans lets admins control who can change finding status or dismiss findings, separately from who can run scans.

Create scan and Create profile with Devin

The Security page’s Create scan and Create profile buttons offer Generate with Devin (describe what to scan and Devin drafts the configuration) or Manual, and the scan and profile sheets use the updated form layout.

Scan findings in the session language

Scans started from a session via /scan write their findings in the language of the session instead of always English.

Failure notification backoff

When an automation keeps failing, failure notifications are sent on a backoff (after the 1st, 3rd, 9th… consecutive failure) instead of on every run, and resume on the next success.

Slack write-back posts attachments inline

Automations that reply to Slack now post images and files Devin produces inline in the Slack message, and Devin’s Slack tool embeds images directly instead of linking.

Microsoft Teams

DM sessions are private by default; non-enterprise connections default to all channels of teams where the app is installed (adjustable in Settings > Connections); and the note posted when an archived session is disconnected includes a reconnect link.

Team sync

Group and team sync from identity providers is more reliable: removed members are purged from preview on the same run, and sync no longer stalls on groups that fail to resolve.

Only allow connecting admin-configured MCPs

The enterprise setting that stops members from connecting their own remote MCPs is now called ‘Only allow connecting admin-configured MCPs’. Admins can add an MCP with Access set to Personal so each member signs in with their own account, including URL-only MCPs.

Microsoft 365 MCP

Microsoft 365 MCP sign-in uses account selection instead of forcing re-consent, no longer sends users to ‘Approval required’ after admin approval, and guest users can’t be DMed through the connector.

Atlassian MCP v2 endpoint

The Atlassian (Jira/Confluence) MCP connector uses Atlassian’s v2 MCP endpoint.

Org-level Agent capabilities

Admins can enable agent capabilities for specific organizations, instead of these being set only at the enterprise level.

Secrets sheets

New secret and Bulk add in Settings > Secrets use the updated sheet layout with clearer scope selection.

Devin Wiki in Thai

Devin Wiki can now be generated in Thai. Enterprise admins can enable it under Settings > Code Indexing > Languages.

Notification Inbox

Devin now has a notification inbox. The bell in the sidebar collects notifications about your sessions, such as when Devin finishes working or needs your attention, and opening a session marks its notifications as read. A new Settings > Notifications page lets you choose which notifications you receive in the inbox and which are also pushed to your phone. On mobile web, the bell opens your notifications full-screen.

Command Palette Refinements

The ⌘K palette lists the same navigation pages as the sidebar, with the same names and icons, lists settings pages directly (not individual settings), and when a pull request’s review is open in a session’s workspace pane its actions (copy link or branch, open in Devin Review or GitHub, convert to draft, close) are available from the palette. The C then L / C then B copy shortcuts also work in the review tab.

Sidebar Polish

Right-clicking a session opens its menu next to the row; the Automations filter is a single choice; the list refreshes sooner after clearing a search; and on mobile web the session list keeps its order while the sidebar is open.

Transcript Layout Fixes

Message bubbles and wide tables no longer overlap the timeline ticks on the right edge, and wide tables no longer jump sideways shortly after a session opens. File reference chips for same-named files show enough of the path to tell them apart, with the full path on hover.

Preview Chips Are Links

Browser preview chips in the worklog are now links: Cmd/Ctrl-click or middle-click opens the session’s preview in a new tab.

Issue Card Titles Link to the Issue

Clicking the title on Linear, Jira and Pylon issue cards now opens the issue.

Merge Queue Status Across the App

The PR header shows an orange “Queued” state while a pull request is in the merge queue; Devin Review has a “Remove from queue” button; the “Re-queue PR” prompt clears once the PR is queued; the “In merge queue” session status is grey; and a session with a stack of PRs shows “Stack is approved” only when every open PR in the stack is approved.

Private Key Strings Are Redacted More Aggressively

When a saved secret contains a private key, Devin now redacts each line of the key in command output, so the key stays hidden even when only part of it is printed.

Microsoft Teams

Teams notifications and chat previews for Devin’s card messages now say what the card is about instead of “Card”; after you link your Devin account, the “account isn’t linked” notice confirms the connection, offers the organization picker and lets you resend your message with one click; messages you send from the web app into a Teams DM with Devin appear as sent by you; and Devin can see existing reactions when it reads Teams channel, thread and group chat history.

Slack

Files you asked for are uploaded into the thread while supporting documents are linked to the session, so threads stay compact; the first message of a session started from Slack shows @Devin instead of the bot’s user id; and clicking a Devin button in Slack without access to the organization now shows a short message instead of failing silently.

Refreshed Plugin Rows and Logos

Plugin rows in Customize and the marketplace have a more compact look with app-style logo tiles and say whether a plugin is installed or recommended; the plugin details panel lists skills in two columns and leads with example prompts when a plugin provides them. MCP and plugin logos use one consistent tile and stay visible in dark mode.

Devin Review Permissions

Enterprise admins can grant the “Manage review rules” permission to custom organization roles. Editing an organization’s Review rules and exclusions requires that permission (members with only Review use access see them read-only), and applying suggested edits or changing a pull request’s auto-review setting requires Devin Review permission.

Security Profiles: Teams Group Chats

Security profiles have a Group chats setting under Microsoft Teams that controls whether Devin can read the group chat it was mentioned in, separately from channels.

Settings Dialogs Use the Updated Form Styling

Dialogs across Settings (automations, readiness, code review, code scans, sessions, workspaces, credentials and access, outposts, environments, gateway, review, plugins and blueprints) now share one form layout with inline validation. The blueprint Upload file dialog shows the generated environment variable as a read-only field with a copy button, and the webhooks receiver guide matches the API Quick start.

Analytics

ACUs per merged PR now counts merged PRs created in the selected period, and “per session user” counts users who started sessions; “previous period” comparisons always cover the same number of days immediately before the selection; trailing averages are weighted by usage; “Active users” on Overview and the Local tab include people whose usage was free; the Review tab’s repository usage counts only the period’s days; the Local tab has standard drilldowns and no organization filter; drilldown changes are coloured by whether the change is good for that metric; numbers use one format with one decimal place; tooltips match the calculations; and failed charts show an error with Retry. Oncall appears only for organizations that have Oncall or Oncall usage.

Terminal Tab in the Session Workspace

The session workspace has a new Terminal tab for running commands on Devin’s machine. The Files tab can now be opened while Devin is asleep, and opening Files or Terminal wakes Devin.

Keyboard Shortcuts and Command Palette

The Settings → Keyboard shortcuts page is now available to everyone. Mark the current session done (or not done) with ⌘⇧E / Ctrl+Shift+E, and actions from a session’s … menu can be found by typing in the command palette (⌘K).

Open HTML, PDF and SVG Attachments in a New Tab

HTML, PDF and SVG attachments have a new “Open in new tab” action that opens the file on a page of its own, with the filename as the tab title, instead of downloading it.

PR Hover Cards in the Owning Session

Hovering a pull request link shows its PR card even in the session that created or took over it.

Preview Quote Box Stays on the Picked Element

In Preview, the element highlight and quote box stay on the picked element when the pane is resized or the page scrolls, and the quote caption box is fully visible near pane edges.

Preview Loads Straight In After Wake

Opening a preview for a sleeping Devin session now loads straight into the app when the session resumes within a few seconds, instead of flashing a loading screen.

Side Chat Attachments

Files attached by a side chat reply now show as attachments.

Slack User-Group Mentions

Slack user-group mentions in Devin’s messages now show up in the webapp as named @group mentions instead of raw text.

Devin Review Effort Levels

Trigger actions can set a Devin Review effort level, and enterprise admins can choose the default effort level in enterprise Review settings.

Repository Access Without Devin Review Permission

Users with repository access can open PRs, inspect diffs and read existing Devin Review findings even without permission to run Devin Review. AI review actions are hidden for them, and the Bugs tab explains how to enable Review.

Azure DevOps Review Summary Threads Are Posted as Closed

On Azure DevOps, Devin Review’s summary comment (including “No Issues Found”) is posted as a closed thread, so it no longer blocks PRs under the “Comments must be resolved” branch policy. Inline findings are still posted as active threads.

PR Links in Devin Review Follow Your Preference

Links to other pull requests inside a PR description or comment in Devin Review follow your PR link preference, so with “open in session” they open as a tab in the session.

Code Scan Findings Page

Severity section headers stay pinned while you scroll, and once you check a finding each header shows a checkbox that selects or clears the whole severity. The select-all checkbox in the bottom bar selects every finding in the current tab, not just the loaded rows. The scan usage card shows how long the latest run took.

Fetch a Single Code Scan via API and MCP

API users can fetch a single code scan by id, including its attachment URLs, through GET /v3/organizations/{org_id}/code-scans/{scan_id} ; the Devin MCP code-scan tool has a matching get_scan action.

Microsoft Teams Improvements

The “Devin is working” status is a compact single line showing the current step; click it to see the full worklog. With “post as yourself” enabled, messages that quote another message are posted under your name too. When a file shared in Teams can’t be opened, Devin recommends connecting the Microsoft 365 OneDrive & SharePoint MCP. Automations can grant Teams direct messages.

Bitbucket Data Center PR Reviewers

Devin can now assign pull request reviewers on Bitbucket Data Center, by username, email address or display name.

Customize Points to the Right Tab

Opening an organization or enterprise skill, rule or uploaded plugin from the Personal tab shows which tab to edit it from with a button that takes you there.

Analytics Date Ranges Include Today

The “Last 7 / 30 / 90 days” ranges include today instead of ending yesterday; custom-range calendars match the reporting dates, and dashboard tooltips were rewritten for clarity.