Devin Release Notes

Devin Desktop

The Agent Command Center now follows whichever space is selected instead of being tied to one folder, converts an editor window in place (no reload, no save prompt), and any number of agent windows can run side by side.

A new Agent Command Center location setting (devin.agentWindow.location) can be used to split the agent command center into a separate window from the editor.

Remote agent hosts: connect to agents over SSH from the location selector, with saved hosts, status dots, and a server icon in the sidebar. SSH sessions recover the exact transcript after a reconnect.

Local sessions can now be deleted from the agent sidebar.

Faster startup, bounded memory for background transcripts and streamed file writes, and cheaper loading spinners.

When switching between sessions in the Agent Command Center, the file explorer now updates to match the working directory of the active session.

ACP is always enabled — the Enable ACP toggle is gone.

MCP authorization opens the provider directly, and Docker-based MCP servers from the registry launch correctly.

Agent activation failures report the agent’s last stderr line and open that agent’s output channel.

Some legacy Cascade entry points are removed: new-agent option, annotations, conversation mentions, settings group, automatic Lifeguard checks, Vibe & Replace, Deploy, and workflow commands.

Files Devin edits in Desktop count toward lines-of-code analytics.

Devin Cloud

Network access requests now match the web app: an “Allowlist N domains” card that names the policy blocking the destinations and lets permitted users update the governing security profile or automation.

Archiving a cloud session with open pull requests offers to close them, and archives its child sessions.

Improved cloud session formatting with an image preview carousel, hook run visibility, and rich queued messages.

A message sent during a Devin Cloud outage is held and delivered when the connection returns.

Added

• New mode slash commands alongside /ask and /plan : /code returns to Code mode, /smart switches to Smart mode, and /bypass (alias /bypass-permissions ) switches to Bypass Permissions. With a prompt they switch and then run it under the new mode.
• /session-stats now ends with a “by model” chart of the session’s billing metric, with per-model totals
• Disable tools by name with disabled_tools in your user config.json , for example "disabled_tools": ["webfetch", "web_search"] .
• Set agent.compaction_threshold_tokens in the user config to trigger automatic compaction earlier than the context-window-based default.
• Added an agent.codex_tools setting (off by default) enabling GPT models to use the Codex tool set — shell commands for reading and searching, apply_patch for edits
• Beta: shell.exec_shell (bash / zsh / fish / pwsh ) selects the shell the agent’s exec tool uses, and the agent can now pick a shell per command instead of always getting the machine’s default.
• Ctrl+Y pastes the text most recently deleted with Ctrl+U , Ctrl+K , Ctrl+W , Alt+D , or Alt+Backspace back at the cursor, with a footer hint until it is yanked back. Rebind it via editor.yank .
• Refusal fallback: when a provider refuses a request under its usage policy, Devin can switch to another model and retry the turn. Set DEVIN_REFUSAL_FALLBACK to a comma-separated list of models (or pass --refusal-fallback to devin acp ); disabled unless configured.
• PreToolUse hooks receive a tool_provenance object identifying the skill or MCP server behind the call, and the config file or plugin that declared it.
• Terminals without kitty keyboard protocol support (e.g. Apple Terminal) see an “Alt+Enter for multiline prompts” tip.
• Skill list and search can target active plugin skills without changing their existing project-path behavior.

Archiving Closes Child Sessions’ PRs

Archiving a session now also closes the open pull requests of the child sessions archived with it; they are listed in the archive prompt so you can choose which to close.

Multi-PR Dropdown in the Sidebar

Sidebar sessions with several pull requests in the same state now show a dropdown listing each PR, with the same details as the session header’s PR popover.

Open Changes and PR Files as Diffs

In a session’s Changes and PR tabs, file paths are clickable while Devin’s machine is online: clicking opens the file’s diff in the embedded editor, with a button to view the full file.

Desktop Tab on Touch Devices

The Desktop tab now works like a remote desktop on iPad and other touch devices (tap to click, drag, long-press for right-click, two-finger scroll). When Devin is asleep, the last screenshot fills the pane and hovering it offers a one-click “Wake up Devin” action.

Continue in a New Session after a Machine Failure

Hard-blocked machine-failure cards now offer “Continue in a new session” alongside “Try restart”, with a note that machine-local files and running processes do not transfer.

Composer Code Chips

Typing code in the message composer reliably turns the text into a code chip, Undo turns the chip back into plain text, and a backtick typed inside a chip becomes part of the code.

Cleaner Chat Rendering

A question you or a teammate answered now shows as that person’s normal chat message. In sessions where you are the only participant, Devin’s avatar and name header are hidden (hover a message to see its time) and appear once someone else joins.

Faster Tab Switching

Switching between the Progress, Diff, and PR tabs inside a session is roughly twice as fast, the Progress tab keeps your selected step, and switching no longer slows down as more pull-request tabs are kept open.

Queued Messages Survive Idle/Resume

Messages queued in a session are no longer lost when the session goes idle and resumes.

Simplify Devin Review PR Summaries

Devin Review’s top-of-page analysis is now a short, behavior-focused summary (one to two sentences plus up to five bullets) instead of a long implementation walkthrough.

Improve Progressive Disclosure of Review Findings

Review findings keep concise summaries while offering an optional “Learn more” section with a plain-language explanation, a concrete example, and a recommended fix; whole findings can be copied.

Re-scan New Commits and Bulk Remediate via MCP

Devin can re-run an existing code scan on just the new commits and fix several findings in one go, from a session or any Devin MCP client.

Webapp Answers Mirrored to Slack

Answers to Devin’s questions given in the web app now appear in the linked Slack thread.

Slack Controls in the Sidebar

Link a session to Slack, or turn Slack sync on and off, from the session’s ”…” menu in the sidebar without opening the session.

Sync to Teams from the Webapp

Sessions connected to a Teams chat can turn syncing on and off from the composer, the sidebar, and the command palette, the same way Slack sync works.

Teams Improvements

mute now fully disconnects a session from the chat and unmute or mentioning @Devin reconnects it; a “Detach session” card appears when Devin goes to sleep in DMs and group chats; Devin shows an “Approve deployment” button when it asks to deploy; and the Teams settings page includes the keyword tutorial and thread-mode setting.

Regex Matching in Text Fields

Automation text fields can use case-sensitive regular expressions (Google RE2 syntax).

Grayed-Out Templates

Templates that need an MCP server or integration your organization hasn’t set up stay visible but grayed out, with a hint explaining what to connect.

Update Approvals Show a Diff

Approving an automation update now shows exactly what changes: added, removed and modified triggers and actions, settings as old → new, and prompt edits as a line diff.

Automations Page Refresh

The Automations page opens on a “Mine” tab by default, empty tabs show the creation options in place, creating an automation or on-call responder opens in a side panel, and the preflight-check card and script editor have been redesigned.

Marketplace Updates

The Meticulous MCP server is out of beta, and Intercom now connects with an access token.

Plugins

Plugins bundle skills, rules, hooks, and MCP servers into a single installable package so you can customize how Devin works and share that setup across your team. Install plugins from the marketplace in Settings → Marketplace or from a repository, for your organization or your whole enterprise; plugin details show where a plugin comes from (pinned commit or tracked ref and folder) and which scopes have it installed, and skills from a newly installed plugin are available in the / and @ menus right away. Every install shows a security notice describing what the plugin can do and asks you to confirm you trust its source. Org and enterprise admins can mark plugins as required or available, and organizations inherit enterprise-managed plugins automatically.

Environment Build Attention

Enterprise admins can see which organizations need attention on the Environment page — consecutive failed builds, no usable snapshot, and a “Needs attention” filter — plus a “Last build failed” filter for repositories in an organization’s environment settings.

Roles and Access

Roles whose only remaining assignments are expired service users can be deleted. Members with an Ask-only role (such as “DeepWiki Only”) can see their past Asks in the sidebar, and view-only roles’ session lists are restored.

Git Bash on Windows

On Windows machines, Devin runs commands under Git Bash by default (PowerShell remains available on request, and is used when Git Bash is not installed).

Blueprint Suggestions

Devin validates proposed repository blueprints (YAML and schema) before suggesting them, and the setup guide lists the optional Clone step.

Devin Desktop

Note

Cascade has been removed.

Devin Local is now the only agent available in Devin Desktop. Use the Continue in Devin Local prompt to migrate existing conversations to the new agent.

The agent location picker now shows Local, Worktree, and Cloud as top-level options, with existing worktrees in a searchable nested submenu.

Agent sidebar: sessions updated in the last 30 days are shown by default.

The agent inbox list view now has per-row checkboxes for batch archive/unarchive, and the title-bar back/forward arrows navigate between the inbox and opened sessions.

Trigger menus (/ , @ , ! ) no longer open when followed by whitespace, and stay closed after you click into the conversation.

Cmd/Ctrl+F opens find-in-page in Devin Review and embedded Devin web surfaces. Devin Review tabs show the PR title, open GitHub links at their diff anchor, and the sessions sidebar swaps to a PR files/review sidebar (or the wiki page tree) while a fullscreen review or wiki is open.

PR cards gained Open Devin Review, Open in Desktop tab, Close PR, and Git settings actions, and Checkout branch now finds local clones (including worktrees) and lets you pick one when several match.

Fixed attaching to dev containers whose remote user is a uid:gid, Remote-WSL activation on a fresh install, and MCP registry fetches behind corporate proxies.

Clipboard images can be pasted into the New Session page.

Problems panel actions now send problems to Devin Local when Cascade is disabled.

Config changes reach sessions in the order they are selected, so a rapid sequence no longer lets an older update overwrite a newer one.

New Sidebar Grouping and Filters

The session sidebar can now group sessions by pull request status or by repository, and session filters now include Devin mode.

Cleanup Scan Type

A new cleanup scan type finds dead code and cleanup opportunities in your repositories.

/scan Composer Command

You can now start a code scan directly from the composer with the /scan command.

Scheduled Scans in Automations

Automations now support a code scan agent type, so you can schedule recurring scans or re-scan new commits automatically.

Redesigned Findings Tab

The scan findings tab has been redesigned for easier triage.

Richer Trigger Event Details

Automation runs now show richer event details for GitLab, Jira, incident.io, and GitHub triggers.

Clearer Reply Delivery

Slack users who are not members of the session’s organization are now warned when their replies cannot reach Devin.

Multi-Select Tag Filters

The session sidebar now supports multi-select metadata tag filters with per-tag counts, plus a machine-type filter.

Split Editor Groups in the Session Workspace

The session workspace editor now supports VS Code-style split editor groups.

Code Scan History

The scan detail page has a scan history sheet, and redesigned history rows show each run’s profile and cost.

Code Scan Validation Severities

Code scan profiles can now configure which finding severities require validation, with a threshold meter in the profile editor.

New MCP Marketplace Servers

Gmail, Google Calendar, Gamma, and Supabase MCP servers are now available in the marketplace, and marketplace entries now show icons.

Clearer MCP Install Approvals

MCP install approval cards now show the server’s identity, source, and resolved scope before you approve.

Authentication

We are upgrading our authentication platform and login page.

New Org Permission: Manage Personal Automations

Org admins can control who can manage personal automations independently from who can manage system user automations. Account-level automation permissions are also now more granular.

Queued Message Improvements

Queued messages are now delivered while Devin is in a long-running wait, and pressing Cmd/Ctrl+Enter while editing a queued message sends it immediately.

Waiting Activity Status

Sessions now show a dedicated “Waiting” activity status while Devin is intentionally sleeping in a wait.

Undo for Folder Moves

Moving sessions between folders now shows an undo toast, and Cmd/Ctrl+Z triggers the newest toast’s Undo action.

Accessibility Improvements

Reduced-motion users now get static/text equivalents for animated elements, and high-contrast support has been improved.

Redesigned GitHub Link Badges

Devin’s GitHub link badges (PRs, branches, commits) have a refreshed design.

Smarter @mention Routing in Slack Threads

@mentioning Devin in a thread now routes your reply to the session you’re subscribed to.

Default Working Org for Slack Channel Sessions

New Slack channel sessions are routed using the mentioning user’s default working organization.

Finer Automation Schedule Controls

Hourly schedules now have a minute selector, and run-once schedules use a date picker.

Multiple Slack Channels in Automation Triggers

Automation triggers can now select and edit multiple Slack channels.

Improve Existing Automations with Devin

A new “Improve with Devin” action lets Devin iterate on an existing automation for you.

Linked Triggering Events

An automation run’s triggering event source now links to its origin (e.g. the Slack message or issue).

Support Jira previous_status Automation Triggers

Jira status_changed triggers can now filter on the previous status, and the new status is optional.

Security Section

Code scan pages moved from /code-scan to /security (old links redirect). Scan sessions are listed for the user who triggered them, and archiving a scan’s root session cancels the scan.

Scan Now

A “Scan now” button in the Auto Scan configure dialog starts a scan immediately.

Batch Remediation via v3 API

New v3 API routes support batch remediation of findings at the org and enterprise level.

Allow PRs to Be Opened by Session Participants Configuration

A new org setting, “Allow PRs to be opened by session participants”, lets sessions open PRs as a validated session collaborator.

Streamlined MCP Marketplace Install and OAuth Connect

Installing an MCP server from the marketplace is now a single streamlined flow: install cards stay visible through approval, and the OAuth screen opens directly from the card.

Fixed

• Read-only commands prefixed with cd, such as cd /repo && find ., now resolve relative paths against the target directory for permissions. Ambiguous paths and output redirects continue to fail closed.
• The CLI no longer grows in memory on every screen redraw while waiting on an open prompt or a long-running turn.
• A pre_tool hook that blocks a tool call now returns its reason to the agent and lets the turn and sibling tool calls continue.
• Windows shell sessions no longer risk hanging indefinitely when closed immediately after startup.

Devin Desktop

The Agent Command Center now follows whichever space is selected instead of being tied to one folder, converts an editor window in place (no reload, no save prompt), and any number of agent windows can run side by side.

A new Agent Command Center location setting (devin.agentWindow.location) can be used to split the agent command center into a separate window from the editor.

Significantly improved performance for switching between Agent and Editor mode (Ctrl/Cmd+G).

Improved update process on Windows to only install after explicitly clicking Restart to Update.

Windows: Install Devin CLI now writes a shim to the bundled CLI, so updating Devin Desktop updates the devin command too.

Linux: uninstalling or upgrading the .deb no longer removes the shared Microsoft apt keyring, so other repositories signed by it keep working.

The agent sidebar, composer, and welcome page now warn when a workspace is untrusted and offer a trust workspace prompt to activate local agents.

Fixed a rare bug where the window could scroll up after a mode switch.

Improved recovery for corrupted file:// working directories.

Added the ability to rename sessions from the tab dropdown.

Enterprise: Added a link to request more usage when hitting ACU limits.

Devin Local

Added support for working on multi-root workspaces containing virtual filesystem folders.

Improved plan mode with a full Markdown plan file that can be separately reviewed, with an explicit Implement button.

Running subagents can be stopped individually without cancelling the turn.

Explain and Fix Problem sends problems to Devin Local when Cascade is disabled.

Devin Local tabs show the same status indicators as Cascade legacy tabs and the Current Workspace view keeps other projects’ conversations out of the list.

post_setup_worktree hooks now run for worktrees created from a Devin Local session, so .env files and other untracked setup are copied in before the session starts.

New settings control whether integrated terminal activity and local user-edit activity are shared with ACP agents (both remain on by default).

mcp_config.json no longer shows spurious “Property is not allowed” warnings.

Up/down arrows in the chat input once again navigate through previous prompts.

Fixed the migration wizard to work in remote SSH workspaces.

Devin Cloud

The sessions sidebar now has improved filtering and sorting controls.

Live shell output streams into the session while a command runs, and finished shell rows expand to their full command and complete output.

Terminal cards follow the newest output instead of the oldest, transcript timestamps appear on hover, and a failed send restores your draft to the input instead of losing it.

Session tabs and the command palette offer Copy Session URL.

Saving a session’s network config now reports a conflicting change instead of silently discarding it, and approving a network access request says why it failed.

Added

• New devin rm deletes a session, with confirmation by default and --force for non-interactive use; deletion is refused while another Devin instance has the session open.
• New devin desktop shortcut opens Devin Desktop if installed, and a bare path such as devin . opens Devin Desktop on that path.
• New devin doctor command checks custom subagent profiles for incorrect frontmatter.
• New /recap command catches you up on the session with a short agent-generated summary of what was worked on, key decisions, and where things stand.
• New /rename renames the current session.
• New Alt+P shortcut toggles Plan mode without clearing the input.
• /handoff now asks which OS the cloud session should continue in when your organization has more than one platform available, instead of silently reusing the last cloud session’s environment.
• Ask and Plan modes can now use the read-only webfetch and notebook_read tools for research.
• Plugins are now compatible with the Agent Plugins 1.0.0 format.
• Plan mode writes plans to a file so they always have a heading and summary paragraph.
• The subagent tray and detail view show which model a subagent is running on when it differs from the parent’s model.
• Accounts billed in credits now see a model’s credit multiplier in the model selector (e.g. 1.25 credits / message) instead of only a relative cost label.
• The input footer shows a “ctrl+v to paste image in clipboard” hint while an image is on the system clipboard.

Changed

• Instant slash commands (/status, /context, /fast, /session-stats, /help, etc.) now run immediately while the agent is working instead of queueing until the turn finishes, render their replies in scrollback instantly rather than through the typewriter, and pair each reply with its own command.
• Unknown slash commands now fail instantly with Unknown command: /notacommand. Use /help to see available commands.
• /model, /models, the model keyboard shortcuts, and the footer model picker now apply while Devin is working, so the next request uses the selected model.
• /btw now opens a side-chat panel that runs in parallel with the main agent: questions are answered from the conversation’s context while the agent keeps working.
• /usage shows a richer panel: daily/weekly quota progress bars with reset times, an extra usage balance line when present, and more info on the current session.
• The session picker (devin -r, /resume, devin ls) shows all sessions by default with the current directory’s sessions sorted to the top; Alt+G narrows to the current directory.
• The background shells tray (Ctrl+B) lists all running background commands.
• Command card titles show the meaningful command instead of the first shell token, skipping cd, environment prefixes, and wrappers like sudo / env.
• Queued messages render in a distinct “N queued” section above the input box with ↑ edit / ↵ send now hints.
• Faster session startup, especially in large repositories with many rule and skill files.
• On Unix, cancelling or timing out a shell command now sends SIGTERM to the process group first and SIGKILL only after a 5-second grace period.
• Read-only git command detection is now shared across bash, PowerShell, and smart mode.
• /bug opens the bug submitter when run without a description, rejects submissions from outdated CLI versions, and shows a checklist receipt of what was sent (with the local zip path for zero-data-retention accounts).
• Presentation polish across the REPL: agent output is inset by one column with tighter tool cards, code blocks are indented two cells with balanced padding, inline code has padded backgrounds, /help aligns and dims descriptions, the interrupt hint turns a warning color, and the first-run welcome screen is a compact tips card.
• Broader Claude plugin compatibility: hooks are also loaded from hooks/hooks.json, hook commands additionally receive CLAUDE_PROJECT_DIR and CLAUDE_PLUGIN_ROOT, and subagent profiles accept the tools frontmatter field as an alias for allowed-tools.
• The model picker has been redesigned for improved price transparency and more intuitive navigation.

Fixed

• Hitting a monthly usage limit now shows a “Usage limit reached” alert with a clickable “Request more usage” link instead of a raw permission-denied error, and the “Quota exhausted” alert links to usage settings.
• Background shells keep streaming live output to their command card after the turn ends — including after an interruption — and show the full output on completion instead of a 1000-character preview.
• Command cards carry the full retained terminal scrollback (up to ~3500 lines), show a scrollable ~100-line window while streaming, elide the middle of very large output with a marker instead of showing only a tail, and no longer lose chunks from commands that emit fast bursts.
• Shell commands with endless output no longer grow memory without bound.
• --continue now continues the most recent session in the current directory that is not already open in another process, instead of failing on a locked session.
• A single invalid value in config.json no longer discards all user settings.
• Permission rules now match correctly when a workspace, config, or granted directory name contains glob metacharacters such as [, ], {, }, *, or ?.
• SessionEnd lifecycle hooks now run when a session ends, with a reason matching Claude Code’s vocabulary.
• Stop hooks now receive last_assistant_message in their stdin payload, so they can read the agent’s final response without parsing a transcript. Hooks contributed by a plugin also get DEVIN_PLUGIN_ROOT.
• Hooks from a second workspace directory now run in that workspace, and DEVIN_PROJECT_DIR always points at the hook’s project root.
• Skills, rules, hooks, and subagent profiles that come from an installed plugin now appear in the Skills, Rules, Hooks, and Subagents lists, labeled with the plugin’s name.
• Invoking a skill passes the whole SKILL.md to the model instead of truncating it to the tool-result budget, and $ARGUMENTS / $1 – $9 placeholders are interpolated with the arguments passed to /skill-name.
• Skills discovered mid-session are listed again after context compaction instead of disappearing for the rest of the session.
• Ask and Plan modes can use web search for read-only research when the tool is available.
• Pressing x on the tray’s Subagents tab kills only the selected subagent instead of cancelling the whole turn.
• An interrupted auto-update can no longer leave the installation broken with current pointing at a missing version directory; devin update also repairs an already-dangling installation.
• Windows: multi-line pastes no longer split into separate prompts, pty_for_noninteractive_exec no longer makes every non-interactive command hang, cancelled commands kill the whole process tree, and Chrome discovery checks per-user installations.
• Terminal rendering fixes: multiline paste works in terminals without bracketed paste, selection lists scroll instead of overflowing short terminals, searchable pickers move the highlight to the adjacent visible row, wrapped inline code no longer leaves a stray highlighted cell, the live area flickers less when it resizes, streaming tool-call arguments animate smoothly again, and sending queued messages no longer shows a spurious cancellation prompt.

Redesigned Session Page Header

The session page header is more compact, with tags and session hierarchy built in.

Redesigned Sessions Sidebar

The sessions sidebar has been redesigned with customizable nav tabs, grouping, richer filtering, and a cleaner session list.

Refreshed Chat Visual Design

The chat interface has a refreshed visual design.

Nested Sub-Devin Sessions

Sub-Devin sessions are now shown as a nested tree in the sidebar.

Hideable Sidebar

The sidebar can be fully hidden and peeked on hover.

Session Subscribers

Follow and view others’ sessions, with subscriber-based sidebar organization and filtering.

Inline Session Rename Shortcut

Press Cmd/Ctrl+Option+R on a session page to rename the session inline.

Stop Devin Shortcut

Press Cmd/Ctrl+Shift+Backspace to stop Devin while it is working.

Default Org Picker in Slack DMs

In Slack DMs with Devin, you can now set your own default organization with the !org picker.

Bearer Secrets for Automation Webhooks

Automation webhooks can now authenticate with an Authorization: Bearer secret.

Duplicate Findings Fix

Resolved a regression in Devin Review that led to findings being reported multiple times.

Clearer Findings

Improved clarity and conciseness of Devin Review findings.

Change a Scan’s Profile

You can now change a code scan’s security profile from the UI.

Scan Effort Selection

Choose a scan effort (normal/deep) on the ingest scan form, and set it via the v3 API.

New v3 Scan API Endpoints

The v3 API can now trigger an incremental (diff) scan immediately and accepts multiple repos on ingestion scan start.

Finding Resolution Notes

A finding’s resolution note is now shown in the UI, and a one-time “Scan new commits” action is available when automations are unavailable.

Enterprise MCP Servers Support

Enterprise admins can now configure an MCP server once at the enterprise level and make it available to the organizations they choose, in Settings → Connections → MCP. An organization’s own installation of the same server overrides the enterprise version.

Private Network MCP Servers for Dedicated Deployments

For dedicated deployments, Devin can now use MCP servers that are only reachable inside your own network: both the OAuth authorization flow and Devin’s calls to the server travel through your private network tunnel instead of the public internet. Enterprise admins can also upload the private certificate authority bundle that Devin should trust for that traffic.

Replace Secret Values in Place

Enterprise-scoped secrets can now have their values replaced in place.

New MCP Marketplace Entries

The New Relic MCP is now available in the MCP marketplace, and the Mintlify Index MCP is out of beta.