Devin CLI Updates & Release Notes

Added

• Steering improved to immediately interrupt Devin when a new message is received, without losing progress on long-running terminal commands.
• /rename with no argument generates a new session title from the conversation so far. /rename <new title> still sets the title you give it.
• /pickup (and /handoff from a cloud session) gives the new local session a summary of the cloud session as background context.
• Set read_config_from.cloud: set it to false to keep your Devin Cloud account’s MCP servers and personal plugins out of the CLI. Plugins your organization requires still load.
• [Experimental] Introduced a new DEVIN_SESSION_STORE=files option to keep session history as a folder of files instead of SQLite, so devin -r works when your home directory is on NFS, SMB or another shared filesystem.
• Hooks:
  • fail_closed: true blocks the action a hook guards when the hook itself fails to run, instead of going ahead without it.
  • A hook can end the agent’s turn from any event with stop: "<reason>" in its output (Claude-format hooks: continue: false / stopReason: ).
  • PostToolUse hooks can replace a tool result before the model reads it with hookSpecificOutput.updatedToolOutput, for example to redact content a tool returned.
• New /confetti command.

Changed

• Tool calls show as compact single-line summaries in the transcript; press Ctrl+O for the full tool cards. Commands that exit with a nonzero status show a red cross.
• Use the new agent.verbosity setting to control how much detail is shown in the transcript.
• The tool approval prompt is now Allow, Bypass mode and Deny. Use ←/→ on Allow to pick how long the grant lasts (Once, Session, Project, Always), and press e to edit the command.
• The /model picker lists models in the same order as Devin Desktop.
• The /config editor looks like the model picker: a search box on top, the setting’s description under the list, and values in one aligned column.
• /context draws one bar per section (system prompt, tools, messages, free) in the same style as /session-stats.
• The session picker (devin --resume, /resume, devin ls) opens as soon as the session list is read instead of taking seconds on a large sessions database; type-to-search matches session titles only. /resume with no id opens the picker over the running session.
• devin models on its own lists the available models.
• A session you own is made private when your machine connects through a devin --cloud session or Devin Desktop local access, not only through devin connect <code>. Only the user whose machine is connected can approve a local tool call or turn on bypass permissions from the cloud session.
• /loop and its agent.model_mixture setting are removed. Use /goal to keep Devin working on an objective until it is done.

Fixed

• Interrupting a turn (Esc-Esc, Ctrl+C, or a steer message) no longer waits for an MCP server that is still connecting or waiting for OAuth sign-in.
• MCP servers that answer the server/discover probe with an incomplete result (for example MCP Toolbox for Databases) now connect instead of failing with “expected initialized result”.
• GPT-5.x / GPT-6 models can use ask_user_question and todo_write again, in normal and plan mode.
• A message with more image data than the server accepts no longer leaves the session failing every later turn with “Request payload is too large”; the images that do not fit are dropped and the turn continues.
• Reopening a session (devin -r, or a click in the Devin Desktop sidebar) no longer moves it to the top of the session list; a session moves only when you send a message, rename it, or change its mode, model, or directory.
• A change saved to your personal or org plugin in Customize is picked up by the next session, instead of only after the plugin cache’s refresh interval.
• A hook matcher written as a list of strings ("tool_name": ["shell", "bash"]) matches any of them.
• Local tool use: a local_exec command that names a credential path without ~ ($HOME/.aws/..., %USERPROFILE%\..., an absolute home path) now always asks for approval, as the ~ form already did.
• Windows: devin acp no longer leaks memory while sessions sit idle.
• The thinking-level shortcut (Opt+T / Alt+T) steps through the levels in order (low, medium, high, xhigh, max) and leaves Fast Mode unchanged.
• When the connection drops mid-response, text already streamed stays in the transcript while the request is retried, and repeated failures show as one notice instead of a line per retry.
• Rendering: the input box no longer jumps by a line while a reply streams in, wrapped list lines line up under the item’s text, and the session title, tip and placeholder no longer run into the model name or folder path in narrow terminals.

Added

• New /goal <objective> command: Devin keeps working on the objective across turns, continuing automatically each time a turn ends, until it reports the goal complete or blocked. /goal shows its status, /goal resume continues after an interrupt, and /goal clear drops it. A run pauses itself after 50 turns. Not available on prompt-based plans.
• Added steering support: a message typed while Devin is working is handed to the running turn instead of waiting in the queue: Devin reads it at its next step, with nothing cancelled. Cmd+Enter (Ctrl+Enter on other platforms) queues the message until the turn ends instead.
• Provider billing: when your account can pay for a provider’s models with a provider plan such as your ChatGPT plan, the model picker marks those models with an asterisk. Press Ctrl+S in the picker or use /billing (/billing on|off) to switch the plan on or off for your account.
• Press Alt+Enter in the model picker (/model, Alt+M) to switch models for the current session only. Enter still saves the pick as the default for new sessions. Rebind it with model_picker.confirm_for_session.
• New config.json settings:
  • typewriter: set it to false to show streamed text as soon as it arrives
  • agent.subagent_model: the model for subagent_explore and custom subagents that don’t set their own
  • local_tools_bypass_permissions: start every local-tools connection, such as devin connect, with Bypass Permissions on; deny and ask rules still apply
• devin plugins install owner/repo accepts repositories that ship only skills/<name>/SKILL.md and no plugin manifest, such as anthropics/skills.
• DEVIN_SESSIONS_DIR moves the session history database to another directory, for example a local scratch disk when your home directory is on NFS.
• Plugins can declare where they apply with platforms (cloud, local, or both) in the plugin manifest, and plugin hooks can use PLUGIN_ROOT for bundled files and PLUGIN_DATA for data that survives plugin updates.
• PreCompact and PostCompact command hooks run before and after context compaction, with manual and auto trigger matchers. Hook failures do not block compaction, and the existing PostCompaction hook remains supported.
• MCP improvements:
  • Added support for MCP servers on protocol revision 2026-07-28.
  • devin mcp list and devin mcp get show a Source: line for each server, naming the config file or plugin it was loaded from.
  • HTTP and SSE requests to MCP servers send a User-Agent: Devin-CLI/<version> (<ide>) header unless the server’s configured headers set one.
  • [Private Preview] Devin CLI can now connect to remote MCPs configured in Devin Cloud. Only enterprise-level MCPs will be reached.
  • When an MCP server rejects its saved OAuth sign-in and it cannot be refreshed, the credentials are removed and you are told once; the server asks you to sign in again the next time it is used.
• The REPL reports its status (idle, working, blocked on a prompt, done, or failed) to the terminal with OSC 7501, so terminals that support it can show which Devin sessions need you. disable_osc turns it off.
• Sandbox permission prompts can offer to let every run of a command (for example go build) run outside the sandbox, which saves it to sandbox.excluded.allow.
• devin connect: cloud sessions can view image files on the local machine and copy files between the local machine and the session VM. When a rule forces an approval for a command a cloud session runs on your machine, the approval card names the rule and where it comes from.
• In a multiline prompt, Ctrl+U at the start of a line removes the line break, so repeated Ctrl+U clears the prompt line by line.
• Added the ability to force open sessions that are currently open elsewhere/held by a stale process.
• Ctrl+C clears a non-empty draft, including image attachments, without interrupting the running task. Press it with an empty input to cancel the task.
• devin cloud with no subcommand opens a Devin Cloud session, the same as devin --cloud, and devin --cloud no longer warns about running from your home directory or asks you to trust the current directory.

Changed

• Permission prompts forced by an organization-managed “ask” rule now say so.
• Changing the thinking effort of the current model mid-session no longer discards the prompt cache on models that support per-message effort (Claude Opus 5, Opus 5.5, Fable 5.1, and GPT-6).
• In ACP clients, /normal is an alias of /code, /context shows a table of tokens and percent per section, and a /bug report that fails to submit fails the request with the reason.
• Session search results are ordered by relevance instead of recency, and the /model picker lists recommended models right after your recently used ones.
• Visual polish: Markdown headings follow one color hierarchy, muted text in the light theme meets WCAG AA contrast, warnings are marked with a triangle (▲), pending tool calls use a yellow dot, command cards no longer show the Session: and Timeout: lines, /login-status lists its fields in aligned columns, the login flow is cleaner, and the devin update progress bar is a solid bar.

Fixed

• Smart mode asks less often, with routine commands auto-approved. Destructive Git comands, requests that send data, and writes outside your project still require approval.
• Improved performance:
  • Deferred background tasks during startup to make the CLI even faster to start.
  • Switched to gzip for all API requests. Set "proxy": { "gzip": false } in config.json if a proxy cannot handle compressed requests.
  • Reduced redraw/rendering overhead for long sessions.
  • Optimized parsing for repos many skills.
• A plugin with a non-semver version (for example v2 or 2024.01) loads instead of being rejected, and a marketplace that lists plugins from its own repository at a branch is downloaded once per install instead of twice.
• devin --cloud and devin --cloud -p report the failure at once when the Devin API refuses the connection or the host does not resolve, instead of hanging or retrying for about 31 seconds, and -p prints the server’s reason when the cloud session cannot start.
• Cloud WebSocket connections (/org, /handoff, devin connect) and plugin bundle downloads go through the configured proxy like every other API call.
• Re-authenticating from inside a session opens the deployment you signed in to (Fed, EU, or a dedicated tenant) instead of app.devin.ai.
• Sessions on a model router such as Adaptive no longer get stuck on “Authentication failed: an internal error occurred” once the cached model assignment expires, for example after the machine slept overnight.
• In devin acp, a session no longer picks up another repository’s rules, skills, or repo plugins after running a command, and agent messages streamed live carry a timestamp.
• Choosing “Yes, switch to bypass mode” (or “switch to accept edits”) on one permission prompt also approves the session’s other open prompts that offered the same switch.
• In autonomous (sandbox) mode, Write(...) allow rules auto-approve matching file edits.
• Sandboxed commands on Linux no longer fail with “Couldn’t connect to server” when they open a connection before the sandbox’s network proxy is ready.
• read_config_from in a project’s .devin/config.json holds for everything loaded from that project, even when your user config turns the provider on, and skills from a provider that is turned off can no longer be invoked by name or found by skill search.
• Rules: .devin/global_rules.md and .devin/rules/ still load with read_config_from.windsurf = false, devin rules list honors read_config_from, a rule that is both always-on and path-triggered is injected once, and rule files in a directory created mid-session are loaded.
• Hooks: a hook file that declares Claude Code’s Notification or SubagentStop events no longer loses all of its hooks, and Windsurf-format command and write hooks fire on GPT models.
• Plugins: optional plugins pinned to a branch and marketplace plugins with nested agent profiles in a private repository load, and one unreadable plugin no longer hides the others offered alongside it.
• Session history on a network filesystem (NFS, SMB, Lustre, AFS) no longer fails with session/list failed, disk I/O error, or database is locked.
• Command output containing terminal escape sequences (such as OSC 8 hyperlinks) no longer leaks into your terminal, and non-ASCII model output no longer occasionally turns into �.
• A background shell the agent kills disappears from the shell tray, and an environment variable whose value contains a NUL byte no longer makes every shell command fail to start.
• /usage refreshes the account’s ACU total and limit instead of showing the values from startup.
• --model <slug> no longer fails with Unknown model when the server is slow to return the model list on a cold start.

Added

• Run Devin Cloud sessions from the CLI with devin --cloud or /cloud
• /handoff and /pickup bring a cloud session’s pull request branch into a local session, offering to select a PR or clone its repository when needed.
• Use devin ssh or /ssh to connect to a Devin Cloud VM.
• ACP clients can select Devin models, thinking effort, and speed through session configuration controls.
• Agent shell commands expose AI_AGENT=devin__agent unless another agent already set that variable.
• Export agent events and metrics to an OpenTelemetry collector using the otel block in the user config or standard OTEL_EXPORTER_OTLP_* variables.
• Optional organization and enterprise plugins installed through Customize now load in the CLI, subject to the current organization.

Changed

• ACP authentication can answer from cached team settings while account details refresh in the background, so returning users can start without waiting on those network calls.
• ACP reports a structured, retryable error when an agent’s communication channel closes, allowing clients to reconnect rather than retry a prompt.
• In Bypass Permissions mode, file edits no longer open an editor review.
• /loop now runs each review in a fresh read-only subagent without clearing the working agent’s conversation or session history.
• Rules are discovered recursively under .devin/rules/ and .windsurf/rules/ .
• Refreshing git plugins reuses unchanged refs and shared downloads, and refreshes stale plugins concurrently.
• Session-lock errors identify the process holding the lock, including over ACP.

Fixed

• ACP clients can use MCP servers supplied in session/new or session/load, including HTTP and SSE servers; plugin operations also report their failure reasons instead of a generic internal error.
• Custom subagent profiles and skills can grant the write tool using allowed-tools, and permission rules recognize it.
• Cursor rules with string-valued globs load correctly.
• Esc in an expanded model picker returns to the family row, and the Lead list offers every lead even when the current configuration has no pairing.
• PowerShell commands with literal variable assignments prompt for approval of the script rather than a hashtable key; long script paths in allow options remain identifiable.
• Resizing terminals with long transcripts no longer causes a redraw storm, and wide Markdown tables no longer clip their last column.
• Skills from Claude and Windsurf directories report the correct provider; skills, rules, and custom subagents load in a stable order.
• On Windows, PowerShell command output no longer intermittently comes back empty or includes the echoed command, and restarting devin forward on the same port waits for the old forward to release it.
• Interrupting an agent parks running subagents for the next message rather than killing them, except for a running Fusion sidekick.
• Subagents start with global and workspace always-on rules, and the Subagents, Shells, and Cloud agents trays scroll when taller than the terminal.
• /login is hidden in cloud sessions so an API key cannot accidentally be sent as a cloud message. To switch accounts, use devin auth login and then /clear .

Added

• New mode slash commands alongside /ask and /plan : /code returns to Code mode, /smart switches to Smart mode, and /bypass (alias /bypass-permissions ) switches to Bypass Permissions. With a prompt they switch and then run it under the new mode.
• /session-stats now ends with a “by model” chart of the session’s billing metric, with per-model totals
• Disable tools by name with disabled_tools in your user config.json , for example "disabled_tools": ["webfetch", "web_search"].
• Set agent.compaction_threshold_tokens in the user config to trigger automatic compaction earlier than the context-window-based default.
• Added an agent.codex_tools setting (off by default) enabling GPT models to use the Codex tool set — shell commands for reading and searching, apply_patch for edits
• Beta: shell.exec_shell (bash / zsh / fish / pwsh) selects the shell the agent’s exec tool uses, and the agent can now pick a shell per command instead of always getting the machine’s default.
• Ctrl+Y pastes the text most recently deleted with Ctrl+U , Ctrl+K , Ctrl+W , Alt+D , or Alt+Backspace back at the cursor, with a footer hint until it is yanked back. Rebind it via editor.yank .
• Refusal fallback: when a provider refuses a request under its usage policy, Devin can switch to another model and retry the turn. Set DEVIN_REFUSAL_FALLBACK to a comma-separated list of models (or pass --refusal-fallback to devin acp ); disabled unless configured.
• PreToolUse hooks receive a tool_provenance object identifying the skill or MCP server behind the call, and the config file or plugin that declared it.
• Terminals without kitty keyboard protocol support (e.g. Apple Terminal) see an “Alt+Enter for multiline prompts” tip.
• Skill list and search can target active plugin skills without changing their existing project-path behavior.

Changed

• Model families remember the last configuration you selected, including reasoning level, effort, and fast settings.
• Shell commands that only read, search, or list files are titled like the matching tool call (“Read lines 10-20 in src/main.rs”, “Searched for foo in src”) and render as compact title-only cards when they succeed.
• Large diff previews show the last 50 diff lines behind a [... N lines truncated ...] marker so big edits no longer slow down rendering.
• Unchanged context lines in diffs have a subtle gray background, and in-progress tools use yellow hollow indicators.
• Reopening a local session streams the stored conversation to the client message by message and no longer keeps a second copy in memory, roughly halving the memory a large reopened session uses.
• --model now applies when resuming with -c / --continue or -r / --resume , switching the rest of the conversation to that model instead of being ignored.
• More specific command permission allows (e.g. allowing git status ) can override a broader ask rule at the same configuration level.
• Usage-limit warnings follow the enterprise’s configured request action, linking to its own intake tool or showing its guidance; enterprises without one keep the “Request more usage” link.
• devin plugins install on a Claude Code plugin marketplace now recognizes it and offers to install a plugin (with a picker for multi-plugin marketplaces) instead of failing to read a manifest, and a repository with no manifest at any supported location fails with “no plugin manifest found”.
• MCP OAuth logins advertise http://localhost:8765/callback as the redirect URI (previously http://127.0.0.1:8765/auth/callback ). If your identity provider allowlists Devin’s redirect URI by exact string, update it to the new value.
• The startup workspace trust prompt, login selection screen, and login confirmations were reworked for clearer navigation and consistent Devin branding.

Fixed

• The CLI no longer shows Devin as idle while a background subagent is still running: the turn stays active until it finishes, so the usual interrupt (esc esc or ctrl+c) cancels it, and its tool cards show live instead of being dumped into your next turn.
• Smart mode is never less permissive than Code mode: allow rules and auto-approved workspace edits are honored identically. Sensitive paths still always prompt, with the session’s plan files exempt. Starting or resuming in Smart mode also no longer prints a spurious “Smart permission mode is not available” warning.
• Resuming a session and choosing its original directory no longer hangs when that directory has been deleted, and listing local sessions no longer fails entirely when a single stored row is unreadable.
• Server-side model errors show the Devin API’s own explanation instead of a generic “Connection error”, and server rate limits are no longer labeled “Quota exhausted”.
• cd -prefixed commands whose target can resolve differently at runtime keep the fail-closed permission behavior, and on Windows a PowerShell command starting with a parenthesized expression offers the real command name to allow.
• web_search can now be used as a tool name in permissions.deny / permissions.ask / permissions.allow ; previously it was rejected and web searches were always auto-approved.
• Skills under .cursor/skills/ and ~/.cursor/skills/ are auto-loaded like .claude/skills/ , skills reachable through more than one path (e.g. symlinked directories) load once instead of per alias, and skills dropped from context by compaction are discovered again when the agent next touches their trigger paths.
• Invalid saved plugin entries no longer prevent unrelated plugins from loading, plugins required only by a forbidden plugin no longer activate, and git plugin sources with @ in repository paths keep a consistent identity across HTTPS and SSH URLs.
• devin mcp login succeeds against authorization servers that advertise RFC 9207 issuer identification, MCP connection setup times out instead of leaving later requests waiting on a stalled server, and MCP prompt commands no longer generate background requests every 15 seconds per conversation.
• /compact shows only a spinner until it finishes and queues prompts typed during compaction, /fast runs the prompt after switching models, long /btw answers scroll with Up/Down, and you can revert the first prompt while Devin is active.
• Reduced the risk of local session database corruption with upstream SQLite fixes.
• Shared conversation titles show file mention names instead of local file paths.
• Debug exports preserve linked foreground and background subagent chains so trajectory viewers can open each agent’s trace, and /debug links directly to the upload page for viewing the export.
• Removed the e / Shift+Enter “select+type” shortcut in the question tool. Explanations typed this way were silently dropped; use the “Other” option for custom text.

Fixed

• Read-only commands prefixed with cd, such as cd /repo && find ., now resolve relative paths against the target directory for permissions. Ambiguous paths and output redirects continue to fail closed.
• The CLI no longer grows in memory on every screen redraw while waiting on an open prompt or a long-running turn.
• A pre_tool hook that blocks a tool call now returns its reason to the agent and lets the turn and sibling tool calls continue.
• Windows shell sessions no longer risk hanging indefinitely when closed immediately after startup.

Added

• New devin rm deletes a session, with confirmation by default and --force for non-interactive use; deletion is refused while another Devin instance has the session open.
• New devin desktop shortcut opens Devin Desktop if installed, and a bare path such as devin . opens Devin Desktop on that path.
• New devin doctor command checks custom subagent profiles for incorrect frontmatter.
• New /recap command catches you up on the session with a short agent-generated summary of what was worked on, key decisions, and where things stand.
• New /rename renames the current session.
• New Alt+P shortcut toggles Plan mode without clearing the input.
• /handoff now asks which OS the cloud session should continue in when your organization has more than one platform available, instead of silently reusing the last cloud session’s environment.
• Ask and Plan modes can now use the read-only webfetch and notebook_read tools for research.
• Plugins are now compatible with the Agent Plugins 1.0.0 format.
• Plan mode writes plans to a file so they always have a heading and summary paragraph.
• The subagent tray and detail view show which model a subagent is running on when it differs from the parent’s model.
• Accounts billed in credits now see a model’s credit multiplier in the model selector (e.g. 1.25 credits / message) instead of only a relative cost label.
• The input footer shows a “ctrl+v to paste image in clipboard” hint while an image is on the system clipboard.

Changed

• Instant slash commands (/status, /context, /fast, /session-stats, /help, etc.) now run immediately while the agent is working instead of queueing until the turn finishes, render their replies in scrollback instantly rather than through the typewriter, and pair each reply with its own command.
• Unknown slash commands now fail instantly with Unknown command: /notacommand. Use /help to see available commands.
• /model, /models, the model keyboard shortcuts, and the footer model picker now apply while Devin is working, so the next request uses the selected model.
• /btw now opens a side-chat panel that runs in parallel with the main agent: questions are answered from the conversation’s context while the agent keeps working.
• /usage shows a richer panel: daily/weekly quota progress bars with reset times, an extra usage balance line when present, and more info on the current session.
• The session picker (devin -r, /resume, devin ls) shows all sessions by default with the current directory’s sessions sorted to the top; Alt+G narrows to the current directory.
• The background shells tray (Ctrl+B) lists all running background commands.
• Command card titles show the meaningful command instead of the first shell token, skipping cd, environment prefixes, and wrappers like sudo / env.
• Queued messages render in a distinct “N queued” section above the input box with ↑ edit / ↵ send now hints.
• Faster session startup, especially in large repositories with many rule and skill files.
• On Unix, cancelling or timing out a shell command now sends SIGTERM to the process group first and SIGKILL only after a 5-second grace period.
• Read-only git command detection is now shared across bash, PowerShell, and smart mode.
• /bug opens the bug submitter when run without a description, rejects submissions from outdated CLI versions, and shows a checklist receipt of what was sent (with the local zip path for zero-data-retention accounts).
• Presentation polish across the REPL: agent output is inset by one column with tighter tool cards, code blocks are indented two cells with balanced padding, inline code has padded backgrounds, /help aligns and dims descriptions, the interrupt hint turns a warning color, and the first-run welcome screen is a compact tips card.
• Broader Claude plugin compatibility: hooks are also loaded from hooks/hooks.json, hook commands additionally receive CLAUDE_PROJECT_DIR and CLAUDE_PLUGIN_ROOT, and subagent profiles accept the tools frontmatter field as an alias for allowed-tools.
• The model picker has been redesigned for improved price transparency and more intuitive navigation.

Fixed

• Hitting a monthly usage limit now shows a “Usage limit reached” alert with a clickable “Request more usage” link instead of a raw permission-denied error, and the “Quota exhausted” alert links to usage settings.
• Background shells keep streaming live output to their command card after the turn ends — including after an interruption — and show the full output on completion instead of a 1000-character preview.
• Command cards carry the full retained terminal scrollback (up to ~3500 lines), show a scrollable ~100-line window while streaming, elide the middle of very large output with a marker instead of showing only a tail, and no longer lose chunks from commands that emit fast bursts.
• Shell commands with endless output no longer grow memory without bound.
• --continue now continues the most recent session in the current directory that is not already open in another process, instead of failing on a locked session.
• A single invalid value in config.json no longer discards all user settings.
• Permission rules now match correctly when a workspace, config, or granted directory name contains glob metacharacters such as [, ], {, }, *, or ?.
• SessionEnd lifecycle hooks now run when a session ends, with a reason matching Claude Code’s vocabulary.
• Stop hooks now receive last_assistant_message in their stdin payload, so they can read the agent’s final response without parsing a transcript. Hooks contributed by a plugin also get DEVIN_PLUGIN_ROOT.
• Hooks from a second workspace directory now run in that workspace, and DEVIN_PROJECT_DIR always points at the hook’s project root.
• Skills, rules, hooks, and subagent profiles that come from an installed plugin now appear in the Skills, Rules, Hooks, and Subagents lists, labeled with the plugin’s name.
• Invoking a skill passes the whole SKILL.md to the model instead of truncating it to the tool-result budget, and $ARGUMENTS / $1 – $9 placeholders are interpolated with the arguments passed to /skill-name.
• Skills discovered mid-session are listed again after context compaction instead of disappearing for the rest of the session.
• Ask and Plan modes can use web search for read-only research when the tool is available.
• Pressing x on the tray’s Subagents tab kills only the selected subagent instead of cancelling the whole turn.
• An interrupted auto-update can no longer leave the installation broken with current pointing at a missing version directory; devin update also repairs an already-dangling installation.
• Windows: multi-line pastes no longer split into separate prompts, pty_for_noninteractive_exec no longer makes every non-interactive command hang, cancelled commands kill the whole process tree, and Chrome discovery checks per-user installations.
• Terminal rendering fixes: multiline paste works in terminals without bracketed paste, selection lists scroll instead of overflowing short terminals, searchable pickers move the highlight to the adjacent visible row, wrapped inline code no longer leaves a stray highlighted cell, the live area flickers less when it resizes, streaming tool-call arguments animate smoothly again, and sending queued messages no longer shows a spurious cancellation prompt.

Changed

/share now displays the share URL returned by the Devin server, so the link always matches where the server hosts the share; the CLI only builds the URL itself when talking to older servers.

/share no longer uploads a conversation into a specific organization. Shared conversations are scoped to your account, so the link works for everyone in the account — including enterprise accounts — without choosing an organization first.

Fixed

Refused /share requests now report the server’s actual reason, such as conversation sharing being disabled, instead of suggesting you log in again.

MCP servers whose protected-resource metadata lists resource as an array, such as self-hosted GitLab servers at /api/v4/mcp, now complete OAuth discovery instead of failing with an authorization-server issuer mismatch.