Release notes

FEATURE

Smarter command approvals: strict matching and redirection awareness

The "Always Approve" command list is now both stricter and smarter. Previously, partial name matches might slip through, but now the default requires an exact, full-string match unless you explicitly prepend rules with regex: to use regular expressions (a pattern-matching syntax). At the same time, it's less rigid about minor additions: if you just pipe the output of an already-approved command into a file (like command > file), the system will no longer block you simply because you added redirection syntax. Like a building security guard who used to let people in if their badge had any matching words, but now strictly checks the full name — yet won't maliciously stop you just because you're holding a box destined for the warehouse.

BUGFIX

Fixes UI transition lockups and editor undo history failures

A bunch of annoying hiccups that made navigating the terminal feel clunky have been fixed. Now, when transitioning between different views (like opening subagent details or logging out), the keyboard won't suddenly lock up and stop responding, and help overlay panels will close properly. If you type rapidly in the input box and frequently mash undo or redo, your edit history stack won't get hopelessly desynchronized anymore. When you type special slash commands, the slash prefix will no longer flicker and momentarily disappear from the screen right as you hit send; it exactly displays what you typed. Moreover, exiting the program no longer spams redundant reminder lines, making the output much cleaner, and asking agents to browse the web won't randomly fail because it forgot to load the browser-specific internal prompts. Like driving a car: shifting gears used to occasionally lock the steering wheel and briefly mute the radio, but now the entire driving experience handles flawlessly.

Original changelog

Original changelogSmarter command approvals: strict matching and redirection awareness
Improved command permission security by making "Always Approve" rule matching strict (non-regex) by default, while allowing users to explicitly opt-in to regex matching by prepending rules with `regex:`.
Improved command permission usability by relaxing redirection checks, allowing safe commands with output redirection (e.g., `tool > file`) to match without requiring strict full-command approval.
Original changelogFixes UI transition lockups and editor undo history failures
Resolved bugs during UI transitions (such as opening subagent details or logging out) by introducing a unified synchronization mechanism that prevents key lockups and ensures overlay panels like the /help view are properly reset.
Fixed a bug in the CLI prompt editor where undo and redo history stacks could become desynchronized during rapid mutations by decoupling the history state into a unified, pointer-backed structure.
Fixed a bug where the CLI would temporarily render skill commands without their slash prefix during optimistic updates by deferring prefix stripping to the serialization boundary, ensuring the UI always displays exactly what the user typed.
Fixed a redundant CLI exit message by removing the "Resume in the same project" hint line, leaving only the standard resume command to simplify exit output.
Fixed a bug where browser-related prompt sections were missing from the agent's prompt registry, ensuring browser-based tasks execute reliably.