Devin CLI Updates & Release Notes

<a href="https://devin.ai/blog/devin-cloud-in-your-terminal"> <img src="https://devin.ai/images/blog/devin-cloud-in-your-terminal/cover.png" alt="Devin Cloud in your terminal" style={{ marginBottom: "1.5rem" }} noZoom /> </a>

Added

• Run Devin Cloud sessions from the CLI with devin --cloud or /cloud
• /handoff and /pickup bring a cloud session's pull request branch into a local session, offering to select a PR or clone its repository when needed.
• Use devin ssh or /ssh to connect to a Devin Cloud VM.
• ACP clients can select Devin models, thinking effort, and speed through session configuration controls.
• Agent shell commands expose AI_AGENT=devin_<version>_agent unless another agent already set that variable.
• Export agent events and metrics to an OpenTelemetry collector using the otel block in the user config or standard OTEL_EXPORTER_OTLP_* variables.
• Optional organization and enterprise plugins installed through Customize now load in the CLI, subject to the current organization.

Changed

• ACP authentication can answer from cached team settings while account details refresh in the background, so returning users can start without waiting on those network calls.
• ACP reports a structured, retryable error when an agent's communication channel closes, allowing clients to reconnect rather than retry a prompt.
• In Bypass Permissions mode, file edits no longer open an editor review. …

<a href="https://cognition.com/blog/local-fusion"> <img src="https://exafunction.github.io/public/images/fusion-available-in-devin-local.jpg" alt="Introducing Fusion in Devin Desktop and Devin CLI" style={{ marginBottom: "1.5rem" }} noZoom /> </a>

Added

• New mode slash commands alongside /ask and /plan: /code returns to Code mode, /smart switches to Smart mode, and /bypass (alias /bypass-permissions) switches to Bypass Permissions. With a prompt they switch and then run it under the new mode.
• /session-stats now ends with a "by model" chart of the session's billing metric, with per-model totals
• Disable tools by name with disabled_tools in your user config.json, for example "disabled_tools": ["webfetch", "web_search"].
• Set agent.compaction_threshold_tokens in the user config to trigger automatic compaction earlier than the context-window-based default.
• Added an agent.codex_tools setting (off by default) enabling GPT models to use the Codex tool set — shell commands for reading and searching, apply_patch for edits
• Beta: shell.exec_shell (bash/zsh/fish/pwsh) selects the shell the agent's exec tool uses, and the agent can now pick a shell per command instead of always getting the machine's default.
• Ctrl+Y pastes the text most recently deleted with Ctrl+U, Ctrl+K, Ctrl+W, Alt+D, or Alt+Backspace back at the cursor, with a footer hint until it is yanked back. Rebind it via editor.yank. …

Added

• New devin rm <session-id-or-name> deletes a session, with confirmation by default and --force for non-interactive use; deletion is refused while another Devin instance has the session open.
• New devin desktop shortcut opens Devin Desktop if installed, and a bare path such as devin . opens Devin Desktop on that path.
• New devin doctor command checks custom subagent profiles for incorrect frontmatter.
• New /recap command catches you up on the session with a short agent-generated summary of what was worked on, key decisions, and where things stand.
• New /rename <new title> renames the current session.
• New Alt+P shortcut toggles Plan mode without clearing the input.
• /handoff now asks which OS the cloud session should continue in when your organization has more than one platform available, instead of silently reusing the last cloud session's environment.
• Ask and Plan modes can now use the read-only webfetch and notebook_read tools for research.
• Plugins are now compatible with the Agent Plugins 1.0.0 format.
• Plan mode writes plans to a file so they always have a heading and summary paragraph.
• The subagent tray and detail view show which model a subagent is running on when it differs from the parent's model. …

Changed

• /share now displays the share URL returned by the Devin server, so the link always matches where the server hosts the share; the CLI only builds the URL itself when talking to older servers.
• /share no longer uploads a conversation into a specific organization. Shared conversations are scoped to your account, so the link works for everyone in the account — including enterprise accounts — without choosing an organization first.

Fixed

• Refused /share requests now report the server's actual reason, such as conversation sharing being disabled, instead of suggesting you log in again.
• MCP servers whose protected-resource metadata lists resource as an array, such as self-hosted GitLab servers at /api/v4/mcp, now complete OAuth discovery instead of failing with an authorization-server issuer mismatch.

Added

• devin auth status now shows the primary organization for enterprise accounts.
• Nested AGENTS.md files, lowercase agents.md files, and rules in supported dot-directories are now discovered and remain scoped to the directory where they apply.
• Completed ask_user_question prompts now appear as /steps entries that you can revert to or fork from. Reverting to a question asks it again.
• Press Esc twice within three seconds to interrupt a running turn; Ctrl+C still interrupts on the first press.

Removed

• We have removed the shell integration feature. It was in preview and we have decided not to make it generally available. Use devin shell remove to clean up old integration blocks.

Changed

• Slash-command completion descriptions now appear for every result in a consistent aligned column.
• /add-dir now checks workspace trust before attaching an untrusted directory, makes attached directories writable in the OS sandbox, and revokes that access when they are removed. Skills from attached directories also appear immediately in slash-command completion.
• Plugin installation now uses personal plugins by default, syncing to Devin Cloud and other devices; use --local for a device-only install.
• All devin plugins commands now require login, and plugin MCP servers discovered after a workspace root is attached or first touched now register correctly.
• Permission denials now identify the layer responsible. …

Added

• New smart permission mode: workspace edits auto-approve like Accept Edits, and a fast model decides whether other actions (shell commands, fetches, out-of-workspace writes) are safe to auto-run, falling back to the normal prompt otherwise. Auto-approval is limited to routine development work (building, testing, linting) — package installs, downloads that execute code, mutating git, rm, sudo, kubectl delete, cloud CLIs, and anything destructive always prompt, as do sensitive paths (dotenv, key material, Git config, agent configuration). Switch with /smart, /mode smart, Shift+Tab, or --permission-mode smart. Available in all builds, off unless the server-side rollout flag is enabled for your client.
• Plugins can now contribute rules, hooks, MCP servers, and custom subagents, not just skills. Plugin AGENTS.md/AGENT.md/.windsurfrules load as always-on rules, hooks.json loads alongside project hooks, MCP servers declared via a root .mcp.json or an inline manifest mcpServers map run for the session, and agents/<name>/AGENT.md files surface as <plugin>:<agent> subagent profiles. devin plugins info and the install trust prompt list all of them before you confirm, and devin rules list / devin mcp list include them. …

Added

• MCP servers can now override the RFC 8707 OAuth resource parameter via a new oauthResource field in the MCP server config (or --oauth-resource on devin mcp add / devin mcp login) — needed for identity providers like Microsoft Entra that reject requests containing resource.
• Command hooks now receive the agent's session id (session_id for Claude-format hooks, trajectory_id for Windsurf-format hooks) and a per-turn id (prompt_id / execution_id) in their stdin payload.

Changed

• Command permission prompts now scope known program runners to the wrapped program: uv run ruff check offers to always allow uv run ruff rather than the much broader uv run. Also applies to poetry run, pdm run, pipenv run, rye run, hatch run, pnpm exec, pnpm dlx, npm exec, yarn dlx, and bun run.
• Sessions now start faster, especially when several reconnect at once.
• The devin migrate command (devin migrate hooks, devin migrate workflows) is now available for migrating from legacy Cascade.
• When the same skill name is loaded from more than one location, each copy now surfaces with a location prefix (/agents:foo, /claude:foo) instead of appearing as indistinguishable duplicates.

Fixed

• Hooks are now discovered in ancestor directories up to the repository root, matching how skills and rules are loaded.
• Improved support for deleting and renaming files with GPT-5.6 models. …