Factory Droid

Slash commands while the agent runs, MCP OAuth resource override, and subagent and Git fixes

### New features

- **Slash commands while the agent runs** - Slash commands now work during an active agent turn, so you no longer have to wait for it to finish
- **MCP OAuth resource override** - MCP server configs accept a `resource` field to send a different OAuth resource indicator, or omit it entirely

### Improvements

- **Subagent delegation** - The agent now delegates to subagents more selectively when using OpenAI models
- **Subagent results** - The agent reuses a subagent's report instead of re-reading the files it already covered, making follow-up work faster

### Bug fixes

- **Git index lock** - Checkouts now retry when another process is holding the Git index lock instead of failing
- **BYOK models** - Bring-your-own-key models are now scoped to the selected computer (app)

Gemini 3.6 Flash support, a revamped keyboard shortcuts dialog, and faster session search

### New features

- **Gemini 3.6 Flash support** - Gemini 3.6 Flash is now available in the model selector
- **Disable built-in skills in the app** - You can now turn off Factory-provided built-in skills from the app (app)

### Improvements

- **Keyboard shortcuts help** - Redesigned the keyboard shortcuts help dialog so shortcuts are easier to scan (app)
- **MCP readiness** - Agent turns now wait until your MCP servers finish loading, so their tools are available from the first message
- **Session search** - Session search, sorting, and paging now run server-side for faster results in long histories, and you can look up a session by its ID (app)
- **MCP sign-in** - MCP authentication in the app now matches the CLI flow (app)

### Bug fixes

- **Spec proposal order** - Spec proposals now stay in chronological order in the chat transcript
- **Image loading** - Fixed images that failed to load in the desktop app, and cards now hide broken images instead of showing a placeholder (app)

Sandbox and macOS hardening, plus mission, dictation, and app UI fixes

### Improvements

- **Sandbox hardening** - Strengthened isolation of processes running inside the command sandbox
- **macOS hardening** - Hardened macOS releases against code injection

### Bug fixes

- **Mission approvals** - The mission proposal body now renders once during approval instead of repeating
- **Capacity errors** - The CLI now backs off gracefully when a model is temporarily at capacity and no alternative is available
- **Voice dictation** - Long voice dictations are no longer cut off (app)
- **Visualization flicker** - Streamed visualizations no longer flicker while rendering (app)
- **Autonomy chip** - The autonomy chip in the composer now keeps a fixed width (app)
- **GitHub Enterprise Server repositories** - Repository lists are now correctly scoped to your organization (app)

Keep-awake setting, system certificate trust, plus MCP, model, and invite fixes

### New features

- **Keep-awake setting** - A new setting keeps your machine awake during agent runs so long tasks aren't interrupted by sleep (app)

### Improvements

- **System certificate trust** - The CLI and desktop now trust your system's certificates at startup, improving connectivity in environments with custom certificate authorities

### Bug fixes

- **MCP confirmations** - Autonomy upgrades now apply correctly to MCP tool confirmations
- **MCP OAuth** - Signing in to MCP servers over OAuth is now more reliable
- **Hook display** - Hook metadata now stays on a single row
- **Verified domains on invite** - Invitations now respect your organization's verified domains (app)

Open artifacts in your default app, plus mission, transcript, and app UI fixes

### New features

- **Open artifacts externally** - Artifact preview cards can now open in your default app (app)

### Improvements

- **Code block font** - Code blocks now render in Geist Mono for clearer monospaced text (app)
- **Attachment-only messages** - You can now send chat messages that contain only attachments (app)

### Bug fixes

- **Approval details toggle** - Option+E dead-key accents no longer interfere with toggling approval details
- **Transcript repaint** - The transcript now repaints correctly after viewing plan details
- **Computer removal** - Removing a computer no longer shows a spurious session-archiving warning
- **Mission interrupts** - Missions now pause correctly when the orchestrator is interrupted
- **Agent browser cleanup** - Orphaned browser automation processes are now cleaned up reliably
- **Unavailable sessions** - Sessions that can't be loaded now show a clear unavailable state (app)
- **Skill colors** - Loaded skills now display with the correct colors (app)

Windows ARM64 desktop, disable builtin skills, plus session recovery and Auto model fixes

### New features

- **Disable builtin skills** - New `--disable-builtin-skills` flag turns off Factory-provided skills while keeping your own skill sources
- **Windows ARM64 desktop** - The desktop app now ships a native Windows ARM64 build (app)
- **Usage cap alert emails** - Admins now receive email alerts as usage approaches configured caps (app)

### Bug fixes

- **Session recovery** - Cancelling a tool no longer corrupts session history, and existing corruption is repaired automatically
- **Auto model retries** - Auto model turns now retry automatically when a model is unavailable
- **Disconnected prompts** - Permission and input prompts are now suppressed while disconnected
- **macOS sleep** - Notification sounds no longer prevent macOS from going to sleep (app)
- **PDF generation** - PDF generation errors now surface immediately instead of hanging (app)

Skill disable controls plus loop, plugin, hook, and settings fixes

### New features

- **Skill controls** - You can now disable individual skills and see how skill settings resolve across scopes

### Bug fixes

- **Repeated tool calls** - The agent now stops looping when it repeats the same tool call
- **Plugin loading** - Enabled plugins now load correctly across all install scopes
- **Hook execution** - Hooks now run exactly once per event
- **Settings writes** - Concurrent settings updates are no longer overwritten by stale cached writes
- **Mission Control** - The chat now repaints correctly when you close Mission Control (app)
- **Sidebar update button** - Fixed alignment of the sidebar update button (app)

Mission side panel, add project folder, and PDF, MCP auth, and markdown fixes

### New features

- **Mission side panel** - Added a unified Mission side panel for managing missions (app)
- **Add project folder** - New button to add a local project folder, streamlining local project setup (app)

### Improvements

- **Consistent text editing** - Text-editing keys now behave consistently across all input fields

### Bug fixes

- **`/clear` preserves model** - `/clear` now keeps your current model and autonomy settings
- **Password-protected PDFs** - Password-protected PDFs no longer lock up the session
- **MCP authentication** - MCP sign-ins now refresh tokens silently and avoid duplicate authentication prompts
- **Markdown line breaks** - Soft line breaks in markdown now render correctly

MCP connect timeouts, theme detection over SSH, and mission, model, and notification fixes

### Improvements

- **Context usage on resume** - Context usage now displays immediately when you resume a session
- **Windows installer architecture** - The CLI installer now detects the native Windows architecture

### Bug fixes

- **MCP connection timeout** - stdio MCP servers now time out on connect instead of hanging
- **Grep and Glob timeouts** - Grep and Glob timeouts now surface as actionable errors
- **Theme detection over SSH** - Fixed theme auto-detection over remote terminal sessions
- **Todo status colors** - Todo status colors now render correctly
- **Completion notification** - The turn-completion notification now fires before the CLI exits
- **Subagent reports** - The end-of-turn todo reminder no longer swallows subagent reports
- **Mission settings** - Fixed updating mission settings in the desktop app (app)
- **Mission notifications** - Mission mode now fires audio and badge notifications (app)
- **Model defaults** - Model defaults now persist correctly (app)
- **Reasoning tooltip** - The reasoning tooltip now dismisses when you start typing (app)

Excerpt ends here — this release continues at the source ↗.

macOS process sandbox, spec rendering fixes, and MCP session improvements

### New features

- **macOS command sandbox** - Added whole-process sandbox support on macOS for safer command execution

### Improvements

- **Clearer send button** - The composer now explains why the send button is disabled (app)
- **Safer web tools** - WebSearch and FetchUrl now require at least low autonomy before they run

### Bug fixes

- **Image-only messages** - Fixed sending messages that contain only an image
- **Plan todos** - Plan todo lists are now bounded and the full todo displays correctly
- **Wide tables** - Wide markdown tables now scroll horizontally
- **MCP footer** - The MCP status footer now appears immediately
- **MCP session notices** - MCP status and auth notices now stay scoped to their session instead of leaking into untouched sessions
- **Spec rendering** - Spec contents now render in the approval details screen, and the spec body shows when the plan heading matches the title
- **Update rollback** - Hardened the update rollback flow (app)

Pin local sessions, working directory in the desktop app, and CLI and app fixes

### New features

- **Pin local sessions** - You can now pin local sessions that aren't synced to the cloud (app)
- **Working directory in desktop** - The desktop app now brings your current working directory into the session (app)

### Improvements

- **Slash command search** - Improved slash command search results
- **Skills count** - The header now shows an accurate skills count
- **Wiki permalinks** - Added repository permalink support in wikis

### Bug fixes

- **Session token usage** - Session token usage is now counted only on successful turns
- **Unread sessions** - Unrelated unread sessions are preserved when a window regains focus (app)
- **Notification hook** - The `idle_prompt` Notification hook now fires on cancelled turns
- **Reasoning effort** - `set-default` now preserves your session reasoning effort
- **Bash mode** - Pressing backspace on empty input now exits bash mode
- **Spec proposals** - Empty spec proposal bodies are now rejected
- **Ghostty Open In** - Fixed launching Ghostty from the Open In deeplink (app)

Excerpt ends here — this release continues at the source ↗.

Port-forwarding for droid computers, faster startup and search, and Windows and Linux fixes

### New features

- **Port-forward for droid computers** - New `droid computer port-forward` command to forward ports from a droid computer to your local machine

### Improvements

- **Faster app startup** - Startup boot phases now run in parallel, reducing time to a usable window (app)
- **Faster session search** - Session search is quicker and returns better-ranked results
- **Full-screen help** - Help now opens as a full-screen overlay you can dismiss with `?` or `Esc`
- **Slash menu filtering** - Filtered slash menu results are flattened with a clearer category block
- **Cleaner model names** - Model names display more clearly across the app (app)
- **Cleaner chat transcript** - Internal tool lookups no longer clutter the chat transcript (app)
- **Update rollback** - The app can now roll back to a previous version when needed (app)

### Bug fixes

- **Image paste on Windows** - Fixed pasting images into the composer on Windows
- **Safe exit during updates** - You can now exit safely while a background update is in progress

Excerpt ends here — this release continues at the source ↗.

Grouped slash commands, cloud sync control, and MCP and login fixes

### New features

- **Grouped slash commands** - Slash commands are now organized by category for easier browsing
- **Cloud sync control** - New setting to control whether your data syncs to the cloud (app)

### Improvements

- **Linear model picker** - Model names now display cleanly in the Linear delegation picker (app)
- **Computer provisioning wizard** - Clarified copy in the droid computer provisioning wizard (app)

### Bug fixes

- **MCP tool names** - Tool names containing dots are now accepted per the MCP specification
- **MCP authentication** - Restored sign-in to MCP servers that reject certain OAuth client registration
- **Background processes in droid exec** - Agent-spawned background processes now keep running after `droid exec` exits
- **Editor for allow/deny lists** - The CLI now honors `$EDITOR` when editing allow and deny lists on headless hosts
- **Gemini reasoning** - Fixed handling of invalid Gemini reasoning blocks
- **Droid computer SSH** - Fixed connecting to a droid computer by its exact name
- **Cross-org login** - Fixed login issues when working across multiple organizations (app)