GitHub Copilot CLI v1.0.106-3

Added

• Add opt-in session management tools and @mentions for opted-in local sessions

Improved

• Managed-account policy refresh warnings now include Policy Helper findings and clear once policy resolves

Fixed

• Reuse valid saved MCP OAuth credentials for anonymous connections and initial challenges without requiring another sign-in
• On the colorblind theme, unread sessions in the Sessions sidebar and its legend are marked with * instead of the same blue dot as finished sessions.
• MCP reload now reports one settled connection summary per reconciliation
• Copilot Free signup completes when account setup overlaps model refreshes
• Resuming an autopilot objective no longer starts a duplicate continuation prompt
• /context shows updated usage details after switching models in an active session
• Repository disableAllHooks continues suppressing user hooks after trusted-workspace rebuilds
• Extensions no longer prompt for permission after their connection closes during initialization
• Permission prompts keep your current selection when options update during loading
• Entra sign-in uses the VS Code application registration again by default
• Preserve typed and pasted typeahead input across later cwd loading gates
• Copilot's built-in documentation tool now returns the installed CLI's own commands, flags and help topics instead of an error line about a missing README
• /add-dir and /cd now accept a directory wrapped in quotes, such as a path pasted from a shell or file manager, instead of reporting that it does not exist.
• Assistant replies, other rendered markdown and the expanded Read, Create, Edit and Search rows no longer pass escape sequences and control characters from their text to the terminal, so a reply or a file cannot restyle the timeline or hide its own lines
• The first @ of a session now highlights the first suggested file instead of the working directory, so Tab or Enter inserts that file. A suggestion you pick with the arrow keys still stays highlighted while results update.
• The busy indicator shortens a long tool name instead of cutting off its elapsed time and output size
• A ! shell command cancelled after it printed output now shows that output once, instead of repeating it above the cancellation message.
• Canvas windows no longer reappear or revert to an older URL after being closed or updated while a session is still loading
• Code blocks in assistant replies keep their lines and indentation after a line that starts with a triple-backtick code span, a fence line with a language inside another code block, or indented text right after a closing fence, instead of being joined into one line.
• Collapsed tool result previews no longer show a replacement character when an emoji falls where the preview is cut, and wide characters no longer overrun the preview width
• The autopilot completion check label now matches the decision autopilot acts on: a reviewer verdict with non-English text right after the verdict word no longer shows as passed.
• Confirmation dialogs such as "Enable autopilot mode" and "Confirm folder trust" keep their title, highlighted option and key hints on screen in a short terminal
• Ctrl+U and Cmd+Backspace at the start of a prompt whose first line is empty no longer add a blank line
• The terminal cursor no longer stays in an unfocused pane, such as the /config right pane after returning to the sidebar
• A directory name containing escape sequences no longer restyles the session picker Location column, the footer working directory or the /session info Directory row; the path is drawn as plain text
• A long name that wraps beside other text in a row, such as in /extensions manage or the /agent picker, no longer loses a character where it wraps.
• The Getting started box no longer suggests /model in sessions that use a model from your own provider, where /model is not available.
• HTML exports (/export html, /share html, research reports) and rich text copied with /copy keep inline <br> line breaks, including in table cells, instead of joining the lines
• The "Agent finished" desktop notification no longer shows a reply from an earlier turn or from another session when a prompt ends without a reply of its own, such as a prompt blocked by a hook.
• The /instructions picker no longer lets terminal escape sequences or line breaks in an instruction file name or plugin name restyle the list or draw extra rows.
• copilot -p --output-format json and copilot workflow run no longer write 8-bit terminal control characters (C1 and DEL) from model replies, tool output or workflow results raw: they are escaped in the JSON, which parses to the same values, and workflow run failure messages on stderr show them as spaces.
• A prompt that starts with a combining accent no longer hides the last typed character or puts the cursor one column too far right; the accent is drawn on the cell before it, as the terminal itself draws it.
• --max-ai-credits with NaN, inf or a number too large to represent now fails with an error that names the value you typed, instead of reporting it as "null".
• Local MCP servers start once per session when the first credential resolves
• An MCP tool title, or tool arguments the model writes, can no longer use 8-bit control characters to erase or redraw the tool approval dialog or the timeline row
• The "Agent finished" desktop notification now shows inline code such as src/*.ts as written, keeps spaced-out asterisks such as 2 * 3, and no longer leaves part of a link's address behind when the address contains parentheses.
• Permission prompts show the control characters in a directory or file name instead of letting its escape sequences restyle the path or its line feeds split the row
• The /permissions picker keeps its title, the highlighted mode, the Assisted Permissions security statement and its key hints on screen on short terminals, such as 80x12 or 60x14, instead of pushing the title and the