Devin CLI: Gemini 3.5 Flash model support

Added

• Gemini 3.5 Flash model support.
• New /cloud-attach <session-id> command to attach to an existing cloud Devin session with full TUI rendering (tool calls, messages, plans, file edits). The existing /handoff behavior is unchanged.
• New /cloud-sessions [--all] command to list recent cloud Devin sessions and their attachable session IDs.
• Custom subagent profiles can opt in to nested subagent spawning via the max-nesting frontmatter field, overriding the default depth limit.
• Supported editor integrations, including Windsurf, now show the agent which file you have open, your cursor position, and other open editor tabs as part of its context.
• --export flag for exporting conversation history in ATIF format.
• New /fast slash command to quickly switch to SWE-1.6 Fast, with pricing comparison against the current model.
• Figma MCP servers can now authenticate with devin mcp add figma --url https://mcp.figma.com/v1 without additional configuration.
• When prompted for an MCP tool permission, two additional server-level options are now offered: approve all tools on the server for the current session, or permanently. This lets you grant broader access without re-approving each tool individually.
• Prompt navigation and collapsible command sections in terminals with shell integration. VS Code, Windsurf, Ghostty, iTerm2, kitty, WezTerm, and Windows Terminal users can now jump between prompts with keyboard shortcuts (e.g. Ctrl+Shift+Up/Down in VS Code), see prompt markers in the scrollbar, and collapse agent output sections (iTerm2). Prompt marks also survive session restore.
• Revert preview now shows line diff stats (+N -M) and a “View diff” button for all action types (restore, delete, recreate).
• show_hints config option to suppress “Did you know” tips between turns (default: on)

Changed

• Long conversations are compacted earlier in the background so the agent spends less time pausing when context is nearly full.
• ATIF exports now include richer per-step transcript details, including telemetry and timing metrics.
• Shell commands that continue running in the background after a timeout now report how long Devin waited before returning.
• The built-in Explore subagent can now use web search to research topics outside the codebase, in addition to its read-only codebase tools. It still cannot fetch arbitrary URLs or edit files.
• Homebrew installations are now externally-managed. The /update command will direct users to upgrade via brew upgrade devin instead of attempting self-update.
• HTTP MCP servers now try Streamable HTTP first and automatically fall back to legacy SSE when the server responds with an HTTP 4xx error, per the MCP spec.
• MCP OAuth callback pages now show Devin-branded success and failure screens instead of plain text.
• Renamed the product from “Devin for Terminal” to “Devin CLI” in user-facing UI, the REPL welcome and startup banner, slash command descriptions (/bug), bug report output, cloud handoff messages, version self-manage messages, tips, and public documentation. The binary name, config paths, and install URLs are unchanged.
• Revert preview now shows descriptive warnings for irreversible actions instead of empty placeholders.
• Read-only shell commands (e.g. ls, cat, pwd) no longer trigger irreversible action warnings during revert.
• Shell integration startup is faster, reducing noticeable delay when opening a shell.
• Trimmed the first-run welcome message for Devin CLI.
• Windows: default non-interactive shell is now PowerShell instead of Git Bash. Git for Windows is no longer required to run Devin CLI on Windows.

Fixed

• Image attachments in Windsurf now show the correct warning when the selected Devin CLI model does not support images.
• Responses silently truncated when the model hits its max output token limit now show a warning and exit non-zero in pipe mode instead of returning partial output as if complete.
• Persist the reduced trailing-image cap across turns after HTTP 413; prevents the cap from resetting to 20 each turn and triggering repeated 413 cycles
• Re-encode bmp/tiff/ico images to PNG at the message-forest chokepoint instead of forwarding them to Anthropic with an unsupported mime_type, which surfaced as messages.N.content.0.image.source.base64.media_type: Input should be 'image/jpeg', 'image/png', 'image/gif' or 'image/webp' 400 errors.
• Drop oversize (>5 MB) images whose bytes can’t be fully decoded instead of passing them through verbatim, which surfaced as image exceeds 5 MB maximum 400 errors.
• Typing into a multiple-choice question’s “Other (type your own)” field no longer drops e/space or treats j/k/digits as shortcuts; all characters now insert into the answer.
• Plan mode is now available when your organization requires sandbox mode. Previously /plan and /mode plan were rejected with “Plan mode is not available”, even though plan mode is read-only.
• Pre-user-prompt hooks that exit with code 2 now correctly block the prompt instead of being silently ignored.
• Reverting a step no longer reports a spurious “file was modified externally” conflict for files where the agent’s edit was rejected in the IDE.
• Reverting or editing a cancelled prompt (stopped before any output streamed) no longer fails with “could not resolve step.”
• Sandbox mode no longer leaves empty ghost dotfiles (.bashrc, .gitconfig, .mcp.json, etc.) in the project directory after commands finish.
• The in-session skill tool now finds skills behind symlinked directories under .windsurf/skills/, .agents/skills/, and .claude/skills/, matching devin skills list.
• /handoff now collects untracked files from the entire repository, not just the current subdirectory
• /handoff now includes untracked files in the git diff sent to cloud Devin, not just tracked changes
• “Always Allow” permission grants in Windsurf now persist across sessions. Previously, selecting “Always Allow” in the ACP permission dialog only granted the scope for the current session.