Devin CLI: /share now displays server URL

Changed

• /share now displays the share URL returned by the Devin server, so the link always matches where the server hosts the share; the CLI only builds the URL itself when talking to older servers.
• /share no longer uploads a conversation into a specific organization. Shared conversations are scoped to your account, so the link works for everyone in the account — including enterprise accounts — without choosing an organization first.

Fixed

• Refused /share requests now report the server’s actual reason, such as conversation sharing being disabled, instead of suggesting you log in again.
• MCP servers whose protected-resource metadata lists resource as an array, such as self-hosted GitLab servers at /api/v4/mcp, now complete OAuth discovery instead of failing with an authorization-server issuer mismatch.

Added

• devin auth status now shows the primary organization for enterprise accounts.
• Nested AGENTS.md files, lowercase agents.md files, and rules in supported dot-directories are now discovered and remain scoped to the directory where they apply.
• Completed ask_user_question prompts now appear as /steps entries that you can revert to or fork from. Reverting to a question asks it again.
• Press Esc twice within three seconds to interrupt a running turn; Ctrl+C still interrupts on the first press.

Removed

• We have removed the shell integration feature. It was in preview and we have decided not to make it generally available. Use devin shell remove to clean up old integration blocks.

Changed

• Slash-command completion descriptions now appear for every result in a consistent aligned column.
• /add-dir now checks workspace trust before attaching an untrusted directory, makes attached directories writable in the OS sandbox, and revokes that access when they are removed. Skills from attached directories also appear immediately in slash-command completion.
• Plugin installation now uses personal plugins by default, syncing to Devin Cloud and other devices; use --local for a device-only install.
• All devin plugins commands now require login, and plugin MCP servers discovered after a workspace root is attached or first touched now register correctly.
• Permission denials now identify the layer responsible.
• Plan mode now uses the normal permission system, and “always allow” choices appear only when they can take effect.
• ACP session persistence and resume now restore titles, modes, and usage totals consistently. /continue resolves the most recent session, /fork defaults to the latest step, and ACP revert can cancel an active turn before rewinding.
• /fast now selects SWE-1.7 Lightning when available, falling back to SWE-1.6 Fast or other fast models.
• Quota-exhaustion messages now link to usage settings for on-demand usage and auto-reload.

Fixed

• Ensured ask_user_question requests now use standard ACP elicitation so third-party clients like Zed can answer them.
• Large-file reads through ACP are bounded and paginated instead of repeatedly rereading overflow files. Late terminal flushes now preserve complete output and cannot reopen completed command cards.
• Model refusals now show a warning instead of silently ending a turn, and image prompts continue to inference after captioning completes.
• Resuming, continuing, or reverting a session no longer duplicates workspace context, and skill invocations can be repeated after a session restart.
• Non-UTF-8 command output is reported with the real output and exit code.
• Linux sandbox startup no longer hangs while expanding filesystem globs; unsupported glob rules are ignored and logged, while trailing /** continues to cover a directory tree.
• Notebook edits now change only the target cell and preserve unrelated metadata, outputs, attachments, ids, and fields.
• Uninstalling a plugin also removes and stops its MCP servers, and plugin registries are now flushed safely before replacement so crashes cannot erase them.
• Shell commands blocked on a sudo password prompt now fail fast with an explanation instead of hanging.
• Smart mode and other flag-gated features now refresh immediately when authentication or team context changes.