https://cybertoolchain.io/tools/windsurf New releases and features in Windsurf, tracked by The Cyber Toolchain. en Sun, 02 Aug 2026 10:08:25 GMT https://windsurf.com/changelog https://windsurf.com/changelog Sun, 02 Aug 2026 10:08:25 GMT Windsurf v3.6.21 adds Plan mode, browser preview for ACP agents, editable command approvals, and multi-user Devin Cloud session improvements. • Adds a unified notifications setting that posts native OS notifications when any agent session finishes or needs input. • Codemaps now open in their own editor tabs in agent window mode, and codemap @-mentions work in Devin Local. • Adds 'Add to chat' button (⌘L / Ctrl+L) to add selected transcript text directly to chat input. • Adds keyboard shortcuts for permission requests (always-allow and reject) with shortcut hints shown on buttons. • Pull request editor tabs now show state-specific icons (open, draft, merged, closed); session-create cards show a Devin mode badge (Fast, Ultra, Fusion). • Agent sidebar gains right-click context menus, double-click rename, per-workspace filters/sort/grouping, sticky grouped spaces, and a new-session shortcut hint. • Devin Local Plugins section in customizations lists loaded plugins and those available from repository, organization, or account. • Remote ACP agent sessions can now open a browser preview, proxying a local dev server with captured elements and console output sent as pending context. • MCP servers reporting 'Needs auth' now show an Authenticate button that clears stored OAuth credentials and reruns the browser authorization flow. • New 'Devin: Open Cascade Migration Wizard' command provides a guided wizard for chaining hooks → skills → memories migration with per-item opt-in and dry-run previews. • Plan mode in Devin Local now persists a Markdown plan file at ~/.devin/plans/plan-<session>.md and requires approval before implementation. • Worktree sessions now show a Merge button to bring changes back into the workspace, with existing worktree selection from the agent location selector. • Editable command approvals: click a command in a permission card to edit before approving, or use the wand action to rewrite it via a fast model. • Queued messages can now be edited before they send, with @-mentions preserved across edits and reverts. • Adds Rules to the @-mention menu for pulling manual-trigger rules into a conversation. • Adds 'Duplicate session' action to branch off a conversation, and a 'Subagents (Preview)' toggle in Devin settings. • Custom subagents can now be defined as flat agents/<name>.md files, also accepting AGENTS.md, agent.md, and agents.md in per-agent directories. • Devin Cloud sessions now show the server-side send queue in sync with the web app; Cmd/Ctrl+Enter queues the next message server-side. • Multi-user (Slack) Devin Cloud sessions now show each participant's name above their messages. • Adds 'Copy link' action to cloud session menus. • Adds a 'Remote ACP is disconnected' banner with a Reconnect action when the Cloud connection drops. • Network policy for Devin Cloud sessions can now be configured and network access requests granted or denied inline from chat without switching to the web app (v3.5.17). • Adds a command to migrate Windsurf hooks into Devin hooks across every workspace folder (v3.5.17). • Adds a subtle timeline navigator for Devin Local sessions (v3.5.17). • Adds Fast Context support in Devin Local sessions (v3.5.17). • The Hooks tab in Devin Local Customizations now lists configured hooks with their source and trigger events (v3.5.17). • Adds a sandbox.excluded allow/ask/deny config (user and team settings) to run specific commands outside the sandbox (v3.4.22). • ACU usage is now shown in the /usage command in Devin Local (v3.4.22). • Subagents can now be configured with a default model (v3.3.18). Breaking changes: • The status bar is now hidden by default in the Agent Command Center; set `"workbench.statusBar.visible": true` in user settings to restore it. • Cascade, Devin Local, and every other ACP agent are now unavailable while a workspace is open in Restricted Mode, and hooks no longer load or run there. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/windsurf https://windsurf.com/changelog https://windsurf.com/changelog Thu, 30 Jul 2026 15:45:46 GMT Windsurf v3.6.21 adds browser preview for remote ACP agents, Cascade Migration Wizard, Plan mode for Devin Local, and editable command approvals. • Adds a unified notifications setting that posts native OS notifications when any agent session finishes or needs input. • Codemaps now open in their own editor tabs in agent window mode, and codemap @-mentions now work in Devin Local. • New 'Add to chat' button (⌘L / Ctrl+L) lets users select text in a message transcript and append it to chat input. • Adds keyboard shortcuts for permission request actions (always-allow and reject) with shortcut hints shown on buttons. • Pull request editor tabs now show state-specific icons (open, draft, merged, or closed); session-create cards show a Devin mode badge (Fast, Ultra, Fusion). • Remote ACP sessions can now open a browser preview, proxying the local dev server with captured elements and console output sent as pending context. • MCP servers reporting 'Needs auth' now show an Authenticate button that clears stored OAuth credentials and reruns the browser authorization flow. • New 'Devin: Open Cascade Migration Wizard' command chains hooks → skills → memories migration in one guided flow with per-item opt-in and dry-run previews. • Plan mode for Devin Local: agent researches with read-only commands, persists a Markdown plan file at ~/.devin/plans/plan-<session>.md, and asks for approval before implementing. • Worktree sessions now show a Merge button to bring changes back into the workspace, with an existing-worktree picker in the agent location selector. • Editable command approvals: click a command in a permission card to edit it before approving, or use the wand action to rewrite it via a fast model. • Queued messages can now be edited before they send; editing or reverting a prompt preserves file, directory, skill, and terminal @-mentions. • Adds Rules to the @-mention menu so manual-trigger rules can be pulled into a conversation. • Adds a 'Duplicate session' action to the response footer to branch off a conversation. • Adds a 'Subagents (Preview)' toggle in Devin settings; custom subagents can be defined as flat agents/<name>.md files. • Devin Cloud sessions now show the server-side send queue in sync with the web app; Cmd/Ctrl+Enter queues the next message on the server. • Multi-user (Slack) sessions now show each participant's name above their messages. • Adds a 'Copy link' action to cloud session menus. • Adds a 'Remote ACP is disconnected' banner with a Reconnect action when the Cloud connection drops. • Session network policy can now be configured and network access requests granted or denied inline from the chat without switching to the web app (v3.5.17). • Hooks tab in Devin Local Customizations now lists configured hooks with their source and trigger events (v3.5.17). • Adds a command to migrate Windsurf hooks into Devin hooks across every workspace folder (v3.5.17). • Adds Fast Context support in Devin Local sessions (v3.5.17). • Adds sandbox.excluded allow/ask/deny config (user and team settings) to run specific commands outside the sandbox (v3.4.22). • Subagents can now be configured with a default model (v3.3.18). • Adds an attribution option to the Devin Local config file to suppress Devin mentions in commit messages (v3.3.18). Breaking changes: • The status bar is now hidden by default in Agent Command Center mode; set `"workbench.statusBar.visible": true` in user settings to restore it. • Cascade, Devin Local, and every other ACP agent are unavailable while a workspace is open in Restricted Mode, and hooks no longer load or run there. • Models marked 'Devin Local only' (including every GPT-5.6 variant) now appear disabled in Cascade's model picker rather than running degraded. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/windsurf https://windsurf.com/changelog https://windsurf.com/changelog Mon, 20 Jul 2026 13:24:14 GMT Devin Desktop v3.5.17 adds inline network policy controls, Fast Context in Local sessions, and instant worktree-backed sessions. • Adds type-specific icons to @-mention pills in Cascade for clearer context at a glance. • New worktree-backed sessions open instantly and remain interactive while the worktree is created in the background. • Enables configuring a session's network policy and granting or denying network access requests inline from chat, without switching to the web app. • Adds Fast Context support in Devin Local sessions. • The Hooks tab in Devin Local Customizations now lists configured hooks with their source and trigger events. • Adds a command to migrate Windsurf hooks into Devin hooks across every workspace folder. • Adds a subtle timeline navigator for Devin Local sessions. • Devin Local customizations and the sidebar skills count now span all open workspace folders. • 'View usage' now opens eligible Devin users' personal analytics page directly. • The devin.* settings for gitignore access, completion mode, and auto-continue are now honored. Breaking changes: • The status bar is now hidden by default in the Agent Command Center; set `"workbench.statusBar.visible": true` in user settings to restore it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/windsurf https://windsurf.com/changelog https://windsurf.com/changelog Sat, 11 Jul 2026 10:07:35 GMT • Skill permissions: frontmatter definitions now apply to auto-approvals. • Enterprise login policies are now enforced in the CLI. • Adds server-level MCP tool permission options: approve all tools on a server for the current session, or permanently. • Introduces Devin for Terminal — a CLI agent running locally in Rust with multi-model support and seamless hand-off to Devin Cloud. • Integrates Devin Cloud agent directly inside Windsurf, available with every self-serve plan, allowing one-click delegation to a cloud VM. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/windsurf https://windsurf.com/changelog https://windsurf.com/changelog Fri, 10 Jul 2026 10:09:42 GMT Devin Desktop snapshot-20260710 adds sandbox exclusion controls, reviewable diffs, ACU usage visibility, and a plugin system for extending Devin Local. • Adds 'New session in space' option to the session kebab menu for quicker task-scoped session creation. • Enables auto-reconnect for Devin Cloud sessions when network connectivity is restored. • Supports copying images from chat via the context menu. • New users now default to agent mode out of the box. • Edits produced in autonomous mode now generate reviewable diffs for human review. • ACU usage is now surfaced via the /usage command. • Adds sandbox.excluded allow/ask/deny config (user and team settings) to run specific commands outside the sandbox; excluded commands also skip the sandbox proxy environment. • Skill permissions: frontmatter now applies to auto-approvals, giving teams finer-grained control over automated actions. • Enforces enterprise login policies in the CLI. • Adds a devin plugin system for extending Devin Local (preview, opt-in for enterprises). • Enables subagents to call MCP tools directly. • Allows teams to enforce terminal allow/deny lists through CLI permission scopes. • Adds .devinignore support alongside .windsurfignore and .codeiumignore for file exclusion control. • Adds an attribution option to the Devin Local config file to suppress Devin mentions in commit messages. • Subagents can now be configured with a default model. • MCP registry cache is now warmed during startup so MCP servers are ready sooner. • Devin ACU usage is now displayed in the client. • When prompted for an MCP tool permission in Devin Local, two additional server-level options are offered: approve all tools on the server for the current session, or permanently. • 'Always Allow' permission grants in Devin Local now persist across sessions. • Adds a list display option for the agent inbox in Agent Command Center. • Introduces Devin for Terminal: a CLI agent written in Rust supporting multi-model access (Opus 4.7, GPT-5.5, SWE-1.6) with seamless handoff to Devin Cloud. • Adds Devin Local agent in Windsurf, reported up to 30% more token-efficient than the existing Cascade agent. • Adds support for server-driven extension deny lists. • Introduces Devin Cloud agent directly inside Windsurf with one-click task delegation to a cloud VM, including test results and change review without leaving the editor. • Introduces Agent Command Center with a Kanban-style view of all local and cloud agent sessions organized by status. • Adds Spaces to group agent sessions, PRs, files, and context into task-level workspaces. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/windsurf https://windsurf.com/changelog https://windsurf.com/changelog Tue, 07 Jul 2026 14:04:14 GMT Windsurf snapshot-20260707 adds reviewable diffs in autonomous mode, /mcp status panel, sandbox exclusion config, and ACU usage tracking. • Adds reviewable diffs for edits produced in Devin Local autonomous mode, enabling structured review before changes are applied. • Skill permissions: frontmatter now applies to auto-approvals, enabling fine-grained control over which skills are auto-approved. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/windsurf https://windsurf.com/changelog https://windsurf.com/changelog Mon, 06 Jul 2026 10:03:34 GMT • Edits produced in autonomous (Devin Local) mode now generate reviewable diffs instead of silent changes. • Enforces enterprise login policies in the CLI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/windsurf https://windsurf.com/changelog https://windsurf.com/changelog Sun, 05 Jul 2026 10:03:36 GMT Windsurf v3.4.22 adds sandbox command exclusions, MCP status panel, reviewable local-edit diffs, and enterprise CLI login policy enforcement. • Adds a `sandbox.excluded` allow/ask/deny config (user and team settings) to run specific commands outside the agent sandbox, bypassing the sandbox proxy environment for those commands. • Adds an `/mcp` slash command with a live MCP server status panel for inspecting connected MCP servers. • ACU usage is now shown in the `/usage` command. • Edits produced in Devin Local autonomous mode now produce reviewable diffs. • Skill permissions: frontmatter now applies to auto-approvals. • Enterprise login policies are now enforced in the CLI. • New users now default to agent mode. • Adds 'New session in space' to the session kebab menu. • Images can now be copied from chat via the context menu. • Devin Cloud sessions now auto-reconnect when the network returns. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/windsurf https://windsurf.com/changelog https://windsurf.com/changelog Sat, 04 Jul 2026 10:03:21 GMT Windsurf v3.4.22 adds reviewable diffs, MCP status panel, sandbox exclusion controls, and ACU usage tracking. • Adds reviewable diffs for edits produced in Devin Local autonomous mode, enabling practitioners to inspect and approve AI-generated changes before they land. • New /mcp slash command surfaces a live MCP server status panel, giving visibility into connected MCP server health at a glance. • ACU usage is now shown in the /usage command, letting users track agent compute consumption without leaving the session. • New sandbox.excluded config (user and team level) allows specific commands to run outside the sandbox with allow/ask/deny controls — and excluded commands also bypass the sandbox proxy environment. • Skill permissions: frontmatter now applies to auto-approvals, enabling fine-grained control over which skills can be auto-approved. • Enterprise login policies are now enforced in the CLI, closing a gap where desktop policy controls did not extend to command-line sessions. • New 'New session in space' option added to the session kebab menu for faster task-scoped session creation. • Devin Cloud sessions now auto-reconnect when the network returns, reducing manual intervention after connectivity drops. • New users now default to agent mode, streamlining onboarding for agentic workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/windsurf https://windsurf.com/changelog https://windsurf.com/changelog Fri, 03 Jul 2026 10:04:24 GMT Windsurf/Devin Desktop snapshot adds Devin plugin system, subagent MCP tool calling, terminal CLI agent, and new Agent Command Center views. • Enables subagents to call MCP tools directly without routing through the parent agent. • Adds list display option for the agent inbox alongside improved session sidebar sorting and filtering. • Introduces Adaptive model router that dynamically selects the best underlying model per task at a fixed per-token quota draw rate. • Model picker now displays token pricing information inline for cost-aware model selection. • Subagents can now be configured with a default model per agent. • MCP tool permission prompts now offer server-level 'approve all tools for this session' or 'approve permanently' options. • Adds Devin Review and Quick Review access to all Windsurf IDE users with existing subscriptions (2-week free trial for self-serve). • Increased remote server startup timeout from 2.5 s to 6 s, enabling connections to slower remote environments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/windsurf https://windsurf.com/changelog https://windsurf.com/changelog Thu, 02 Jul 2026 20:15:04 GMT Windsurf snapshot-20260702 covers v3.3.18: ACU usage display, configurable subagent models, MCP registry pre-warming, and commit attribution control. • Enables configuring subagents with a default model, giving teams control over model selection per agent role. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/windsurf https://windsurf.com/changelog https://windsurf.com/changelog Mon, 29 Jun 2026 22:54:14 GMT Windsurf snapshot-20260629 adds Devin Local plugin system, subagent MCP tool calling, terminal permission scopes, and ACU usage visibility. • Adds a devin plugin system for extending Devin Local — in preview and opt-in for enterprises. • Enables subagents to call MCP tools directly, expanding agentic automation depth. • Supports team-enforced terminal allow/deny lists through CLI permission scopes. • Displays Devin ACU usage directly in the client for quota visibility. • Adds configurable default model per subagent. • Warms the MCP registry cache on startup so MCP servers are available immediately. • Adds an attribution option to the Devin Local config file to suppress Devin mentions in commit messages. • Adds .devinignore support alongside .windsurfignore and .codeiumignore for context exclusion control. • Adds a 'Reset migration from Windsurf' command in the command palette to re-run settings and extension import. • Introduces Devin for Terminal — a CLI agent written in Rust with full codebase access, multi-model support, and seamless handoff to Devin Cloud. • Enables the Devin Local agent inside Windsurf IDE, with up to 30% better token efficiency than Cascade. • Adds server-driven extension deny list support for enterprise control over installed extensions. • Adds Devin Cloud agent directly inside Windsurf, included with every self-serve plan, enabling one-click task delegation to a cloud VM. • Introduces Agent Command Center with a Kanban-style view of all local and cloud agent sessions organized by status. • Introduces Spaces to group agent sessions, PRs, files, and context into task-level workspaces. • Introduces Adaptive model router that intelligently selects the best model per task to extend quota. • Adds token pricing information directly in the model picker. • Introduces Devin Review and Quick Review for all Windsurf IDE users. • Adds list display option for the agent inbox in Agent Command Center. • Adds MCP tool permission granularity in Devin Local: approve all tools on a server for the current session or permanently. • Adds 'Always Allow' permission grants in Devin Local that persist across sessions. • Makes Devin Local context-aware of files open in the editor. • Adds a notification when Devin Local agent sign-in fails. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/windsurf