pages/cli/changelog.txt

route: /docs/cli/changelog
title: CLI Changelog
description: Release notes for Cursor CLI: new features, improvements, and fixes by release.

CLI Changelog
The latest features, improvements, and fixes shipping to Cursor CLI. Run agent --version to check your installed version, and agent update to upgrade in place.
June 22, 2026Auto-review
Auto-review run mode. Cursor's Auto-review run mode comes to the CLI: a middle ground between Allowlist and Run Everything that keeps the agent moving with fewer approval prompts. Shell, MCP, and Fetch calls are checked in order: allowlisted calls run immediately, calls that can be sandboxed run in the sandbox, and the rest go to a classifier that allows the call, tries a different approach, or asks you to approve. Turn it on with --auto-review, in /config, or with /auto-review, and steer the classifier with allow/block instructions in permissions.json.
Workspaces
Named multi-directory workspaces. Run the agent across several repositories at once: add directories mid-session with /add-dir, save the set with /save-workspace, reload it later with /load-workspace, or start scoped with --workspace.
Commands
/rewind is on by default. The turn-by-turn undo timeline no longer needs turning on in /config.
/vim anywhere in the prompt. Trigger inline Vim editing from any position, not just an empty prompt.
Richer /copy. Pick a single step of a multi-step reply from a per-step picker, copy the agent's responses alongside your own messages, and copy long replies without the terminal stalling.
/logs on shared machines. Debug logs are written per user so multi-user hosts don't hit permission errors, and the /logs path lingers on screen longer.
Terminal experience
Prompt history is per conversation. Up-arrow recalls what you typed in this session instead of a single history shared across every chat.
The jobs list shows everything running. Foreground shells and subagents appear in the jobs pager alongside background tasks.
Steadier rendering. Mermaid diagrams stay drawn after a turn finishes, long shell-output previews clip instead of wrapping, and the screen clears once per resize instead of twice.
Your draft survives the resume picker. Cancelling /resume keeps what you had already typed.
Plan editing. Esc returns to Vim normal mode while you revise a plan.
Reliability
Lower memory in long sessions. Fixed a leak where per-turn abort signals held on to conversation state.
No crash on missing approval state. Sessions tolerate credential stores that haven't recorded an approval mode yet.
MCP and skills
Editor-provided MCP servers are trusted. MCP servers passed in over the Agent Client Protocol (Zed and other editors) load instead of being silently dropped.
MCP tools survive a plugin reload. The MCP lease refreshes after a plugin reloads, so its tools no longer wedge with "Not connected" errors.
Skills found through symlinks. The skills menu follows symlinked directories when discovering skills.
Install and updates
Reliable channel switching. Switching release channels applies on the first try and immediately fetches the target channel's build.
Windows and shim fixes. The Windows launcher matches timestamped version directories, and the cursor shim no longer errors on shells that treat unset variables as failures.
Enterprise and team controls
Team gating for Auto-review. Admins control whether Auto-review is available to their members.
Stable self-hosted worker identity. worker start waits for the bridge to connect before reporting ready, and workers keep a stable logical ID scoped per authenticated user, so fleets on shared machines match the right worker to the right person.
June 9, 2026Terminal experience
Cleaner edit display. File edits render borderless (an Editing/Edited header plus the diff), with memoized diff rendering so large edits don't slow the UI.
Faster, richer resume picker. Session metadata is cached so /resume (Ctrl+Y) opens quickly even on network filesystems, with Created and Last updated columns and reliable ordering.
Working status pinned above the prompt. Progress, token counts (with an optional elapsed-time display), and hints stay in one stable place.
Long shell output truncates from the top. You see the latest output of a streaming command, not the oldest.
Wrapped URLs stay clickable. Long links re-emit hyperlink codes on every wrapped line.
Model picker shows Max Mode state, and the footer model summary drops redundant labels.
Commands
/fork Branch the current conversation into a copy and continue down a different path (aliases /branch, /duplicate).
/update Update the CLI in place from inside the session.
/context Visualize what's consuming the context window, broken down by category.
/logs Debug logs are written for every session; /logs shows the path and copies it to the clipboard.
Background task controls. Arrow-key navigation in the task viewer and a kill shortcut.
Reliability
HTTP/2 keepalive pings. Silent connection stalls mid-stream are detected in seconds and retried.
Transport interruptions retry automatically. Network-level cancels and aborts no longer end the turn as if Ctrl+C had been pressed.
Freeze fixes. Eliminated hard UI freezes caused by layout feedback loops, an input freeze after first-run onboarding, and swallowed or reordered keystrokes while pasting.
Faster first paint on slow networks. Team settings lookups no longer block interactive startup (about 2 seconds on high-latency connections).
Works on restricted networks. Feature defaults apply when corporate firewalls block the configuration service.
direnv support. The agent's shell loads .envrc automatically, in interactive and agent-dispatched shells.
Drag-and-drop and paste fixes. File drag-and-drop paths arrive intact, and pasting a copied image file on macOS attaches the actual image.
Enterprise and team controls
Admins can disable headless mode. A team setting blocks non-interactive CLI usage org-wide.
"Run Everything" controls. Auto-run renamed consistently across the product; admin-controlled auto-run treats the command allowlist as the always-available baseline.
MCP user-extension governance. Admin "Allow User Extension" toggles for MCP servers and tools are enforced at runtime.
Team-managed MCP servers. Centrally configured servers load reliably, with server group selection; MCP tool policy is decoupled from the terminal auto-run setting.
MCP OAuth over SSH. The CLI shows port-forwarding instructions when authenticating a remote MCP server from an SSH session.
May 20, 2026
Composer 2.5 is the default model for new CLI sessions.
/summarize. Renamed from /compress to match the IDE; /compact and /compress remain as aliases, and aliases execute directly.
Local plugins via ~/.cursor/settings.json. Point an enabled_plugins key at local plugin folders; no marketplace needed.
Multi-root workers. Self-hosted workers span multiple repositories with repeatable --worker-dir flags and keep a stable identity.
Rewind preserves images. Rewinding to an earlier turn restores that turn's image attachments to the prompt.
Faster /plugins. Quicker plugin details, with each plugin's MCP servers linked into /mcp management.
MCP tools refresh in-session. Logging in, enabling, or disabling a server from /mcp updates the agent's available tools immediately.
Readable diffs in light mode. Character-level diff highlights are legible on light terminal themes.
Hooks accept payloads over stdin. Avoids argv length limits and keeps payloads out of process listings.
May 14, 2026
Vim visual mode. Visual selection with delete and change operators; the active Vim mode shows in the footer.
Ctrl+G opens your prompt in . Compose long prompts in your real editor and drop the result back into the prompt bar.
MCP management revamped. /mcp opens a per-server detail view: browse tool schemas, log in, log out (clears stored OAuth credentials), enable, and disable, all without leaving the session.
Headless runs wait for MCP tools. Fixed a startup race where slow stdio MCP
…