Workspace Trust, Workflow Plan Step Trees, and Mermaid Subgraphs

This release adds workspace trust to interactive V3 sessions: Kiro CLI asks you to trust a folder before it loads that folder's hooks, agents, MCP servers, steering, workflows, or language server configuration. A cloned repository can no longer change how the agent behaves until you say so.

The first time you start an interactive V3 session in a folder, Kiro CLI shows a Trust this workspace? screen before it loads the folder's hooks, agents, MCP servers, steering, workflows, or language server configuration. Choose Trust, continue or Don't trust, exit. Kiro saves your answer per workspace root under ~/.kiro/workspace-roots/, so the screen appears once per folder. Trust for your home directory is never saved, so Kiro asks again at each launch there. To change your answer, remove workspaceTrusted from the per-workspace file the screen names. Learn more

V3 sessions can set model fallback again. The /model settings pane and the /model fallback commands save fallback configuration when the agent supports it. A saved choice applies to the current session and persists for later sessions. Open /model to confirm your fallback choice.