IDE changelog

This release lets you limit what agent-run shell commands can reach and start saved Workflows from chat. It also shows live session status on editor tabs, explains model fallbacks, loads MCP tools on demand, and fixes Workflow, chat, and account issues.

Turn on the local command sandbox to limit what agent-run shell commands and their child processes can access. Choose whether outbound network access is blocked, limited to common development hosts, or open. You can also run local stdio MCP servers inside the same sandbox.

The agent, built-in file tools, and remote MCP servers stay outside the sandbox. Permission rules still govern agent actions. The sandbox reduces risk but cannot guarantee complete isolation, so keep reviewing proposed commands. Select Command sandbox in the status bar to open the settings and confirm the sandbox is active. Learn more ->

Type /workflow-run, choose a recipe, complete its inputs, and start the run. Kiro opens Workflows on the new run. Learn more ->

This release adds a feedback link for Workflows, fixes several chat, terminal, and source control issues, and improves workflow reliability, spec-only commands, and Hook matching.

IDE 1.2 introduces Workflows, strengthens safeguards for untrusted workspaces, and adds enterprise controls for sign-in methods. This release also reworks session details, keeps enterprise traffic in your profile's Region, and fixes authentication, debugging, and reliability issues.

Ask Kiro to run a reusable, multi-step plan while you continue in the parent chat. Each step runs in its own agent session. Use the Workflows area above the chat to inspect progress, open a step, and pause, resume, or stop the run. Workflows are off by default: turn on Workflows in Workspace Configuration in Agent Focus, or set kiroAgent.workflows.enabled in Settings, then start a new chat session. Learn more ->

Kiro asks before the agent changes agent, Hook, or Power files, or the Workflow recipes in .kiro/workflows/ that define your Workflows, even when broader file permissions allow the write. In an untrusted workspace, Kiro also asks before changing any other Kiro configuration and before each command runs, even when you previously allowed it. Workflow recipes in an untrusted workspace are not loaded until you trust the workspace. Learn more ->

IDE 1.1.70 lets you set a default timeout for local agent commands, opens Markdown links to workspace files in the editor, and keeps Agent Focus file and folder context aligned with the active project. Restored Agent Focus sessions now reconnect without leaving a blank chat pane. Background process output cards show their results, Markdown tables keep their styling, and Mermaid diagrams no longer leave stray error graphics while streaming.

IDE 1.1 lets agents produce durable artifacts you can review and return to, adds native ARM64 builds for Windows and Linux, and updates the editor foundation to Code OSS 1.131. Compacted conversations retain the right context, MCP failures are clearer, Hooks are more reliable, and enterprise profiles route requests to the selected region.

Kiro can turn documents, diagrams, code, images, and other agent outputs into durable artifacts instead of leaving them buried in the chat transcript. Open a compact preview from the conversation, review the full artifact beside the chat in Agent Focus, or return to it from the Agent Focus context panel. Learn more ->

Install native ARM64 builds for Windows and Linux instead of relying on x64 emulation. Choose the ARM64 download for your platform from the Kiro downloads page.

These capabilities shipped earlier in the IDE 1.0 release line and are included here for context.

• Cloud Configuration and synced Powers (1.0.437): Access supported personal configuration across IDE surfaces and try cloud-synced Powers from the installed list. Release notes ->
• Permission improvements and configured Windows shells (1.0.337): Keep ignored files out of search, apply filesystem and command permission rules more accurately, and run agent commands in your configured Windows terminal profile. Release notes ->
• Cloud Sessions and Agent Focus upgrades (1.0.293): Start Cloud Sessions from Agent Focus, collapse the session rail for more chat space, answer attention cards in place, and move back or forward between views. Release notes ->
• Agent Plugin support and session pinning (1.0.288): Use Agent Plugins through Powers and pin important Agent Focus sessions. Release notes ->

With Cloud configuration enabled, your supported personal configuration appears across the IDE and Agent Focus, and cloud-synced Powers are ready to try from the installed list. This version also keeps in-progress cloud-session drafts available across navigation and preserves the welcome view until you send your first prompt.

When Cloud configuration is enabled for your account, access personal Steering, custom agents, Skills, Powers, and Hooks from their usual IDE surfaces. Cloud indicators identify items managed in Kiro Web. Steering, Skills, and Hooks open as read-only previews with an Edit in web action, and Agent Focus shows the same source and management links. Learn more ->

Cloud-synced Powers now appear in the installed Powers list, where you can select Try power and review their bundled Skills and MCP configuration. Manage these account-backed Powers in Kiro Web. Learn more ->

This version lets third-party extensions work alongside Kiro, adds support for the latest MCP protocol revision with more reliable sign-in, reduces extension host crashes during large agent responses, and keeps agent turns going when the network briefly drops.

This version keeps ignored files out of search results, improves filesystem and command permission rules, and runs agent commands in your configured terminal profile on Windows.

Add AGENTS.md files throughout your workspace to give Kiro instructions scoped to each directory tree. This version also lowers idle resource use, preserves more context in long sessions, and improves Cloud configuration, chat, hooks, and MCP connections.

This version brings Cloud Sessions to Agent Focus Mode as a preview and gives the sessions rail a collapsible icon-only view, attention cards you can answer in place, and back/forward navigation. It also pins the agent's Windows terminal to PowerShell, restores Always Allow for commands it was quietly forgetting, and fixes the macOS updater downloading every update twice.

Cloud Sessions are now available in Agent Focus Mode as a preview. Start a session that runs in the cloud alongside your local ones, pick the repositories it works against, and keep those repositories visible below the chat. Cloud sessions use the same agent and model selectors as local sessions. Learn more ->

Collapse the sessions rail to an icon strip to give the chat more room, with every session still one click away. When a session needs your input, an attention card appears next to the chat with the question and the agent's options as buttons, so you can answer it without switching over. The attention panel never opens on its own, and won't raise itself for the session you already have on screen. And you can move back and forward across sessions and settings from the titlebar (Cmd/Ctrl+[ and Cmd/Ctrl+]). Learn more ->