CLI v0.225.0, Desktop v0.182.0: Default app file opening, subagent controls, Droid Shield accuracy, and desktop sign-in and menu fixes

New features - Open files in default app - You can now open a session's files with your operating system's default application (app) - Stop a running subagent - You can now stop a running subagent from its panel in the session transcript (app) Improvements - Droid Shield false positives - Droid Shield now stops fewer safe Git commands and flags fewer harmless strings as secrets - Faster plugin marketplace installs - Installing and updating plugins from a Git marketplace now downloads only the files those plugins need - Environment panel on narrow layouts - Environment now opens in a popover when the session is too narrow for the side rail (app) - Streaming table columns - Markdown tables in chat now size their columns to the content while they stream (app) - Connector catalog entries - Three more connectors now show their icon and category in connector settings (app) - Branch menu styling - The branch menu in environment and diff views now matches the rest of the app's menus (app) - Windows menu styling - Windows title bar menus now use muted labels with hover and focus highlighting that follows your theme (app) Bug fixes - Desktop sign-in failures - Failed desktop sign-ins now stop retrying and report back to the window you started in (app) - Connector settings navigation - Opening connector settings from a session now stays in the app instead of a new browser window (app) - Session selection after archive - Archiving a session no longer replaces the session you just opened with the new session screen (app) - Organization model policy fallback - Starting a session with a model your organization blocks now switches to an allowed model and tells you which one - Desktop menu clickability - Menus that open over the window title area now stay clickable instead of dragging the window (app) - Plugin MCP servers - MCP servers that come with a plugin now load right after the plugin installs - Regional sign-in handoff - Signing in now sends you to your organization's regional app instead of a manual handoff step (app) - MCP server list loading - The MCP screen now waits for your session to load instead of showing an empty list - Session status with subagents - The session list now shows a session as running while its subagents are still working (app) - Idle update restarts - Droid now waits for your session to be idle before restarting to finish an update - Organization switcher layering - The organization switcher now opens above session error messages instead of behind them (app) - Spec Mode for subagents - Subagents resumed from a session in Spec Mode now stay read-only instead of regaining editing tools - Control tooltips in chat - Buttons in chat, file, and specification panels show their tooltips again (app) Security - Droid Shield commit scanning - Droid Shield now scans the exact changes a commit or push publishes before allowing it