CLI v1.11.0, Desktop v1.11.0: Windows command sandboxing, translucent sidebar, external browser for HTML files, and fixes across sessions, hooks and Scripts

New features - Open in external browser - Right-clicking an HTML file link in chat now offers Open in external browser - Windows command sandbox - Sandboxing now covers commands, hooks, and connector servers on Windows 11 hosts that support it - Translucent sidebar setting - Appearance settings now offer a translucent sidebar on macOS and Windows 11 Improvements - Session archiving speed - Archiving a session no longer reads every session on your machine, so it finishes faster - Hook result handling - Hook exit codes and JSON output now mean the same thing on every hook event - Public API reference coverage - The public API reference now documents six more operations and the errors each can return - Image and PDF reads - A Script's image or PDF read now records one line naming its type and size Bug fixes - Model region availability - Droid now says when a model is not available in your region and asks you to pick another - API key creation messages - The API Keys section now names what blocks creation only once your organization settings have loaded - Blank session renames - Renaming a session to a blank title is now refused instead of leaving the session untitled - Script runs at session stop - Stopping a session now reports only the Script runs still running instead of repeating one that ended - Source control connection errors - A failed source control check now names the connection and host, and GitLab Cloud repository lists refresh again - Session titles with special characters - A session title containing a null character now saves instead of failing - Task rows in transcripts - A Task row now ends instead of staying Running when a running Task absorbs or declines your message - Stopping an exec run - Interrupting an exec run now ends the turn instead of continuing after the signal - Archiving an open session - Archiving a session while it opens no longer loads it, and a restored session stays visible - Autonomy and mode shortcuts - Ctrl+L and Shift+Tab now do nothing while a session's settings are still loading - Stopping a Script with hooks - Stopping Droid no longer leaves later file edits waiting on a notification hook from a Script - Organization policy on credential errors - A credential Droid cannot read no longer drops your organization settings as if you signed out - Pending questions across clients - A question Droid no longer waits on now closes everywhere instead of staying answerable - Background Tasks in Script - A Script now fails when a background Task it launched was refused instead of reporting success - Quoting a streaming reply - A reply that starts with a code block can now be quoted and copied while it streams - Model fallback notices - A notice that your session moved to another model now appears only in that session - Script starts on Windows - A Script no longer fails as already running on Windows when nothing else holds its lock - Hook context in long sessions - Context from SessionStart and PostToolUse hooks now survives compaction and a hook that stops the batch Security - Upfront Script approvals - An upfront approval no longer covers a nested command once your autonomy level or ask rules refuse it