diff --git a/changelog.md b/changelog.md
index abe34ac4..c5abf8ca 100644
--- a/changelog.md
+++ b/changelog.md
@@ -1,3 +1,116 @@
+## 1.0.69 - 2026-07-07
+
+- Label built-in file edits with a (sandbox policy) badge instead of (sandboxed), since they follow the sandbox policy on a best-effort basis rather than running in the OS-level sandbox
+- Reload installed plugin extensions without restarting a session
+- Add a /plugins dashboard to manage installed plugins
+- Open quick help from an empty prompt without leaving a stray ?
+- Add minimal reasoning effort for gemini-3.5-flash
+- Show a scrollbar in the /model picker list
+- Show disabled servers as disabled in /lsp test
+- Let built-in file edits bypass the sandbox when you approve it
+- web_fetch now follows the active sandbox network policy (denying outbound or local targets the policy blocks) and, when the host opts in via sandbox.allowBypass, lets you approve a one-time bypass from the fetch prompt
+- Show exact local assistant usage in Chronicle and session SQL
+- Confirm before resuming a remote session from a different repository
+- Delay read-only remote session creation until you send the first message
+- Display reasoning-effort labels in the CLI footer
+- Show descriptions for sandbox userPolicy settings in /settings
+- Reject explicitly empty --name= values when starting a session
+- Create delegate PRs against the current branch by default, with /delegate --base to choose another PR target branch
+- Make /copy fall back to wl-copy on Wayland
+- Improve /sandbox add-path suggestions so they open only when you ask for them
+- Improve /chronicle cost-tips with more precise evidence-backed recommendations
+- Hold Alt (Option on macOS) while scrolling to move one line at a time
+- Resume and switch large sessions faster
+- Speed up /diff rendering and scrolling on large diffs
+- Keep the full /model picker on screen when the timeline is full, re-snapping as its details banner grows so the search box and hint bar are no longer clipped below the terminal
+- Hide transient console windows when the CLI starts helper processes on Windows
+- Auto-approval timeline entries now include the request subject, such as the command, path, URL, or tool name
+- /allow-all auto now requires experimental mode (/experimental on or --experimental) instead of the AUTO_APPROVAL env var or feature flag
+- Show /rubber-duck in pre-auth help and self-documentation
+- Include files inside new untracked directories in /diff local edits
+- A prompt taller than the screen stays scrollable when its top scrolls off, instead of collapsing to a pinned header
+- Require Copilot login before ACP authenticate returns success
+- Show the full assistant response in prompt mode when --stream is off
+- Disconnect a repo-scoped plugin's MCP server when the repo disables it or the session leaves the declaring repository
+- Prevent `copilot init` from hanging in non-interactive mode
+- Reject empty --session-id= values instead of ignoring them
+- Reject empty --resume= values instead of starting a new session
+- Preserve emoji in truncated timeline tool arguments
+- Show plain Shift+Enter in /terminal-setup output
+- Keep session resume working when token timing includes fractional milliseconds
+- Complete @-mentions for files whose names start with [DIR]
+- Sign in to MCP servers through the CLI OAuth callback flow
+- Reveal the full /user switch picker when the timeline is full so its hint bar is no longer clipped below the terminal
+- Add /mcp list to show attached MCP servers and their status, and allow /mcp list and /plugin list to run while the agent is working
+- Allow opening the /mcp manager while the agent is working to enable or disable servers mid-turn; add, edit, delete, and re-auth stay paused until the turn finishes
+- Add auto allow-all mode that auto-approves requests an LLM judge evaluates as acceptable
+- Add a `stayInAutopilot` setting (default false) that keeps the CLI in autopilot mode after an autopilot task completes
+- Pinned prompts keep their full frame aligned while scrolling
+- Suppress macOS pasteboard stderr during clipboard reads and writes
+- Keep colons intact in rendered markdown output
+- Warn when multiple plugins define the same MCP server
+- Collect debug logs without truncating large files or dropping multiline secrets
+- Find PRs from worktree branches when the local branch name differs from the PR head ref
+- Skip the autopilot permission prompt when bypass mode is disabled by policy
+- Allow WSL UNC paths for local files in the CLI
+- Apply --reasoning-effort reliably when the CLI starts
+- Keep slash-command picker rows intact in tab-expanding terminals
+- Keep model switches working when tool call IDs include punctuation
+- Double-press Esc now interrupts the running main turn (flushing queued messages), or stops background agents when the main agent is idle
+- Prevent benign Windows crash reports when the CLI exits
+- Wrap clipboard writes in tmux passthrough so copy reaches the outer terminal
+- OAuth-gated MCP servers now register their tools after reconnect
+- Keep CLI authentication working in one-shot sessions
+- Ctrl+C dismisses ask_user and elicitation prompts like Escape
+- Show Authenticate for cancelled MCP OAuth requests
+- Keep /help from listing rewind/undo twice
+- Keep MCP servers in needs-auth after OAuth cancellation
+- Hide staff-only commands from pre-auth help and self-documentation
+- Surface skill loading errors and warnings in `skill list`
+- Browse and filter models more easily in the CLI model picker
+- Resume sessions faster by removing quadratic work when rebuilding the timeline
+- Warn when static context uses most of the prompt budget and block requests when little conversation room remains
+- Improve CLI responsiveness when reading and writing session databases
+- Improve slash-command and theme picker option descriptions
+- Remove inert sandbox host lists and the Clear policy on exit toggle
+- Add file and folder completion to /sandbox path entries
+- Update a backgrounded session's branch label in the Sessions split view when its working directory changes
+- Skip unnecessary MCP reloads when returning to an already-loaded session
+- Prevent the tgrep indexer from running out of memory on large monorepos, and fall back to ripgrep if the indexer is killed instead of repeatedly restarting it
+
+## 1.0.68 - 2026-07-01
+
+- Add support for the kimi-k2.7-code model
+- The focused field in the /mcp config form is marked with a "❯ " chevron, not color alone
+- Keep IDE tools available during transient IDE disconnects, returning a clear error while disconnected and recovering automatically when the IDE reconnects
+- Tab completion shows slash command aliases inline (e.g. /pr automerge|agentmerge)
+- Stop hooks from erroring and denying every tool when a session's working directory or git worktree has been deleted
+- Keep the footer model status in sync when reasoning effort or context tier changes
+- Avoid duplicate skill and command parse errors from symlinked scan roots
+- Update the Sessions sidebar branch after /cd and /worktree
+- Find agents and instructions under Win32 extended-length paths on Windows
+- Show descriptions for slash-command input choices
+- Prevent terminal corruption when copying selected timeline text on macOS
+- Fold symlinked sandbox paths into a single row
+- Browse, resume, and switch between sessions from the agents screen
+- Code review retries transient git failures when gathering changes
+- Skip malformed plugin manifests and keep loading valid plugins
+- Show plan budget details in the statusline and /usage for supported plans
+- Render Thai and Devanagari text correctly in clipped output
+- Keep file edits and patches within the sandbox filesystem policy
+- Preserve wrapped OSC 8 hyperlink IDs in terminal output
+- Let device-managed settings override server-managed settings
+- Keep embedded /skill tokens in skill prompt context
+- Let git commands work from repo subdirectories in the sandbox
+- PowerShell variable references no longer trigger content-policy refusals
+- Tell the agent when the working directory changes between turns so it uses the new directory for commands and relative paths
+- Default to a steady vertical-bar cursor in interactive sessions
+- Disable cursor blinking at startup without changing cursor shape
+- Reject sandbox path edits that conflict with symlinks in other lists
+- Keep the status line visible when the slash-command picker opens
+- Custom agents keep their tool filters in nested subagents
+- Preserve multibyte characters (emoji, accents, non-Latin text) in the /diagnose session log excerpt
+
 ## 1.0.67 - 2026-06-30
 
 - Disabling the sandbox for the rest of the session now takes effect immediately, so shell and search commands stop re-prompting to bypass it mid-turn