← Cursor changelog

Plugins, Sandbox Access Controls, and Async Subagents

v2-5 includes 3 new features and 5 fixes. Added keyboard shortcut ⌘+Enter (Ctrl+Enter) to submit messages in agent conversations.

Added

  • Added keyboard shortcut ⌘+Enter (Ctrl+Enter) to submit messages in agent conversations.
  • Removed Default Mode setting so each new agent conversation begins fresh.
  • Added a Close button to the agent chat pane.

Improved

  • Improved permission request flow for subagents.
  • Improved the performance of very long chats.
  • Improved the performance of @ mentions.

Changed

  • User config only: restricted to domains in your `sandbox.json`
  • User config with defaults: restricted to your allowlist plus Cursor's built-in defaults
  • Allow all: unrestricted network access within the sandbox
  • Agents can now search past conversations and use chat history as context.
  • The Cursor CLI agent can handle the `sudo` password prompt inline for commands that require elevated privileges.
  • Common operations like `git clone`, `npm install`, and `pip install` now work out of the box in the agent sandbox. You can extend or override these defaults per-project.
  • When the agent is in Plan mode, you can now choose "Build in Cloud" to hand off plan execution to a Cloud Agent while you continue working locally or close your laptop.
  • Toggle inline diffs on or off in your settings. By default, diffs are shown only in the review panel.
  • Renamed "Duplicate Chat" to "Fork Chat" in the three-dot menu of a chat message.
  • Cleaned up the More Actions chat menu.
  • Manual edits no longer create in-line diffs.
  • Stopping the parent agent will always stop the child subagents.
  • Enforce read-only sandbox for Ask mode even with "Run everything" enabled.

Fixed

  • Fixed bug where some terminal tool calls caused degraded performance.
  • Fixed keybinding behavior for Cmd+Opt Left/Right for tab navigation.
  • Fixed an auto-run mode switching bug.
  • Fixed errors when creating project rules with no workspace open.
  • The global ignore list is now empty by default to fix sandboxing issues. Existing ignore patterns still work the same.

Removed

  • Removed the Dotfile Protection setting to remove unexpected approval prompts when the agent tried to edit dotfiles.
  • Removed Auto-Accept on Commit setting so pending diffs are automatically accepted when you commit.