Kiro CLI: Folder Write Approvals, Non-Interactive Cloud Sessions, and Workflow Plan Previews

This release lets you allow a whole folder when a V3 session asks to write a file. V3 cloud sessions now run from non-interactive commands, and a workflow shows its plan before any step runs. It also adds three V3 output styles and gives selected workflow steps access to Powers and MCP servers. Fixes cover non-interactive runs, model fallback, MCP sign-in, and workflows.

[Improvements] Allow a folder in write approvals: When a V3 session asks to write a file, you can allow a folder you choose for this session. A folder inside the workspace can also use workspace scope, and a folder outside it can use user scope. Later writes inside that folder reuse the grant unless an `ask` or `deny` rule applies. Learn more

[Improvements] Cloud sessions in non-interactive runs: V3 non-interactive runs support `--cloud` and `--repo`. Plain-text output prints the cloud session ID so you can resume or delete the session later. Learn more

[Improvements] Workflow plan preview: V3 `/workflow run` picker selections open a confirmation form with a plan preview before the workflow starts. Creating a workflow from a prompt also shows its plan for your approval before any step runs. Learn more

[Improvements] Powers and MCP in workflow steps: V3 workflow coding, planning, and design steps can use Powers. Design steps can also use your configured MCP servers. Learn more

[Improvements] Approval scope display: The V3 Always Allow page now shows the selected scope. Press `s` to cycle between session, workspace, and user. Learn more

[Improvements] Plain-language workflow changes: V3 workflows accept plain-language changes to their remaining steps while they run. Learn more

[Improvements] Workflow review loops: V3 workflow review loops pause after two rejected reviews and ask you how to continue. Learn more

[Improvements] Focused workflow step sessions: V3 workflow step sessions open on their task instead of a copy of the parent conversation. Learn more

[Improvements] New output styles: V3 `/settings display` now offers Proactive, Explanatory, and Learning output styles. Learn more

[Improvements] Memory in What's new: The startup What's new now introduces Memory, with next steps for your engine and memory setting. Learn more

[Improvements] Subagent model fallback: Subagents spawned from a V2 session now follow that session's model fallback configuration. Learn more

[Improvements] Terminal program status: Terminals that support OSC 7501 can now show whether Kiro CLI is idle, working, done, waiting for your approval or answer, or stopped by an error. Set `KIRO_NO_PROGRAM_STATUS` to opt out. Learn more

[Improvements] Session list refresh: V3 saved-session lists appear right away instead of waiting on background directory scans.

[Fixes] V3 non-interactive `--resume-id` of a cloud session now resumes it instead of starting an empty local session

[Fixes] V3 command approval now checks shell syntax for the shell that runs the command, so approval prompts match how your shell, including fish, actually parses the command

[Fixes] A V2 crew whose stage cannot start now fails with that stage's error instead of waiting forever

[Fixes] V3 turns no longer end early when the model spends its whole output budget on reasoning

[Fixes] V3 retries an image the provider rejects as too large at the provider's size limit instead of failing the turn

[Fixes] V3 workflow steps paused in a parallel branch now finish when they report success or failure

[Fixes] V3 workflow messages buffered during an agent restart now survive it

[Fixes] V3 workflow steps that have finished can still send follow-up information to their parent

[Fixes] V3 `/chat save` to a name without `.zip` now says the file is a zip session archive. Learn more

[Fixes] V3 `/chat load` explains when a session archive was altered after saving. Learn more

[Fixes] Plain-text non-interactive runs now explain why a turn was cancelled or refused, or why a session could not start

[Fixes] Non-interactive runs exit nonzero when stdout is closed instead of finishing the turn

[Fixes] MCP OAuth links now disappear when their server connects, and the notification names the server

[Fixes] V3 MCP servers from an organization MCP registry now use the registry's `oauth` and `oauthScopes` settings. Learn more

[Fixes] Choosing None in the V2 `/model` fallback picker now turns fallback off for this machine and profile. Learn more

[Fixes] The V2 `/model` fallback row names the vendor default that answers a refusal when no target is configured

[Fixes] V3 resumed sessions show their saved model and effort before the model list loads

[Fixes] V3 workflow pause messages no longer say a run will resume on its own; resuming the run retries the step

[Improvements] Fewer native libraries: V3 Kiro CLI no longer bundles two native image libraries, `sharp` and `libvips`.