Gemini CLI v0.39.0 ships memory inbox, subagent refactor, and sandbox fixes
Gemini CLI `v0.39.0` lands a `/memory inbox` command for reviewing extracted skills, a unified `invoke_subagent` tool replacing legacy subagent wrappers, and a wave of sandbox stability and Windows compatibility fixes.
Score breakdown
Teams building on Gemini CLI's agentic and Plan Mode features should review the `invoke_subagent` consolidation and the new `activate_skill` confirmation gate, as both change how subagent workflows are invoked and approved at runtime.
- 01New `/memory inbox` command lets users review skills extracted by the memory system
- 02Subagent tooling refactored into a unified `invoke_subagent` tool; legacy subagent wrappers removed
- 03Subagent memory leaks fixed using `AbortSignal` in `MessageBus`
Gemini CLI `v0.39.0` is a broad release touching memory, subagent architecture, sandbox security, and UI polish. The headline user-facing feature is the new `/memory inbox` command, which provides a dedicated interface for reviewing skills extracted by the memory subsystem. On the agentic side, the legacy subagent wrapping tools have been removed and replaced with a single unified `invoke_subagent` tool, alongside a fix for subagent memory leaks using `AbortSignal` in the `MessageBus`.
Plan Mode also gains a user confirmation requirement for `activate_skill` actions, and policy priorities have been simplified with consolidated read-only rules.
Sandbox hardening is a major theme: the release ensures robust sandbox cleanup across all process execution paths, resolves a Windows symlink bypass vulnerability, centralizes path resolution for both the macOS Seatbelt and Linux sandbox implementations, and adds explicit git identity environment variables to prevent sandbox checkpointing errors. Plan Mode also gains a user confirmation requirement for `activate_skill` actions, and policy priorities have been simplified with consolidated read-only rules.
Several quality-of-life fixes round out the release: file path display is restored in edit and write tool confirmations, Ctrl+Backspace word deletion now works in Windows Terminal, `ctrl+shift+g` is supported, unhandled `AbortError` logs are suppressed during request cancellation, the `hideContextPercentage` setting is now respected when the `FooterConfigDialog` is closed without changes, and 503 retry delays now honor `RetryInfo`. Infrastructure improvements include chat recording migrated to JSONL streaming, a `useAgentStream` hook implemented and wired into `AppContainer`, startup optimized with a lightweight parent process, and the evals infrastructure generalized to support more eval types with named suite queuing. The `ink` dependency was updated to `6.6.9`.
Key facts
- 01New `/memory inbox` command lets users review skills extracted by the memory system
- 02Subagent tooling refactored into a unified `invoke_subagent` tool; legacy subagent wrappers removed
- 03Subagent memory leaks fixed using `AbortSignal` in `MessageBus`
- 04Sandbox fixes cover robust cleanup, Windows symlink bypass, and centralized path resolution for macOS Seatbelt and Linux
- 05Plan Mode now requires user confirmation before executing `activate_skill`
- 06Chat recording migrated to JSONL streaming format