Changelog

• 9248d39 harness-runtime: add codex-base, opencode-base, claude-code-base template bases (#2010)
• b9745bf agents: cancel a running turn (Ctrl-C/Esc in attach, Ctrl-C in prompt, harness-runtime cancel) (#2009)

Changelog

• 3b4a49b clarify agentspec validation errors for copy-paste whitespace (#2011)
• 658b3b3 Expose NFS CSI plugin toggle in DOKS cluster create/update (#1962)
• 1c300c7 agents: do not persist create --spec into global config (#2013)
• fcfcbaf Update HostedAgentSandboxSize to display pricePerHour and pricePerMonth (#2002)
• d773640 agents: --template for the sandbox image, and --template sandbox for no agent (#2003)
• f72a7ce Add cancel-execution command for Hosted Agents triggers (#1995)
• 048b0c5 remove hidden doctl gradient list-models, list-regions, and openai-key (#1999)
• 6256a4d agents: allow langgraph-base as a template base (#2000)
• 4847f03 agents: add --permission for --harness sessions (#1992)
• d89db23 agents: build the port-forward example from agentCLI like every other command (#1996)

Changelog

Changelog

• 2242632 doctl: rename pause reason low_balance → zero_balance (#1994)

Changelog

• 9905213 microvm: reshape doctl onto api-v2 and hide the tree (MDROP-401) (#1945)
• 29eedab Bump github.com/digitalocean/godo to v1.213.0 (#1987)

Changelog

• 2039c37 agents port-forward: say what a tunnel close code means, once per port (#1983)

Changelog

• 59d79dc agents proxy: drop the codex request relay, answer 0.155 bootstrap locally (#1982)

Changelog

• 7343e42 Update godo to v1.212.0 (#1981)
• 4b5fba0 Move list-models, list-regions, and openai-key under doctl inference. (#1980)

What’s new

Create and talk to agents

• Start a session from a YAML/JSON manifest, a saved config, or quick flags (--harness, --gh-repo, --prompt, and more)
• create builds a session without attaching; launch opens one (and creates it first if needed)
• prompt / ask sends one message and prints the answer — good for scripts
• Interactive attach shows markdown replies, reasoning (“thinking”), and a clearer live stream
• First session create shows Public Preview terms

Approvals and human-in-the-loop

• Approve, reject, or defer actions while attached
• Handle MCP-style prompts: simple yes/no, open a URL, or fill in a short form
• Headless mode with --on-hitl for unattended runs
• Out-of-band approve for pending requests (including form answers via --content)

Session lifecycle

• List, show, pause, resume, update, and remove sessions
• Filter lists by status, name, parent session, or pause reason (e.g. low balance)
• Fork and roll back from checkpoints
• Clearer messaging when a session pauses (including low-balance pauses)

Workspace and sandbox

• Upload and download files
• Run commands in the sandbox with exec
• Forward local ports into the session
• Bridge Codex / OpenCode CLIs with start-proxy

Templates, configs, sizes, triggers, files

• Manage reusable templates and configs
• List sizes
• Set up triggers (including webhook secrets handled safely for scripting)
• Browse workspace files

Billing awareness

• balance shows your team’s prepayment balance and gate status
• When funds run out, commands show a clear add-funds message instead of a generic failure
• Sessions that pause for billing explain why, including mid-stream

What's Changed:

Cleaner terminal experience

• doctl now understands your terminal better — colour, width, and plain text when you’re piping or running in CI — so output stays readable whether you’re in a terminal or a script.

Clearer flag errors

• Missing or invalid flags are caught before the API is called, with plain-language messages and hints on what to fix.

Better waiting on long operations

• Commands that use --wait share one consistent progress style. There’s a timeout (default 30 minutes) so a wait can’t hang forever, and failed operations are reported as failures. Progress goes to stderr so piping still works.

Welcome when you run doctl

• Running doctl with no arguments shows a short welcome: version, account, team, context, and a few next steps — plus a note if a newer version is available. Use doctl --help for the full command list.

Safer auth config

• auth switch and auth remove no longer rewrite your whole config file. Environment tokens are no longer accidentally saved to disk.
• If you’ve used doctl in CI with DIGITALOCEAN_ACCESS_TOKEN set, check your config file and rotate the token if it was saved there.

Masked secrets by default

• Secret values and database passwords (including those inside connection strings) are masked in terminal output. Pass --show to reveal them. In CI, values are still returned unmasked so scripts keep working without the flag.

Clearer errors

• Failures now show a short title, why it failed, status when relevant, and a next step when one helps. Request IDs are included when the API provides them. Typos in nested commands (for example under compute) now exit with an error instead of looking like success.

Styled help

• --help uses a consistent, easier-to-scan layout across commands, with examples highlighted.

Note: This release updates doctl’s terminal experience only. It does not include OHS / agent commands or APIs; those remain on the separate beta build: v1.169.0-beta.1