dyoshikawa/rulesync v37.1.0 on GitHub

What's Changed

feat(permissions): add a copilot.sandbox override that writes VS Code 1.141's Agent Host sandbox settings (chat.agent.sandbox.*: enabled, network, allowUnsandboxedCommands, MCP/LSP servers, credentials, fileSystem.allowDevToolAccess and fileSystem.userConfiguredPaths) to .vscode/settings.json. Only the leaves you state are written, and values that loosen the sandbox are written with a warning. Import reads the keys back, including the legacy boolean enabled. (#3514, #3519)

fix(hooks): with preserveUnownedHooks, existing handlers keep their positions and Rulesync's own handlers follow the order in your sources, so Codex CLI's position-based hook trust keys stay stable. This applies to Claude Code, Codex CLI, Cursor and Qwen Code. Generated handlers that are new are appended. (#3511)
fix(copilotcli): a disabledMcpServers value that is not a string array is left as it is, with a warning, and disabled servers are then left out of the MCP file instead of being written runnable. (#3519)
fix(hooks): a preserved group with an explicit sequential: false now merges with a generated group that omits the key. (#3519)
fix(codexcli): the AGENTS.md size warning brings back its hint for a project_doc_max_bytes set only in ~/.codex/config.toml, and notes that the project .codex/config.toml counts only in a trusted project. (#3519)
fix(cline): the permissions deprecation warning is reworded, and it notes that a PreToolUse cancel: true stops the whole Cline task. (#3519)

Full Changelog: v37.0.0...v37.1.0