What's Changed
Features
- Codex CLI: author the
[auto_review]table (policy,extra_policy,timeout_ms,circuit_break_action,conversation_history_max_output_tokens) through the codexcli override keys, validated against Codex rust-v0.166.0 (#3735) - GitHub Copilot:
copilot.defaultPermissionModealso writes VS Code 1.144'schat.defaultConfigurationand acceptsassisted; import never raises permissions on a round trip (#3745) - Takt: author and import Takt 0.74.0's
workflow_system_commands.custom_scriptssecurity policy (#3736)
Fixes
- Claude Code: skip the claude.ai sign-in variables (
CLAUDE_CODE_OAUTH_*) and the Windows variables Claude Code ignores (ALLUSERSPROFILE,SystemDrive,CommonProgramFiles*,CommonProgramW6432) in project-scopeenv, with a name-only warning;--globalstill writes them (#3737) - Grok CLI: rewrite Claude-style
//abspath patterns to/absfor Grok's path tools, which read a leading//literally (#3738) - Hermes Agent: map Hermes v0.22.6
mcp:<server>/<tool>trust grants to canonical MCP allows, emit exact canonical MCP allows as grants unless any deny/ask restricts the tool, and keep unmanaged user grants on generate (#3739) - AugmentCode: read Auggie 1.x tool names and nameless subagents, skip allow/ask shell regexes that would widen as globs, and warn that Auggie 1.x does not load plugin
rules/(#3741) - OpenCode / Kilo Code / MiMo Code: ignore bare sanitized OpenCode server-prefix tool keys on import and keep unowned ones across import and generate; Kilo gets the same orphan handling (#3727, #3723, #3740)
Docs and maintenance
- Document Kiro CLI 2.37's automatic V2→V3 agent upgrade and the
chat.enableAutoAgentUpgradeworkaround (#3742) - Document ZCode 3.17.2's handling of command shell steps (#3743)
- Point Replit Cloud Agent users at the
agentsmdtarget (#3744) - Re-check the new-target watchlist (#3734)
Contributors
Full Changelog: v43.4.2...v43.5.0