[dyoshikawa]

What's Changed

Features

• Codex CLI: author the [auto_review] table (policy, extra_policy, timeout_ms, circuit_break_action, conversation_history_max_output_tokens) through the codexcli override keys, validated against Codex rust-v0.166.0 (feat(permissions): author the Codex CLI [auto_review] table through the codexcli override #3735)
• GitHub Copilot: copilot.defaultPermissionMode also writes VS Code 1.144's chat.defaultConfiguration and accepts assisted; import never raises permissions on a round trip (feat(permissions): write copilot default permission mode to chat.defaultConfiguration #3745)
• Takt: author and import Takt 0.74.0's workflow_system_commands.custom_scripts security policy (feat(takt): author the workflow_system_commands security policy #3736)

Fixes

• Claude Code: skip the claude.ai sign-in variables (CLAUDE_CODE_OAUTH_*) and the Windows variables Claude Code ignores (ALLUSERSPROFILE, SystemDrive, CommonProgramFiles*, CommonProgramW6432) in project-scope env, with a name-only warning; --global still writes them (fix(claudecode): skip claude.ai sign-in and more Windows env variables at project scope #3737)
• Grok CLI: rewrite Claude-style //abs path patterns to /abs for Grok's path tools, which read a leading // literally (fix(permissions): rewrite Claude-style // absolute patterns for Grok CLI #3738)
• Hermes Agent: map Hermes v0.22.6 mcp:<server>/<tool> trust grants to canonical MCP allows, emit exact canonical MCP allows as grants unless any deny/ask restricts the tool, and keep unmanaged user grants on generate (fix(permissions): map Hermes MCP trust-gate grants to canonical MCP allows #3739)
• AugmentCode: read Auggie 1.x tool names and nameless subagents, skip allow/ask shell regexes that would widen as globs, and warn that Auggie 1.x does not load plugin rules/ (fix(augmentcode): read Auggie 1.x permission and subagent spellings #3741)
• OpenCode / Kilo Code / MiMo Code: ignore bare sanitized OpenCode server-prefix tool keys on import and keep unowned ones across import and generate; Kilo gets the same orphan handling (fix(mcp): ignore bare sanitized OpenCode server prefixes #3727, refactor(mcp): OpenCode MCP tool filter follow-ups from #3698 #3723, fix(mcp): keep bare OpenCode server-prefix tool keys across import and generate #3740)

Docs and maintenance

• Document Kiro CLI 2.37's automatic V2→V3 agent upgrade and the chat.enableAutoAgentUpgrade workaround (docs(kiro): document opting out of Kiro CLI 2.37's automatic agent upgrade #3742)
• Document ZCode 3.17.2's handling of command shell steps (docs(zcode): note ZCode 3.17.2's model-run command shell steps #3743)
• Point Replit Cloud Agent users at the agentsmd target (docs(replit): point Replit Cloud Agent users at the agentsmd target #3744)
• Re-check the new-target watchlist (docs(skills): record the 2026-11-03 new-target watchlist re-check #3734)

Contributors

• @dyoshikawa
• @521Peter
• @Oscar-Williams

Full Changelog: v43.4.2...v43.5.0