DevAgentRadar → Repo Harness Rule Patch

Goal: update our repository's permanent harness instructions based on this release.

Update the file that tool actually reads. Do not dump everything into one file.

• Claude Code → CLAUDE.md plus .claude/ (skills, hooks, settings, agents, commands). It does not read AGENTS.md natively; start CLAUDE.md with @AGENTS.md.
• Codex, Copilot, Cursor, Factory Droid, Grok Build, Roo Code, Goose, OpenCode, Amp, Zed, Aider → AGENTS.md.
• Gemini CLI / Antigravity → GEMINI.md. AGENTS.md only if context.fileName is set.
• Cursor glob-scoped rules → .cursor/rules/*.mdc (plain .md is ignored), not a second constitution.
• Codex MCP → .codex/config.toml, not .mcp.json.
• Copilot extra instructions → .github/copilot-instructions.md; custom agents → .github/agents/.
• Windsurf → .windsurf/rules (do not assume AGENTS.md).
• Cline → .clinerules.
• Procedures → a skill (SKILL.md). Enforcement the model must not skip → a hook. Isolated roles → subagents.
• Do not fork the same rule into three tool files.

Context

Assistant: GitHub Copilot CLI Proposal: Upgrade Copilot CLI to v1.0.106-7 and set Fusion tier in copilot config Summary: v1.0.106-7 adds /code (open session in VS Code), Fusion tier in copilot config, Kitty inline images, and browser-use 0.1.0. Upgrade for terminal escape-sequence sanitization, XDG MCP/skills/agent migration, more accurate Claude token budgeting, and --yolo/--allow-all on --resume/--continue. Primary source: https://github.com/github/copilot-cli/releases/tag/v1.0.106-7

Why it matters

This release hardens the Copilot CLI terminal and unlocks a few session workflows. Escape sequences and control characters in diffs, /diff, git branch names, hook messages, plugin list/update output, MCP/tool errors, command descriptions, and timeline output now render as plain text or spaces, so untrusted file or model text cannot restyle the UI, hide lines, or set the window title. Sandbox and permissions also change: managed policy failures tell you to contact an administrator and include the failed test command; macOS sandboxed commands can read the default Xcode.app bundle; long-option values like --name=/path prompt for access outside allowed directories. Config loading is less lossy: UTF-8 BOM MCP/LSP/plugin.json files load; a setting change no longer replaces an unreadable settings.json; $XDG_CONFIG_HOME/.copilot migration into ~/.copilot now brings MCP servers, language servers, folder permissions, personal instructions, custom agents and skills, and will not replace a dangling ~/.copilot symlink. After upgrading, set Fusion tier via copilot config, use /code to open the current session in VS Code, and rely on improved Claude token estimation plus context-limit warnings (compaction events also appear in JSON). ACP honors --agent at startup; --yolo and --allow-all apply with --resume/--continue; nested subagents inherit session-allowed MCP tools; background Autopilot auto-answers ask_user. New create/apply_patch files follow repo line endings.

Suggested actions

1. Upgrade GitHub Copilot CLI to v1.0.106-7 from https://github.com/github/copilot-cli/releases/tag/v1.0.106-7 before the next session so diffs, hooks, plugin names, MCP errors, and git branch names cannot inject terminal escape sequences.
2. Run copilot config and set the Fusion tier. Then run copilot plugin list and copilot plugin update so the built-in browser-use plugin is 0.1.0.
3. In an active Copilot CLI session, run /code to open that session in VS Code. After changing the session working directory, run /diff so it uses the active worktree.
4. Launch ACP mode with --agent so the selected agent persona, prompt, and tools apply at startup. When resuming a local session, pass --yolo or --allow-all on the same command as --resume or --continue so those flags take effect.
5. If Copilot config still lives under $XDG_CONFIG_HOME/.copilot, start v1.0.106-7 once so MCP servers, language servers, saved folder permissions, personal instructions, custom agents, and skills migrate into ~/.copilot without replacing a missing-target symlink.

Config surfaces this release may change

• MCP servers (high confidence) — check your repo before applying
• skills (high confidence) — check your repo before applying
• subagent definitions (high confidence) — check your repo before applying
• settings files (high confidence) — check your repo before applying
• permission rules (high confidence) — check your repo before applying
• context and compaction settings — check your repo before applying

After you finish

Do not report this as applied to DevAgentRadar. You cannot write the visitor's loop.

Tell the human: open https://devagentradar.com/proposals/github-copilot-cli-v1-0-106-7-upgrade-copilot-cli-to-v1-0-106-7-and-set- and mark Applied, Skipped, or Failed. Proposal id: 1260a208-0771-489a-9030-5921f0a6e03c

Instructions:

1. Read the existing context files and settings for the tools in this repo.
2. Draft an explicit Git diff. Update ONLY agent harness rules or tool configuration.
3. Call out deprecated flags, obsolete habits, or changed permission boundaries.
4. Do not touch application logic.

Start with the proposed diff and say which layer and which tool's file it belongs in.