DevAgentRadar → Repo Harness Rule Patch

Goal: update our repository's permanent harness instructions based on this release.

Update the file that tool actually reads. Do not dump everything into one file.

• Claude Code → CLAUDE.md plus .claude/ (skills, hooks, settings, agents, commands). It does not read AGENTS.md natively; start CLAUDE.md with @AGENTS.md.
• Codex, Copilot, Cursor, Factory Droid, Grok Build, Roo Code, Goose, OpenCode, Amp, Zed, Aider → AGENTS.md.
• Gemini CLI / Antigravity → GEMINI.md. AGENTS.md only if context.fileName is set.
• Cursor glob-scoped rules → .cursor/rules/*.mdc (plain .md is ignored), not a second constitution.
• Codex MCP → .codex/config.toml, not .mcp.json.
• Copilot extra instructions → .github/copilot-instructions.md; custom agents → .github/agents/.
• Windsurf → .windsurf/rules (do not assume AGENTS.md).
• Cline → .clinerules.
• Procedures → a skill (SKILL.md). Enforcement the model must not skip → a hook. Isolated roles → subagents.
• Do not fork the same rule into three tool files.

Context

Assistant: GitHub Copilot CLI Proposal: Enable Copilot CLI /index tgrep and Windows enumeratePaths sandbox grants Summary: Copilot CLI v1.0.108-0 adds /index with managed shared tgrep indexing by default, Windows sandbox.userPolicy.filesystem.enumeratePaths grants, literal MCP env values via ${NAME}, and Autopilot Assisted Permissions that retry instead of stopping on prompts. Primary source: https://github.com/github/copilot-cli/releases/tag/v1.0.108-0

Why it matters

v1.0.108-0 changes how Copilot CLI indexes code, grants Windows sandbox access, interpolates MCP env values, and handles Autopilot permissions. Eligible repositories get managed shared tgrep indexing by default and new /index commands, so search should go through that index. Windows users can put enumerate-only directory grants in settings.json at sandbox.userPolicy.filesystem.enumeratePaths instead of broader filesystem access. Interactive sessions pass local MCP server environment values literally; use ${NAME} to reference a host environment variable. Since 1.0.106, Autopilot with Assisted Permissions no longer stops for permission prompts—the agent tries another approach and reports actions it could not take—and /permissions default asks again on the next prompt. Managed plugin assignments with state defaultEnabled install and activate by default while preserving user overrides; /mcp disable is saved across sessions. If a directory has .mcp.json, .github/mcp.json in the same directory is ignored. Concise transcript mode keeps successful command output and file diffs collapsed until expanded. Ask the CLI about its own behavior: it answers from this build's documentation and says when docs do not cover a question.

Suggested actions

1. In Copilot CLI v1.0.108-0, run /index in each eligible repository so managed shared tgrep indexing is used by default.
2. On Windows, add sandbox.userPolicy.filesystem.enumeratePaths to Copilot settings.json listing directories that should receive enumerate-only filesystem grants.
3. Update every interactive Copilot CLI MCP server env map to pass values literally; write ${NAME} wherever a host environment variable must be interpolated.
4. Use Autopilot with Assisted Permissions without waiting for permission-prompt stops (the agent retries and reports actions it could not take). Run /permissions default when you want Autopilot to ask again on the next prompt.
5. Keep a single .mcp.json per directory (.github/mcp.json is ignored if both exist). Run /mcp disable <server> to persist disable across sessions. Expect managed plugins with state defaultEnabled to install and activate unless a user override exists.

Config surfaces this release may change

• settings files (high confidence) — check your repo before applying
• MCP servers (high confidence) — check your repo before applying
• skills (high confidence) — check your repo before applying
• subagent definitions (high confidence) — check your repo before applying
• sandbox settings — check your repo before applying
• background and headless runs — check your repo before applying
• hooks — check your repo before applying

After you finish

Do not report this as applied to DevAgentRadar. You cannot write the visitor's loop.

Tell the human: open https://devagentradar.com/proposals/github-copilot-cli-v1-0-108-0-enable-copilot-cli-index-tgrep-and-windows and mark Applied, Skipped, or Failed. Proposal id: d5bd35bf-4174-4e83-9afa-e5ee2af89aca

Instructions:

1. Read the existing context files and settings for the tools in this repo.
2. Draft an explicit Git diff. Update ONLY agent harness rules or tool configuration.
3. Call out deprecated flags, obsolete habits, or changed permission boundaries.
4. Do not touch application logic.

Start with the proposed diff and say which layer and which tool's file it belongs in.