v16.5.0

What's Changed

New Features

• New zoocode target: Zoo Code, the community continuation of the archived Roo Code, is now a first-class target reusing the roo adapters' path model across rules/ignore/mcp/commands/skills/subagents, and carries the post-fork per-mode allowedMcpServers MCP allowlist through a zoocode: subagent frontmatter section by https://github.com/dyoshikawa in #2546
• Rovodev project scope: the repo-committed .rovodev/config.yml (permissions) and .rovodev/mcp.json (MCP) documented by the Bitbucket Cloud Agentic Pipelines guide are now writable and importable at project scope, and disabled MCP servers are expressed through mcp.disabledMcpServers instead of being dropped by https://github.com/dyoshikawa in #2545
• Reasonix v1.18.0 follow-up: exact Bash=<literal> permission rules are authorable via new reasonix.rawAllow/rawAsk/rawDeny override arrays (and lifted honestly on import), and Context Engine v2's nested per-directory REASONIX.md instruction files are emitted from agentsmd.subprojectPath rules and discovered on import by https://github.com/dyoshikawa in #2544
• Warp execution-profile autonomy keys: the new warp.execution_profile override authors read_files/apply_code_diffs/execute_commands/mcp_permissions/write_to_pty/ask_user_question/run_agents/computer_use, directory_allowlist and mcp_allowlist/mcp_denylist into the default execution profile — the surface migrated Warp installs actually enforce by https://github.com/dyoshikawa in #2541
• Local-root rules round-trip on import: rulesync import now reads CLAUDE.local.md / AGENTS.local.md / .qwen/QWEN.local.md back into canonical localRoot: true rules scoped to the importing tool by https://github.com/dyoshikawa in #2539
• Lenient Agent Skills interop imports: every tool scanning the cross-vendor .agents/skills/ roots now imports them skip-and-warn instead of aborting on one broken sibling, including flat-file skills by https://github.com/dyoshikawa in #2542
• OpenCode global non-root rules: global generates register non-root rules in ~/.config/opencode/opencode.json's instructions array instead of dropping them by https://github.com/dyoshikawa in #2547
• Claude Code nested skills import: nested .claude/skills/ directories (Claude Code v2.1.178+) are discovered on import — gitignore-aware, symlink-safe and lenient by https://github.com/dyoshikawa in #2555
• Committed check outputs are no longer gitignored: .cursor/BUGBOT.md and .rovodev/.review-agent.md are read by their reviewers from the committed repository, so the derived .gitignore now leaves them trackable by https://github.com/dyoshikawa in #2553

Bug Fixes

• Vibe: a wildcard allow no longer writes the exclusive enabled_tools allowlist (which silently switched off every other builtin and MCP tool); servers added via vibe mcp add survive generates; wildcard denies emit permission = "never"; and canonical categories with no Vibe builtin tool (glob, notebookedit) are skipped with a warning instead of emitting inert tables — with grep now correctly mapped as a real builtin by https://github.com/dyoshikawa in #2543 and #2549
• OpenCode/Kilo hooks: afterShellExecution was wired to the slash-command event command.executed and never fired on shell commands — both shell events now emit as tool.execute.before/after named hooks gated on the bash tool, and unsupported matchers are skipped with a warning by https://github.com/dyoshikawa in #2547
• OpenCode/Kilo instructions ownership: the instructions arrays no longer accumulate stale entries for deleted rules; rulesync owns the managed-directory subset and rebuilds it each generate by https://github.com/dyoshikawa in #2554
• Generate fails closed: a malformed shared config (e.g. .vibe/config.toml) now fails the run for the permissions and ignore features instead of exiting 0 with "All files are up to date" by https://github.com/dyoshikawa in #2550 and #2552
• Watch: file liveness identity includes creation time to survive inode reuse by https://github.com/dyoshikawa in #2534

Dependencies

• chore(deps): bump the all-dependencies group across 1 directory with 104 updates by @dependabot in #2535
• ci(deps): bump the all-actions group with 3 updates by @dependabot in #2528

Contributors

• @dyoshikawa
• @dependabot

Full Changelog: v16.4.0...v16.5.0