v9.3.0
Immutable
release. Only release title and notes can be modified.
What's Changed
New Features
- Support an OpenCode-scoped permission override key so authors can express OpenCode-only permission settings (#2148)
- Allow authoring Cline
allowRedirectsvia aclinepermission override (#2167) - Add a
kilooverride namespace for Kilo-only permission keys (#2168) - Add a
claudecodeoverride fordefaultMode/additionalDirectories(#2169) - Map Kiro grep/glob permission categories to
toolsSettings(#2170) - Add a
vibeoverride for per-toolsensitive_patterns(#2172) - Add a
cursoroverride forapprovalMode/sandbox(#2173) - Add a
qwencodeoverride for tools/security autonomy keys (#2143) - Add a
reasonixoverride for[sandbox]/[agent]plan-mode settings (#2175) - Add a
factorydroidoverride and round-tripcommandBlocklist(#2176) - Support a Warp-scoped permission override key (#2177)
- Emit Grok
[permission]allow/deny/ask rule arrays (#2178) - Add a
junieoverride and downgrade deny to ask (#2179) - Map Hermes per-server MCP tool filters (
tools.include/tools.exclude) (#2162) - Map deepagents
preToolUse/postToolUsehooks totool.use/tool.result(#2161) - Emit Devin global skills to
~/.config/devin/skills(#2163)
Bug Fixes
- Keep the all-tools wildcard in the shared block on OpenCode import (#2148)
- Emit Hermes deny/webfetch natively, enable
website_blocklist, and replace the round-trip blob wholesale on merge (#2166) - Warn on
kilo-override deny drops and drop a redundant cast (#2168) - Drop empty shared categories on Vibe import (#2172)
- Only import a plain-object Cursor sandbox (#2173)
- Resolve Grok entry collapse collisions and preserve unmodeled entries (#2178)
- Do not fabricate Junie
defaultBehavioron a fresh generate (#2179) - Stop emitting Subagent events Goose does not support and drop unknown Goose event keys on import (#2165)
- Accept a record-of-specs
mcpServersfor Qwen Code subagents (#2164) - Map the Codex MCP
oauthclientIdto snake_caseclient_id(#2159)
Refactoring
- Merge the Warp override verbatim on export (#2177)
- Reuse
omitPrototypePollutionKeysand add MCP oauth round-trip tests (#2159)