agnostic-ai v0.65.0: a Windsurf agent granting Write no longer also gets edit

What to do #

1. Upgrade, then run agnostic-ai sync and read theallowed-tools diff on any Windsurf agent or permission rule that grantsWrite . It changes fromedit towrite , which is narrower than what the previous release wrote (one sync, then a diff review).
2. If you sync both claude andamp , decide whether Amp should keep your skills twice. Setx-amp.amp.skills.disableClaudeCodeSkills on a settings spec to stop it (one key in one spec).

Nothing else needs action.

What changed #

• A Windsurf agent or permission rule granting only Write now emits Devin'swrite tool instead ofedit , so it no longer grants file editing nobody asked for (#1022).
• Codex agents map the portable effort ontomodel_reasoning_effort , andx-codex.model_reasoning_effort still wins when both are set (#1016).
• import keeps skill and agent frontmatter a target has nowhere to put, so a sync followed by an import stops deletingargument-hint ,allowed-tools ,tools , andeffort from your specs.

Everything else is in the GitHub release notes.

Upstream CLI and model news #

• Devin CLI v3000.11.1 (2026-09-21): subagent profiles, skills, and permission rules recognize awrite tool distinct fromedit , so the two can finally be granted separately. This release mapsWrite onto it. State: supported.changelog
• Kilo Code v7.7.0 (2026-09-15): session goals keep one objective in focus across turns, gated bypermission.goal andpermission.goal_report in the project'skilo.jsonc . Both keys reach that file today throughx-kilo.permission , with no change needed here. State: target extension.goals
• Amp (2026-09-22): the settings schema addedamp.skills.disableClaudeCodeSkills ,amp.skills.disableGlobalAgentsSkills , andamp.skills.path , which control whether Amp also reads Claude Code's and the global agent skill directories. Reachable throughx-amp on a settings spec. State: target extension.settings schema