# MAO 0.15.143

Released 2026-11-10.

## New

- **Let Codex run MAO's commands without asking.** Codex asked for approval before every `mao` call, on Windows above all. Pick "Let Codex run mao commands without asking" in the command palette and confirm, and MAO writes one rules file, `rules/mao.rules`, in Codex's config folder. It allows only the commands agents use to talk to each other and read their notes (`mao peers`, `send`, `result`, `wait`, `note read` and the like), never the commands that change your canvas, land a layer or create anything. Nothing is written until you click, and `mao hooks remove codex` deletes the file again.

## Fixes

- **Saving no longer fails with "access denied" on Windows and WSL.** When an antivirus, indexer or editor briefly held a file, saving a note, a canvas or MAO's own state could fail. MAO now retries for a moment on Windows, and on WSL folders it moves the old file aside before putting the new one in place, so nothing is lost if a step fails.
- **A task sent to a plain shell is refused straight away.** A shell reads no tasks, so the task used to sit pending forever. MAO now refuses it at once and says why: give the terminal an agent (Configure agent) to send it tasks. If a terminal is turned into a plain shell while it has tasks waiting, those tasks fail with the same reason instead of hanging.
- **Agent skills tell agents to run plain `mao`.** Every MAO terminal has `mao` first on its PATH, so agents no longer go through `$MAO_CLI`, which Codex could not match against its rules.

Source: https://trymao.dev/changelog/0.15.143