New
- Let Codex run MAO's commands without asking. Codex asked for approval before every mao call, on Windows above all. Pick "Let Codex run mao commands without asking" in the command palette and confirm, and MAO writes one rules file, rules/mao.rules, in Codex's config folder. It allows only the commands agents use to talk to each other and read their notes (mao peers, send, result, wait, note read and the like), never the commands that change your canvas, land a layer or create anything. Nothing is written until you click, and mao hooks remove codex deletes the file again.
Fixes
- Saving no longer fails with "access denied" on Windows and WSL. When an antivirus, indexer or editor briefly held a file, saving a note, a canvas or MAO's own state could fail. MAO now retries for a moment on Windows, and on WSL folders it moves the old file aside before putting the new one in place, so nothing is lost if a step fails.
- A task sent to a plain shell is refused straight away. A shell reads no tasks, so the task used to sit pending forever. MAO now refuses it at once and says why: give the terminal an agent (Configure agent) to send it tasks. If a terminal is turned into a plain shell while it has tasks waiting, those tasks fail with the same reason instead of hanging.
- Agent skills tell agents to run plain mao. Every MAO terminal has mao first on its PATH, so agents no longer go through $MAO_CLI, which Codex could not match against its rules.