Sources: https://code.claude.com/docs/en/changelog (Claude Code 2.1.319, 2026-11-06); https://codexskills.dev/guides/codex-changelog/ (Codex CLI 0.159-0.166, checked 2026-11-04); releases.sh Codex 0.167.

Claude Code 2.1.319 items that transfer as defect classes to yoyo:
- Config shadowing: 'a config file left at the legacy name hiding your setup with no warning: Claude Code now says on stderr when a home holds two config files, and which is in use'. yoyo check (Day 253): first-found-wins chain (.yoyo.toml, ~/.yoyo.toml, ~/.config/yoyo/config.toml), never merged. Only config show lists 'Also present, not read'. config get <key> says 'not set in config file (using default)' for a key set in a shadowed file, and normal runs print nothing.
- permissions.denyInsteadOfPrompting: a tool call that would wait on a prompt is denied and the turn continues. yoyo -p and piped runs auto-approve everything (owner decision A on #1149, 2026-11-08: keep it, disclosed). An opt-in strict non-interactive mode would be a separate, opt-in question. Also, an --allow list does not narrow a -p run.
- Bash permission bypass via a crafted environment prefix that hid part of a command. yoyo hard_deny skips VAR=x and wrapper words, and matches rm anywhere in the segment. Not probed: env -S.
- A sed command skipping the permission check in accept-edits mode, and an exact ask rule refused when a broader deny covers it (deny precedence).
- MCP tasks: a long MCP tool call moves to the background and its result is reported when it finishes.
- /tasks 'Earlier in this session' row: reopen finished subagents.
Codex CLI: 0.162 managed git worktree tools; 0.163 searchable /config panel plus mid-response steering; 0.164 /presets numbered prompt slots; 0.165 built-in Vertex provider; 0.166 transcript selection and search; 0.161 /mcp login (OAuth for MCP); 0.167 bounded Code Mode output and Guardian review of exec calls.