Detect additional third-party coding agents by BagToad · Pull Request #13722 · cli/cli

BagToad · 2026-06-24T22:57:57Z

Description

Extends agent detection so the User-Agent header can identify more third-party coding agents driving gh. Adds nine new agents and an extra environment-variable signal for one existing one.

Key Points

New agents detected: antigravity, augment-cli, replit, goose, cowork, cursor, cursor-cli, kiro, and pi. One existing agent gains an extra signal: claude-code also matches CLAUDE_CODE.

Detection order encodes confidence. AI_AGENT still wins, followed by agent-specific variables. Two signals are deliberately low-confidence and ranked accordingly:

REPL_ID is present throughout any Replit environment, not only when a Replit agent drives the CLI, so it is annotated as broad in the code.
GOOSE_PROVIDER only means Goose is configured as a model provider, not that it is running, so Goose is checked absolutely last and any stronger signal wins.

The single-source block now matches precisely instead of loosely: kiro is an exact TERM_PROGRAM match, and pi is anchored to a path boundary (/.pi/agent, or the Windows \.pi\agent) so an incidental substring cannot trigger it.

We considered a Devin signal and dropped it. The only reliable marker is the existence of a /opt/.devin directory, and this detector is intentionally environment-only with no filesystem access. The environment-variable alternatives (for example an EDITOR substring) could produce false positives, and Devin's developer-terminal footprint is small, so a noisy signal was not worth the telemetry pollution.

Notes for reviewers

Two files change. Start in the agents detector: the constant block lists the new identifiers, and detectWith runs the ordered checks top to bottom, returning on first match. Read it straight down to see the precedence. Then the detector tests add table cases for every new agent and signal, plus the precedence and negative cases (exact kiro, path-boundary pi, Goose losing to stronger signals).

First-party documentation for each signal lives inline next to its check, or is marked // No first-party docs where none exists.

Add detection for antigravity, augment-cli, replit, goose, cowork, cursor, cursor-cli, kiro, and pi, plus extra signals for opencode and claude-code. Low-confidence signals (Replit, Goose) and single-source matches are checked last so stronger signals win. Co-authored-by: Copilot <[email protected]>

github-actions · 2026-06-24T22:58:22Z

Thanks for your pull request! Unfortunately, it doesn't meet the requirements for review:

No linked help wanted issue found in PR description

Please update your PR to address the above. This PR will be automatically closed in 4 days if these requirements are not met.

Full contribution requirements

Include a detailed description of what this PR does
Link to an issue with the help wanted label (use Fixes #123 or Closes #123)

babakks

LGTM

OPENCODE_CALLER and OPENCODE_CLIENT are set on the environment that launches opencode, such as the VS Code extension's terminal, so they can be present when a person rather than the agent runs gh. Detect only OPENCODE, which opencode sets on its own process. Co-authored-by: Copilot <[email protected]>

The Pi PATH check only matched the POSIX separator. Also match the Windows form so detection works there, with the caveat that Pi's Windows layout is unconfirmed. Co-authored-by: Copilot <[email protected]>

Co-authored-by: Copilot <[email protected]>

Copilot

Pull request overview

Extends internal/agents detection logic so gh can identify additional third-party coding agents (via environment-variable signals) and encode a precedence order for conflicting signals, with accompanying table-driven tests.

Changes:

Adds new AgentName constants and detection checks for additional third-party agents (plus new Claude Code and Cursor signals).
Introduces “single-source” detection checks (e.g., exact TERM_PROGRAM match for Kiro, PATH-based signal for Pi) and places Goose’s provider signal last.
Expands TestDetectWith with cases for new agents, precedence, and negative matches.

Show a summary per file

File	Description
internal/agents/detect.go	Adds new agent identifiers and ordered environment-based detection logic.
internal/agents/detect_test.go	Adds table-driven tests for new detectors and precedence/negative scenarios.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 2/2 changed files
Comments generated: 5

+	// Replit
+	// REPL_ID is present throughout any Replit environment, not only when a
+	// Replit agent is driving the CLI, so it is a broad, low-confidence signal.
+	// REPL_ID: https://github.com/replit/go-replidentity/blob/2966ea2d227d572f6054ee8f077ad16a1be02663/examples/extract.go#L25
+	if isSet("REPL_ID") {


OPENCODE_CALLER and OPENCODE_CLIENT name the client that launched opencode rather than the running agent, so a comment records why only OPENCODE is checked. Co-authored-by: Copilot <[email protected]>

This MR contains the following updates: | Package | Update | Change | |---|---|---| | [cli/cli](https://github.com/cli/cli) | minor | `v2.94.0` → `v2.96.0` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>cli/cli (cli/cli)</summary> ### [`v2.96.0`](https://github.com/cli/cli/releases/tag/v2.96.0): GitHub CLI 2.96.0 [Compare Source](cli/cli@v2.95.0...v2.96.0) #### Security A security vulnerability has been identified, and fixed, that could allow command execution on a user's computer when connecting to a malicious Codespace via `gh codespace jupyter`. Users of `gh codespace jupyter` are advised to update gh to version v2.96.0 as soon as possible. For more information see: <GHSA-8cg3-r6g9-fpg2> #### Download release assets without authentication `gh release download` now works against public repositories without authentication, matching `gh extension install`. A token is still used when one is present: ```shell # Download assets from a public repository, no login required gh release download v2.96.0 --repo cli/cli ``` #### What's Changed ##### ✨ Features - Allow `gh release download` without authentication on public repositories by [@BagToad](https://github.com/BagToad) in [#13723](cli/cli#13723) - Detect additional third-party coding agents by [@BagToad](https://github.com/BagToad) in [#13722](cli/cli#13722) - Support `antigravity-cli` and `antigravity2.0` in `gh skill` by [@BagToad](https://github.com/BagToad) in [#13784](cli/cli#13784) ##### 🐛 Fixes - fix: show checks summary when all checks were cancelled by [@s3onghyun](https://github.com/s3onghyun) in [#13679](cli/cli#13679) - fix(skills): install universal agent to `~/.agents/skills` by [@toller892](https://github.com/toller892) in [#13681](cli/cli#13681) - fix(skills): honor `--dir` without agent prompt by [@happysnaker](https://github.com/happysnaker) in [#13766](cli/cli#13766) - Fix concurrent map writes in codespace port forwarding by [@williammartin](https://github.com/williammartin) in [#13313](cli/cli#13313) - Use `int64` for GitHub database IDs by [@williammartin](https://github.com/williammartin) in [#13403](cli/cli#13403) ##### 📚 Docs & Chores - Pin reusable triage workflows to a commit SHA by [@BagToad](https://github.com/BagToad) in [#13705](cli/cli#13705) - Add security disclosure guidance to `AGENTS.md` by [@BagToad](https://github.com/BagToad) in [#13720](cli/cli#13720) - Clarify `--clone` boolean flag behaviour in `gh repo fork` help by [@BagToad](https://github.com/BagToad) in [#13786](cli/cli#13786) - Fix flaky `TestHuhPrompterMultiSelectWithSearchPersistence` on slow architectures by [@pdostal](https://github.com/pdostal) in [#13675](cli/cli#13675) - docs(search): add examples for multiple qualifiers by [@happysnaker](https://github.com/happysnaker) in [#13756](cli/cli#13756) - docs: fix broken anchor link in release-process-deep-dive by [@patrickwehbe](https://github.com/patrickwehbe) in [#13688](cli/cli#13688) - docs: fix broken install command and link/grammar errors by [@patrickwehbe](https://github.com/patrickwehbe) in [#13690](cli/cli#13690) - docs: fix duplicated word in primer README by [@s3onghyun](https://github.com/s3onghyun) in [#13677](cli/cli#13677) #####

Dependencies - chore(deps): bump github.com/microsoft/dev-tunnels from 0.1.19 to 0.1.27 by [@dependabot](https://github.com/dependabot) in [#13708](cli/cli#13708) - chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by [@dependabot](https://github.com/dependabot) in [#13703](cli/cli#13703) - chore(deps): bump github.com/google/go-containerregistry from 0.21.6 to 0.21.7 by [@dependabot](https://github.com/dependabot) in [#13702](cli/cli#13702) - chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by [@dependabot](https://github.com/dependabot) in [#13740](cli/cli#13740) - chore(deps): bump actions/attest from 4.1.0 to 4.1.1 by [@dependabot](https://github.com/dependabot) in [#13754](cli/cli#13754) - chore(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 by [@dependabot](https://github.com/dependabot) in [#13759](cli/cli#13759) - chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by [@dependabot](https://github.com/dependabot) in [#13779](cli/cli#13779) #### New Contributors - [@patrickwehbe](https://github.com/patrickwehbe) made their first contribution in [#13688](cli/cli#13688) - [@s3onghyun](https://github.com/s3onghyun) made their first contribution in [#13679](cli/cli#13679) - [@toller892](https://github.com/toller892) made their first contribution in [#13681](cli/cli#13681) - [@happysnaker](https://github.com/happysnaker) made their first contribution in [#13756](cli/cli#13756) **Full Changelog**: <cli/cli@v2.95.0...v2.96.0> ### [`v2.95.0`](https://github.com/cli/cli/releases/tag/v2.95.0): GitHub CLI 2.95.0 [Compare Source](cli/cli@v2.94.0...v2.95.0) #### Read repository files and directories with `gh repo read-file` and `gh repo read-dir` Two new preview commands read repository contents without cloning: ```shell # Read a single file to stdout gh repo read-file README.md --repo cli/cli # Read from a specific branch, tag, or commit gh repo read-file go.mod --ref v2.94.0 --repo cli/cli # Write a file to disk (use --clobber to overwrite) gh repo read-file README.md --output ./README.md --repo cli/cli # List the entries in a directory gh repo read-dir script --repo cli/cli ``` Both commands default to the repository's default branch, accept `--ref` to target any branch, tag, or commit, and support `--json`, `--jq`, and `--template` for scripting. This makes it easy for agents and automation to inspect a repo without a full checkout. > \[!NOTE] > `gh repo read-file` and `gh repo read-dir` are in preview and subject to change without notice. #### What's Changed ##### ✨ Features - feat: add `repo read-file` and `repo read-dir` by [@babakks](https://github.com/babakks) in [#13580](cli/cli#13580) - feat(skills): list available skills when install runs non-interactively by [@SamMorrowDrums](https://github.com/SamMorrowDrums) in [#13548](cli/cli#13548) - Support custom CLAUDE\_CONFIG\_DIR in install by [@tommaso-moro](https://github.com/tommaso-moro) in [#13523](cli/cli#13523) ##### 🐛 Fixes - fix(skills): stage updates in a temp dir and swap in-place by [@SamMorrowDrums](https://github.com/SamMorrowDrums) in [#13449](cli/cli#13449) ##### 📚 Docs & Chores - Make filtering by bot authors more discoverable by [@BagToad](https://github.com/BagToad) in [#13642](cli/cli#13642) - docs(discussion): polish help docs by [@babakks](https://github.com/babakks) in [#13632](cli/cli#13632) - Bump Go in devcontainer by [@spenserblack](https://github.com/spenserblack) in [#13674](cli/cli#13674) #####

Dependencies - chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#13640](cli/cli#13640) - chore(deps): bump charm.land/lipgloss/v2 from 2.0.3 to 2.0.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#13663](cli/cli#13663) - chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#13661](cli/cli#13661) - chore(deps): bump github/codeql-action from 4.36.1 to 4.36.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#13619](cli/cli#13619) - chore(deps): bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#13662](cli/cli#13662) - chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#13641](cli/cli#13641) **Full Changelog**: <cli/cli@v2.94.0...v2.95.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

github-actions Bot added external pull request originating outside of the CLI core team needs-triage needs to be reviewed labels Jun 24, 2026

BagToad marked this pull request as ready for review June 24, 2026 22:58

BagToad requested a review from a team as a code owner June 24, 2026 22:58

BagToad requested review from babakks and Copilot and removed request for Copilot June 24, 2026 22:58

github-actions Bot added unmet-requirements and removed needs-triage needs to be reviewed labels Jun 24, 2026

BagToad removed the unmet-requirements label Jun 24, 2026

babakks approved these changes Jun 25, 2026

View reviewed changes

Comment thread internal/agents/detect.go Outdated

Comment thread internal/agents/detect.go

BagToad and others added 3 commits June 25, 2026 08:41

fix(agents): match Windows path separators for Pi detection

12fba3e

The Pi PATH check only matched the POSIX separator. Also match the Windows form so detection works there, with the caveat that Pi's Windows layout is unconfirmed. Co-authored-by: Copilot <[email protected]>

style(agents): use hyphens instead of em dashes in comments

6fe463c

Co-authored-by: Copilot <[email protected]>

Copilot AI review requested due to automatic review settings June 25, 2026 14:42

Copilot started reviewing on behalf of BagToad June 25, 2026 14:43 View session

Copilot AI reviewed Jun 25, 2026

View reviewed changes

docs(agents): note why OpenCode caller/client vars are not detected

1d4ca33

OPENCODE_CALLER and OPENCODE_CLIENT name the client that launched opencode rather than the running agent, so a comment records why only OPENCODE is checked. Co-authored-by: Copilot <[email protected]>

BagToad enabled auto-merge (squash) June 25, 2026 15:12

BagToad merged commit 561d9f9 into cli:trunk Jun 25, 2026
18 checks passed

BrewTestBot mentioned this pull request Jul 2, 2026

gh 2.96.0 Homebrew/homebrew-core#291107

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Detect additional third-party coding agents#13722

Detect additional third-party coding agents#13722
BagToad merged 5 commits into
cli:trunkfrom
BagToad:bagtoad/extend-3p-agent-detection

BagToad commented Jun 24, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 24, 2026

Uh oh!

babakks left a comment

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

BagToad commented Jun 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Key Points

Notes for reviewers

Uh oh!

github-actions Bot commented Jun 24, 2026

Uh oh!

babakks left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

BagToad commented Jun 24, 2026 •

edited

Loading