@ordewell/core 0.4.3 → 0.4.5

package/dist/{ITerminalRunner-Bbpe8uts.d.ts → ITerminalRunner-D7DwHYSg.d.ts}

@@ -439,8 +439,22 @@ interface ResolveContext {
     /** All variant ids the assigned model offers — lets {{opencodeVariantConfig}} disable the non-chosen ones. */
     modelVariants?: string[];
     mode: string;
-    /** When true, resolve {{if headless}} blocks and the {{feature:headless}} token. */
+    /**
+     * Autonomy axis: when true, resolve {{if headless}} blocks and the
+     * {{feature:headless}} token so the agent never stops to ask for permission.
+     * True for every orchestrated task run — nobody is watching the terminal on
+     * Ordewell's behalf — independently of the session *shape* below.
+     */
     headless?: boolean;
+    /**
+     * Session-shape axis: true when the runner is launched onto a real TTY the
+     * user can attach to (a tmux window, a VS Code pseudoterminal), so the
+     * runner's own TUI should come up rather than its non-interactive
+     * subcommand. Defaults to `!headless` for callers that predate the split.
+     */
+    interactive?: boolean;
+    /** The task's working directory — needed by runners whose autonomy flags name a path. */
+    cwd?: string;
 }
 interface RunnerInvocation {
     command: string;

package/dist/{ITerminalRunner-D8Bf-HD4.d.mts → ITerminalRunner-YMVsbfem.d.mts}

@@ -439,8 +439,22 @@ interface ResolveContext {
     /** All variant ids the assigned model offers — lets {{opencodeVariantConfig}} disable the non-chosen ones. */
     modelVariants?: string[];
     mode: string;
-    /** When true, resolve {{if headless}} blocks and the {{feature:headless}} token. */
+    /**
+     * Autonomy axis: when true, resolve {{if headless}} blocks and the
+     * {{feature:headless}} token so the agent never stops to ask for permission.
+     * True for every orchestrated task run — nobody is watching the terminal on
+     * Ordewell's behalf — independently of the session *shape* below.
+     */
     headless?: boolean;
+    /**
+     * Session-shape axis: true when the runner is launched onto a real TTY the
+     * user can attach to (a tmux window, a VS Code pseudoterminal), so the
+     * runner's own TUI should come up rather than its non-interactive
+     * subcommand. Defaults to `!headless` for callers that predate the split.
+     */
+    interactive?: boolean;
+    /** The task's working directory — needed by runners whose autonomy flags name a path. */
+    cwd?: string;
 }
 interface RunnerInvocation {
     command: string;

package/dist/index.d.mts

@@ -1,7 +1,7 @@
 import { h as RunnerId, c as PlanStatus, L as LegacyPlanState, d as ResearchProgress, a as DiscoveredModel, T as Task, R as ResearchLogEntry, C as ConversationMessage, n as TaskSnapshot, Q as QueuedMessage, A as ActiveTaskSession, g as ResearchToolType, u as Verdict, e as ResearchStep, b as PlanState } from './Task-1NwmUImI.mjs';
 export { D as DiscoveredMode, M as Message, P as PlanModificationWarnings, f as ResearchStepOutcome, S as StreamEvent, i as StreamStepEvent, j as StreamThinkingEvent, k as TaskMode, l as TaskModelAssignment, m as TaskOutputSummary, o as TaskStatus, p as TaskType, q as ThinkingBlock, U as UserPromptEntry, r as UserStep, V as ValidationCheck, s as ValidationContext, t as ValidationResult, v as VerificationCheck, w as addTaskToPlan, x as createEmptyPlan, y as createTask, z as emptyWarnings, B as flattenTasks, E as migrateLegacyPlan, F as migratePlanState, G as migrateTask, H as removeTaskFromPlan, I as renumberTasks, J as updateTaskInPlan, K as validateModifiedPlan, N as warningsText } from './Task-1NwmUImI.mjs';
-import { n as IFileSystem, I as IApproval, R as ReadFileOpts, T as ToolOutcome, k as GrepOptions, j as GlobOptions, i as FindSymbolOptions, f as ApprovalRequest, m as IConfig, A as AiProvider, y as ProviderModelLists, c as ApprovalMode, q as ITerminalSession, p as ITerminalRunner, J as RunnerRegistry, s as OrchestratorOption, b as ApprovalKind, g as ApprovalSource, E as RunnerInvocation, o as IPluginStore, H as RunnerPluginManifest, B as ResolveContext } from './ITerminalRunner-D8Bf-HD4.mjs';
-export { a as AllProviderModels, d as ApprovalPolicy, e as ApprovalPolicyOptions, C as CatalogModel, D as DENY_ALL, h as DiscoveryCommand, F as FetchAllProviderModelsOptions, G as GREP_DEFAULT_HEAD_LIMIT, l as GrepOutputMode, M as ModelCatalog, r as ModelShortcut, O as ORCHESTRATOR_SHORTCUTS, P as PluginEntry, t as PluginFeatures, u as PluginMode, v as PluginModelDiscovery, w as PluginRunnerDef, x as ProviderCredentialSource, z as ProviderModelsResult, S as SEARCH_EXCLUSIONS, K as collectProviderCredentials, L as enabledRunners, N as fetchAllProviderModels, Q as knownModelId, U as resolveModelShortcut, V as resolveProvider, W as toOrchestratorOptions } from './ITerminalRunner-D8Bf-HD4.mjs';
+import { n as IFileSystem, I as IApproval, R as ReadFileOpts, T as ToolOutcome, k as GrepOptions, j as GlobOptions, i as FindSymbolOptions, f as ApprovalRequest, m as IConfig, A as AiProvider, y as ProviderModelLists, c as ApprovalMode, q as ITerminalSession, p as ITerminalRunner, J as RunnerRegistry, s as OrchestratorOption, b as ApprovalKind, g as ApprovalSource, E as RunnerInvocation, o as IPluginStore, H as RunnerPluginManifest, B as ResolveContext } from './ITerminalRunner-YMVsbfem.mjs';
+export { a as AllProviderModels, d as ApprovalPolicy, e as ApprovalPolicyOptions, C as CatalogModel, D as DENY_ALL, h as DiscoveryCommand, F as FetchAllProviderModelsOptions, G as GREP_DEFAULT_HEAD_LIMIT, l as GrepOutputMode, M as ModelCatalog, r as ModelShortcut, O as ORCHESTRATOR_SHORTCUTS, P as PluginEntry, t as PluginFeatures, u as PluginMode, v as PluginModelDiscovery, w as PluginRunnerDef, x as ProviderCredentialSource, z as ProviderModelsResult, S as SEARCH_EXCLUSIONS, K as collectProviderCredentials, L as enabledRunners, N as fetchAllProviderModels, Q as knownModelId, U as resolveModelShortcut, V as resolveProvider, W as toOrchestratorOptions } from './ITerminalRunner-YMVsbfem.mjs';
 import { R as RunnerModeInfo, b as PlanParseError } from './parsing-xpozY5ac.mjs';
 export { M as ManifestLookup, P as PLAN_ENVELOPE_KEY, a as PartialPlanTask, T as TASK_OPS_ENVELOPE_KEY, c as buildModeGuide, d as checkDepsResolve, e as checkImmutableLog, f as checkInProgress, g as checkNoCycles, h as checkUniqueIds, i as escapeControlCharsInStrings, j as extractJsonObject, k as extractObjectWithBalance, l as extractObjectsWithKey, m as filteredBuildModes, n as looksLikePlanAttempt, p as parsePartialPlan, o as parsePlanJson, r as resolveDefaultMode, q as resolveTaskMode, s as runnerModesFrom, t as stripModelNoise, u as stripTrailingCommas, v as validatePlanModification } from './parsing-xpozY5ac.mjs';
 import { T as TaskOp } from './plan-utils-nfHKSbd3.mjs';
@@ -789,8 +789,14 @@ declare class HeadlessRunner extends AbstractRunner<HeadlessSession> {
     private hasScriptCmd;
     private resolvePath;
     private launchDeps;
-    /** Session shape when the caller names none; the VS Code runner overrides it to interactive. */
-    protected readonly defaultHeadless: boolean;
+    /**
+     * Session shape: a piped subprocess is not a terminal, so runners get their
+     * non-interactive subcommand. The VS Code runner owns a pseudoterminal and
+     * overrides this to true. Autonomy is a separate axis (see `ResolveContext`)
+     * and stays on either way — no surface has a human answering permission
+     * prompts on the orchestrator's behalf.
+     */
+    protected readonly defaultInteractive: boolean;
     constructor(deps?: HeadlessRunnerDeps);
     protected createSession(id: string, taskId: string): HeadlessSession;
     /** Everything up to, but not including, spawning — so a surface that owns its own child reaches the same decisions. */
@@ -2706,6 +2712,8 @@ declare function buildRunnerInvocation(opts: {
     modelVariants?: string[];
     mode?: RunnerMode;
     headless?: boolean;
+    interactive?: boolean;
+    cwd?: string;
     registry: RunnerRegistry;
 }): RunnerInvocation;
 
@@ -2744,6 +2752,7 @@ interface TmuxRunnerDeps {
     resolvePath?: () => Promise<string>;
     pollIntervalMs?: number;
     logDir?: string;
+    clipboardCommand?: () => string | null;
 }
 declare class TmuxSession extends AbstractTerminalSession {
     private tmuxSession;
@@ -2795,6 +2804,7 @@ declare class TmuxRunner extends AbstractRunner<TmuxSession> {
     private resolvePath;
     private pollIntervalMs;
     private logDir;
+    private clipboardCommand;
     /** Retries get a freshly named window so a failed attempt's output stays inspectable. */
     private attempts;
     private ready;
@@ -2810,14 +2820,17 @@ declare class TmuxRunner extends AbstractRunner<TmuxSession> {
     private tmux;
     private createFreshSession;
     /**
-     * Makes an attached runner terminal scrollable with the mouse wheel and
-     * Page Up/Down. A fresh tmux session ships with `mouse off`, a 2000-line
-     * scrollback, and no PageUp binding — none of which lets a user page back
-     * through a finished task's output, which is the whole point of opening its
-     * window. Scoping is harmless: the daemon owns a private socket
-     * (`tmuxSocketName`), so these server-wide options touch nothing but its
-     * own session. Best-effort so an ancient or stripped tmux cannot stop tasks
-     * from spawning — the session still works without the scroll comforts.
+     * Gives an attached runner terminal wheel/PageUp scrolling over a deep
+     * scrollback, and a mouse selection that reaches the system clipboard — none
+     * of which a default tmux session does. Server-wide scoping is harmless: the
+     * daemon owns a private socket (`tmuxSocketName`).
+     *
+     * `mouse on` is what costs the emulator's own drag-select, so tmux must hand
+     * the selection back out itself: via a clipboard binary when there is one,
+     * and via OSC 52 (`set-clipboard`) for what that cannot cover, such as
+     * viewing over SSH. Naming the binary on the binding as well as in
+     * `copy-command` keeps drag-to-copy working on tmux older than 3.2, which has
+     * no `copy-command`.
      */
     private configureScrolling;
     /**
@@ -2962,6 +2975,15 @@ declare function tmuxWindowName(taskId: string, planSessionId?: string): string;
 type ProbeFn = () => void;
 /** Feature-detects tmux the same way `HeadlessRunner` detects `script`. */
 declare function hasTmux(probe?: ProbeFn): boolean;
+type HasBinFn = (bin: string) => boolean;
+/**
+ * Shell command tmux should pipe a copy-mode selection into, so selecting text
+ * in a task's terminal puts it on the *system* clipboard rather than in a tmux
+ * paste buffer no other application can read. Preferred over tmux's OSC 52
+ * bridge, which plenty of emulators (VTE before 0.76, xterm without
+ * `allowWindowOps`) drop on the floor.
+ */
+declare function clipboardCopyCommand(hasBin?: HasBinFn, platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv): string | null;
 
 declare class FsPluginStore implements IPluginStore {
     getUserPluginsDir(): string;
@@ -3022,4 +3044,4 @@ declare function sanitizeSlug(raw: string): string;
 /** Save the PRD to `<workspace>/.scratch/<slug>/PRD.md` (to-prd native convention). */
 declare function savePrdMarkdown(workspace: string, slug: string, markdown: string): string;
 
-export { ALL_PROVIDERS, AUTO_COMMANDS, AbstractRunner, AbstractTerminalSession, ActiveTaskSession, type AgentAdapter, type AgentAdapterFactory, type AgentEvent, type AgentProcessDeps, type AgentStartOptions, AiProvider, ApprovalKind, ApprovalMode, ApprovalRequest, ApprovalSource, BaseAiService, BaseConfig, BaseFileSystem, CLAUDE_CODE_MANIFEST, CLI_PROVIDERS, CMD_EXE_MAX_COMMAND_LINE, CORE_PLANNER_PROMPT, type CappedRows, type CheckpointListener, ClaudeCodeAdapter, CliAgentAiService, type CliAgentAiServiceDeps, CodexAdapter, type CommandClassification, CommandLineTooLongError, type CommandTier, type ComposeOptions, ConsoleLogger, ContextCollector, ConversationMessage, type ConversationRequest, type ConversationTurn, DiscoveredModel, EmbeddedNewlineError, EnvConfig, type ExecFileFn, type ExecImpl, FindSymbolOptions, FsPluginStore, GIT_READONLY_SUBCOMMANDS, GeminiService, GlobOptions, type GrepInvocation, GrepOptions, HeadlessRunner, type HeadlessRunnerDeps, HeadlessSession, type IAiService, IApproval, IConfig, IFileSystem, type ILogger, type INotification, IPluginStore, ITerminalRunner, ITerminalSession, JSON_REPAIR_INSTRUCTION, type KillTreeDeps, type LaunchDeps, type LaunchPlan, LegacyPlanState, LineBuffer, type MappedTool, ModelResolver, type ModelResolverDeps, type ModifyPlanRequest, type NotificationAction, OPENCODE_MANIFEST, OpenAiService, OpenCodeAdapter, type OrchestratorObserver, OrchestratorOption, PROVIDER_DETECT_PRIORITY, PROVIDER_LABEL, PROVIDER_PRIORITY, PROVIDER_SHORT_LABEL, type PendingApproval, PendingApprovals, type PendingApprovalsOptions, PlanParseError, type PlanRequest, PlanState, PlanStatus, PlanStore, Planner, type PlannerReplyClassification, type PlannerRuntimeToggles, type PrdBlock, type PreparedLaunch, type PriorOutput, type ProbeFn, ProviderModelLists, type ProviderRegistration, QueuedMessage, REFUSED_COMMANDS, ReadFileOpts, type RepairLoopOpts, type RepairVerdict, type ResearchChat, ResearchLogEntry, ResearchProgress, type ResearchShell, type ResearchShellDeps, ResearchStep, ResearchToolType, type ResearchTurn, ResolveContext, type RunnerCatalog, RunnerId, RunnerInstallation, RunnerInvocation, type RunnerMode, RunnerModeInfo, RunnerPluginManifest, RunnerRegistry, type RunnerSpawnOptions, STATE_DIR, SYMBOL_LANGUAGES, type SerializedPlan, type SerializedTask, type SerializedTaskStatus, Session, type SessionBroadcaster, type SessionData, type SessionDeps, type SessionMessage, type SessionMeta, type SessionPlanner, type SessionRuntimeSettings, SettingsService, type ShellDialect, type SpawnSpec, StdioAgentAdapter, TRUNCATED_PLAN_REPAIR_INSTRUCTION, Task, TaskOp, TaskOrchestrator, TaskSnapshot, TmuxRunner, type TmuxRunnerDeps, type ToolCall, ToolOutcome, type ToolResult, type UserSettings, Verdict, VerdictEngine, type VerdictListener, WINDOWS_MAX_COMMAND_LINE, applyHeadLimit, augmentPromptWithPriorOutputs, augmentedPath, buildConversationSystemPrompt, buildFallbackGrepArgs, buildGlobArgs, buildGrepArgs, buildMergePrompt, buildModifyDuringExecutionPrompt, buildModifyPlanPrompt, buildPlanWithResults, buildResearchPrompt, buildResearchToolsPrompt, buildRunnerInvocation, buildShellInvocation, buildSplitPrompt, buildSubagentSystemPrompt, clampThinkingEffort, classifyCommand, classifyPlannerReply, clearAugmentedPathCache, clearResearchShellCache, clearState, coerceAssignments, collectDirectDependencyOutputs, composeAugmentedPrompt, configuredProviders, createAiService, defaultLogger, definitionPattern, deleteSession, discoverGeminiModels, effectiveAllowlist, ensureDir, executionLogBlock, executionSummary, extractPrdBlock, filterFallbackByAnchoredInclude, filterModelsForPrompt, formatSearchOutput, generatePlanWithRepair, getLatestSession, getProviderMeta, getSettingsPath, getStateDir, grantScopeFor, hasTmux, includeGlobFor, isCliProvider, isOpenAiProvider, killTree, languageForId, listSessions, loadSession, loadSessionPlanState, loadState, mapAgentTool, modelContextBlock, modifyValidationFeedback, normalizeAgentArgs, normalizeGeminiModel, pendingEditRulesBlock, planDirectLaunch, planShellLaunch, posixShellQuote, prefixModelId, providerForRunner, reEmitPlanPrompt, reEmitTaskOpsPrompt, referencePattern, renderPlanMap, renderPriorOutputs, repairLoop, researchShellWarning, researchToolsPath, resolveArgs, resolveProviderFromPrefix, resolveResearchShell, resolveWithin, retargetTaskRunner, runnerAssignment, runnerForProvider, sanitizeSlug, savePrdMarkdown, saveSession, saveState, serializePlan, serializeTask, serializeTaskStatus, sessionRuntimeSettings, stateExists, stripAnsi, stripModelPrefix, summarizeOutput, taskOpsRejectedPrompt, tmuxSessionName, tmuxSocketName, tmuxWindowName, truncatedPlanReEmitPrompt, wellKnownBinDirs, windowsCommandLine, withPath, wrapWithPty };
+export { ALL_PROVIDERS, AUTO_COMMANDS, AbstractRunner, AbstractTerminalSession, ActiveTaskSession, type AgentAdapter, type AgentAdapterFactory, type AgentEvent, type AgentProcessDeps, type AgentStartOptions, AiProvider, ApprovalKind, ApprovalMode, ApprovalRequest, ApprovalSource, BaseAiService, BaseConfig, BaseFileSystem, CLAUDE_CODE_MANIFEST, CLI_PROVIDERS, CMD_EXE_MAX_COMMAND_LINE, CORE_PLANNER_PROMPT, type CappedRows, type CheckpointListener, ClaudeCodeAdapter, CliAgentAiService, type CliAgentAiServiceDeps, CodexAdapter, type CommandClassification, CommandLineTooLongError, type CommandTier, type ComposeOptions, ConsoleLogger, ContextCollector, ConversationMessage, type ConversationRequest, type ConversationTurn, DiscoveredModel, EmbeddedNewlineError, EnvConfig, type ExecFileFn, type ExecImpl, FindSymbolOptions, FsPluginStore, GIT_READONLY_SUBCOMMANDS, GeminiService, GlobOptions, type GrepInvocation, GrepOptions, type HasBinFn, HeadlessRunner, type HeadlessRunnerDeps, HeadlessSession, type IAiService, IApproval, IConfig, IFileSystem, type ILogger, type INotification, IPluginStore, ITerminalRunner, ITerminalSession, JSON_REPAIR_INSTRUCTION, type KillTreeDeps, type LaunchDeps, type LaunchPlan, LegacyPlanState, LineBuffer, type MappedTool, ModelResolver, type ModelResolverDeps, type ModifyPlanRequest, type NotificationAction, OPENCODE_MANIFEST, OpenAiService, OpenCodeAdapter, type OrchestratorObserver, OrchestratorOption, PROVIDER_DETECT_PRIORITY, PROVIDER_LABEL, PROVIDER_PRIORITY, PROVIDER_SHORT_LABEL, type PendingApproval, PendingApprovals, type PendingApprovalsOptions, PlanParseError, type PlanRequest, PlanState, PlanStatus, PlanStore, Planner, type PlannerReplyClassification, type PlannerRuntimeToggles, type PrdBlock, type PreparedLaunch, type PriorOutput, type ProbeFn, ProviderModelLists, type ProviderRegistration, QueuedMessage, REFUSED_COMMANDS, ReadFileOpts, type RepairLoopOpts, type RepairVerdict, type ResearchChat, ResearchLogEntry, ResearchProgress, type ResearchShell, type ResearchShellDeps, ResearchStep, ResearchToolType, type ResearchTurn, ResolveContext, type RunnerCatalog, RunnerId, RunnerInstallation, RunnerInvocation, type RunnerMode, RunnerModeInfo, RunnerPluginManifest, RunnerRegistry, type RunnerSpawnOptions, STATE_DIR, SYMBOL_LANGUAGES, type SerializedPlan, type SerializedTask, type SerializedTaskStatus, Session, type SessionBroadcaster, type SessionData, type SessionDeps, type SessionMessage, type SessionMeta, type SessionPlanner, type SessionRuntimeSettings, SettingsService, type ShellDialect, type SpawnSpec, StdioAgentAdapter, TRUNCATED_PLAN_REPAIR_INSTRUCTION, Task, TaskOp, TaskOrchestrator, TaskSnapshot, TmuxRunner, type TmuxRunnerDeps, type ToolCall, ToolOutcome, type ToolResult, type UserSettings, Verdict, VerdictEngine, type VerdictListener, WINDOWS_MAX_COMMAND_LINE, applyHeadLimit, augmentPromptWithPriorOutputs, augmentedPath, buildConversationSystemPrompt, buildFallbackGrepArgs, buildGlobArgs, buildGrepArgs, buildMergePrompt, buildModifyDuringExecutionPrompt, buildModifyPlanPrompt, buildPlanWithResults, buildResearchPrompt, buildResearchToolsPrompt, buildRunnerInvocation, buildShellInvocation, buildSplitPrompt, buildSubagentSystemPrompt, clampThinkingEffort, classifyCommand, classifyPlannerReply, clearAugmentedPathCache, clearResearchShellCache, clearState, clipboardCopyCommand, coerceAssignments, collectDirectDependencyOutputs, composeAugmentedPrompt, configuredProviders, createAiService, defaultLogger, definitionPattern, deleteSession, discoverGeminiModels, effectiveAllowlist, ensureDir, executionLogBlock, executionSummary, extractPrdBlock, filterFallbackByAnchoredInclude, filterModelsForPrompt, formatSearchOutput, generatePlanWithRepair, getLatestSession, getProviderMeta, getSettingsPath, getStateDir, grantScopeFor, hasTmux, includeGlobFor, isCliProvider, isOpenAiProvider, killTree, languageForId, listSessions, loadSession, loadSessionPlanState, loadState, mapAgentTool, modelContextBlock, modifyValidationFeedback, normalizeAgentArgs, normalizeGeminiModel, pendingEditRulesBlock, planDirectLaunch, planShellLaunch, posixShellQuote, prefixModelId, providerForRunner, reEmitPlanPrompt, reEmitTaskOpsPrompt, referencePattern, renderPlanMap, renderPriorOutputs, repairLoop, researchShellWarning, researchToolsPath, resolveArgs, resolveProviderFromPrefix, resolveResearchShell, resolveWithin, retargetTaskRunner, runnerAssignment, runnerForProvider, sanitizeSlug, savePrdMarkdown, saveSession, saveState, serializePlan, serializeTask, serializeTaskStatus, sessionRuntimeSettings, stateExists, stripAnsi, stripModelPrefix, summarizeOutput, taskOpsRejectedPrompt, tmuxSessionName, tmuxSocketName, tmuxWindowName, truncatedPlanReEmitPrompt, wellKnownBinDirs, windowsCommandLine, withPath, wrapWithPty };

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { h as RunnerId, c as PlanStatus, L as LegacyPlanState, d as ResearchProgress, a as DiscoveredModel, T as Task, R as ResearchLogEntry, C as ConversationMessage, n as TaskSnapshot, Q as QueuedMessage, A as ActiveTaskSession, g as ResearchToolType, u as Verdict, e as ResearchStep, b as PlanState } from './Task-1NwmUImI.js';
 export { D as DiscoveredMode, M as Message, P as PlanModificationWarnings, f as ResearchStepOutcome, S as StreamEvent, i as StreamStepEvent, j as StreamThinkingEvent, k as TaskMode, l as TaskModelAssignment, m as TaskOutputSummary, o as TaskStatus, p as TaskType, q as ThinkingBlock, U as UserPromptEntry, r as UserStep, V as ValidationCheck, s as ValidationContext, t as ValidationResult, v as VerificationCheck, w as addTaskToPlan, x as createEmptyPlan, y as createTask, z as emptyWarnings, B as flattenTasks, E as migrateLegacyPlan, F as migratePlanState, G as migrateTask, H as removeTaskFromPlan, I as renumberTasks, J as updateTaskInPlan, K as validateModifiedPlan, N as warningsText } from './Task-1NwmUImI.js';
-import { n as IFileSystem, I as IApproval, R as ReadFileOpts, T as ToolOutcome, k as GrepOptions, j as GlobOptions, i as FindSymbolOptions, f as ApprovalRequest, m as IConfig, A as AiProvider, y as ProviderModelLists, c as ApprovalMode, q as ITerminalSession, p as ITerminalRunner, J as RunnerRegistry, s as OrchestratorOption, b as ApprovalKind, g as ApprovalSource, E as RunnerInvocation, o as IPluginStore, H as RunnerPluginManifest, B as ResolveContext } from './ITerminalRunner-Bbpe8uts.js';
-export { a as AllProviderModels, d as ApprovalPolicy, e as ApprovalPolicyOptions, C as CatalogModel, D as DENY_ALL, h as DiscoveryCommand, F as FetchAllProviderModelsOptions, G as GREP_DEFAULT_HEAD_LIMIT, l as GrepOutputMode, M as ModelCatalog, r as ModelShortcut, O as ORCHESTRATOR_SHORTCUTS, P as PluginEntry, t as PluginFeatures, u as PluginMode, v as PluginModelDiscovery, w as PluginRunnerDef, x as ProviderCredentialSource, z as ProviderModelsResult, S as SEARCH_EXCLUSIONS, K as collectProviderCredentials, L as enabledRunners, N as fetchAllProviderModels, Q as knownModelId, U as resolveModelShortcut, V as resolveProvider, W as toOrchestratorOptions } from './ITerminalRunner-Bbpe8uts.js';
+import { n as IFileSystem, I as IApproval, R as ReadFileOpts, T as ToolOutcome, k as GrepOptions, j as GlobOptions, i as FindSymbolOptions, f as ApprovalRequest, m as IConfig, A as AiProvider, y as ProviderModelLists, c as ApprovalMode, q as ITerminalSession, p as ITerminalRunner, J as RunnerRegistry, s as OrchestratorOption, b as ApprovalKind, g as ApprovalSource, E as RunnerInvocation, o as IPluginStore, H as RunnerPluginManifest, B as ResolveContext } from './ITerminalRunner-D7DwHYSg.js';
+export { a as AllProviderModels, d as ApprovalPolicy, e as ApprovalPolicyOptions, C as CatalogModel, D as DENY_ALL, h as DiscoveryCommand, F as FetchAllProviderModelsOptions, G as GREP_DEFAULT_HEAD_LIMIT, l as GrepOutputMode, M as ModelCatalog, r as ModelShortcut, O as ORCHESTRATOR_SHORTCUTS, P as PluginEntry, t as PluginFeatures, u as PluginMode, v as PluginModelDiscovery, w as PluginRunnerDef, x as ProviderCredentialSource, z as ProviderModelsResult, S as SEARCH_EXCLUSIONS, K as collectProviderCredentials, L as enabledRunners, N as fetchAllProviderModels, Q as knownModelId, U as resolveModelShortcut, V as resolveProvider, W as toOrchestratorOptions } from './ITerminalRunner-D7DwHYSg.js';
 import { R as RunnerModeInfo, b as PlanParseError } from './parsing-RjN9JbyG.js';
 export { M as ManifestLookup, P as PLAN_ENVELOPE_KEY, a as PartialPlanTask, T as TASK_OPS_ENVELOPE_KEY, c as buildModeGuide, d as checkDepsResolve, e as checkImmutableLog, f as checkInProgress, g as checkNoCycles, h as checkUniqueIds, i as escapeControlCharsInStrings, j as extractJsonObject, k as extractObjectWithBalance, l as extractObjectsWithKey, m as filteredBuildModes, n as looksLikePlanAttempt, p as parsePartialPlan, o as parsePlanJson, r as resolveDefaultMode, q as resolveTaskMode, s as runnerModesFrom, t as stripModelNoise, u as stripTrailingCommas, v as validatePlanModification } from './parsing-RjN9JbyG.js';
 import { T as TaskOp } from './plan-utils-Cgc0cCH1.js';
@@ -789,8 +789,14 @@ declare class HeadlessRunner extends AbstractRunner<HeadlessSession> {
     private hasScriptCmd;
     private resolvePath;
     private launchDeps;
-    /** Session shape when the caller names none; the VS Code runner overrides it to interactive. */
-    protected readonly defaultHeadless: boolean;
+    /**
+     * Session shape: a piped subprocess is not a terminal, so runners get their
+     * non-interactive subcommand. The VS Code runner owns a pseudoterminal and
+     * overrides this to true. Autonomy is a separate axis (see `ResolveContext`)
+     * and stays on either way — no surface has a human answering permission
+     * prompts on the orchestrator's behalf.
+     */
+    protected readonly defaultInteractive: boolean;
     constructor(deps?: HeadlessRunnerDeps);
     protected createSession(id: string, taskId: string): HeadlessSession;
     /** Everything up to, but not including, spawning — so a surface that owns its own child reaches the same decisions. */
@@ -2706,6 +2712,8 @@ declare function buildRunnerInvocation(opts: {
     modelVariants?: string[];
     mode?: RunnerMode;
     headless?: boolean;
+    interactive?: boolean;
+    cwd?: string;
     registry: RunnerRegistry;
 }): RunnerInvocation;
 
@@ -2744,6 +2752,7 @@ interface TmuxRunnerDeps {
     resolvePath?: () => Promise<string>;
     pollIntervalMs?: number;
     logDir?: string;
+    clipboardCommand?: () => string | null;
 }
 declare class TmuxSession extends AbstractTerminalSession {
     private tmuxSession;
@@ -2795,6 +2804,7 @@ declare class TmuxRunner extends AbstractRunner<TmuxSession> {
     private resolvePath;
     private pollIntervalMs;
     private logDir;
+    private clipboardCommand;
     /** Retries get a freshly named window so a failed attempt's output stays inspectable. */
     private attempts;
     private ready;
@@ -2810,14 +2820,17 @@ declare class TmuxRunner extends AbstractRunner<TmuxSession> {
     private tmux;
     private createFreshSession;
     /**
-     * Makes an attached runner terminal scrollable with the mouse wheel and
-     * Page Up/Down. A fresh tmux session ships with `mouse off`, a 2000-line
-     * scrollback, and no PageUp binding — none of which lets a user page back
-     * through a finished task's output, which is the whole point of opening its
-     * window. Scoping is harmless: the daemon owns a private socket
-     * (`tmuxSocketName`), so these server-wide options touch nothing but its
-     * own session. Best-effort so an ancient or stripped tmux cannot stop tasks
-     * from spawning — the session still works without the scroll comforts.
+     * Gives an attached runner terminal wheel/PageUp scrolling over a deep
+     * scrollback, and a mouse selection that reaches the system clipboard — none
+     * of which a default tmux session does. Server-wide scoping is harmless: the
+     * daemon owns a private socket (`tmuxSocketName`).
+     *
+     * `mouse on` is what costs the emulator's own drag-select, so tmux must hand
+     * the selection back out itself: via a clipboard binary when there is one,
+     * and via OSC 52 (`set-clipboard`) for what that cannot cover, such as
+     * viewing over SSH. Naming the binary on the binding as well as in
+     * `copy-command` keeps drag-to-copy working on tmux older than 3.2, which has
+     * no `copy-command`.
      */
     private configureScrolling;
     /**
@@ -2962,6 +2975,15 @@ declare function tmuxWindowName(taskId: string, planSessionId?: string): string;
 type ProbeFn = () => void;
 /** Feature-detects tmux the same way `HeadlessRunner` detects `script`. */
 declare function hasTmux(probe?: ProbeFn): boolean;
+type HasBinFn = (bin: string) => boolean;
+/**
+ * Shell command tmux should pipe a copy-mode selection into, so selecting text
+ * in a task's terminal puts it on the *system* clipboard rather than in a tmux
+ * paste buffer no other application can read. Preferred over tmux's OSC 52
+ * bridge, which plenty of emulators (VTE before 0.76, xterm without
+ * `allowWindowOps`) drop on the floor.
+ */
+declare function clipboardCopyCommand(hasBin?: HasBinFn, platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv): string | null;
 
 declare class FsPluginStore implements IPluginStore {
     getUserPluginsDir(): string;
@@ -3022,4 +3044,4 @@ declare function sanitizeSlug(raw: string): string;
 /** Save the PRD to `<workspace>/.scratch/<slug>/PRD.md` (to-prd native convention). */
 declare function savePrdMarkdown(workspace: string, slug: string, markdown: string): string;
 
-export { ALL_PROVIDERS, AUTO_COMMANDS, AbstractRunner, AbstractTerminalSession, ActiveTaskSession, type AgentAdapter, type AgentAdapterFactory, type AgentEvent, type AgentProcessDeps, type AgentStartOptions, AiProvider, ApprovalKind, ApprovalMode, ApprovalRequest, ApprovalSource, BaseAiService, BaseConfig, BaseFileSystem, CLAUDE_CODE_MANIFEST, CLI_PROVIDERS, CMD_EXE_MAX_COMMAND_LINE, CORE_PLANNER_PROMPT, type CappedRows, type CheckpointListener, ClaudeCodeAdapter, CliAgentAiService, type CliAgentAiServiceDeps, CodexAdapter, type CommandClassification, CommandLineTooLongError, type CommandTier, type ComposeOptions, ConsoleLogger, ContextCollector, ConversationMessage, type ConversationRequest, type ConversationTurn, DiscoveredModel, EmbeddedNewlineError, EnvConfig, type ExecFileFn, type ExecImpl, FindSymbolOptions, FsPluginStore, GIT_READONLY_SUBCOMMANDS, GeminiService, GlobOptions, type GrepInvocation, GrepOptions, HeadlessRunner, type HeadlessRunnerDeps, HeadlessSession, type IAiService, IApproval, IConfig, IFileSystem, type ILogger, type INotification, IPluginStore, ITerminalRunner, ITerminalSession, JSON_REPAIR_INSTRUCTION, type KillTreeDeps, type LaunchDeps, type LaunchPlan, LegacyPlanState, LineBuffer, type MappedTool, ModelResolver, type ModelResolverDeps, type ModifyPlanRequest, type NotificationAction, OPENCODE_MANIFEST, OpenAiService, OpenCodeAdapter, type OrchestratorObserver, OrchestratorOption, PROVIDER_DETECT_PRIORITY, PROVIDER_LABEL, PROVIDER_PRIORITY, PROVIDER_SHORT_LABEL, type PendingApproval, PendingApprovals, type PendingApprovalsOptions, PlanParseError, type PlanRequest, PlanState, PlanStatus, PlanStore, Planner, type PlannerReplyClassification, type PlannerRuntimeToggles, type PrdBlock, type PreparedLaunch, type PriorOutput, type ProbeFn, ProviderModelLists, type ProviderRegistration, QueuedMessage, REFUSED_COMMANDS, ReadFileOpts, type RepairLoopOpts, type RepairVerdict, type ResearchChat, ResearchLogEntry, ResearchProgress, type ResearchShell, type ResearchShellDeps, ResearchStep, ResearchToolType, type ResearchTurn, ResolveContext, type RunnerCatalog, RunnerId, RunnerInstallation, RunnerInvocation, type RunnerMode, RunnerModeInfo, RunnerPluginManifest, RunnerRegistry, type RunnerSpawnOptions, STATE_DIR, SYMBOL_LANGUAGES, type SerializedPlan, type SerializedTask, type SerializedTaskStatus, Session, type SessionBroadcaster, type SessionData, type SessionDeps, type SessionMessage, type SessionMeta, type SessionPlanner, type SessionRuntimeSettings, SettingsService, type ShellDialect, type SpawnSpec, StdioAgentAdapter, TRUNCATED_PLAN_REPAIR_INSTRUCTION, Task, TaskOp, TaskOrchestrator, TaskSnapshot, TmuxRunner, type TmuxRunnerDeps, type ToolCall, ToolOutcome, type ToolResult, type UserSettings, Verdict, VerdictEngine, type VerdictListener, WINDOWS_MAX_COMMAND_LINE, applyHeadLimit, augmentPromptWithPriorOutputs, augmentedPath, buildConversationSystemPrompt, buildFallbackGrepArgs, buildGlobArgs, buildGrepArgs, buildMergePrompt, buildModifyDuringExecutionPrompt, buildModifyPlanPrompt, buildPlanWithResults, buildResearchPrompt, buildResearchToolsPrompt, buildRunnerInvocation, buildShellInvocation, buildSplitPrompt, buildSubagentSystemPrompt, clampThinkingEffort, classifyCommand, classifyPlannerReply, clearAugmentedPathCache, clearResearchShellCache, clearState, coerceAssignments, collectDirectDependencyOutputs, composeAugmentedPrompt, configuredProviders, createAiService, defaultLogger, definitionPattern, deleteSession, discoverGeminiModels, effectiveAllowlist, ensureDir, executionLogBlock, executionSummary, extractPrdBlock, filterFallbackByAnchoredInclude, filterModelsForPrompt, formatSearchOutput, generatePlanWithRepair, getLatestSession, getProviderMeta, getSettingsPath, getStateDir, grantScopeFor, hasTmux, includeGlobFor, isCliProvider, isOpenAiProvider, killTree, languageForId, listSessions, loadSession, loadSessionPlanState, loadState, mapAgentTool, modelContextBlock, modifyValidationFeedback, normalizeAgentArgs, normalizeGeminiModel, pendingEditRulesBlock, planDirectLaunch, planShellLaunch, posixShellQuote, prefixModelId, providerForRunner, reEmitPlanPrompt, reEmitTaskOpsPrompt, referencePattern, renderPlanMap, renderPriorOutputs, repairLoop, researchShellWarning, researchToolsPath, resolveArgs, resolveProviderFromPrefix, resolveResearchShell, resolveWithin, retargetTaskRunner, runnerAssignment, runnerForProvider, sanitizeSlug, savePrdMarkdown, saveSession, saveState, serializePlan, serializeTask, serializeTaskStatus, sessionRuntimeSettings, stateExists, stripAnsi, stripModelPrefix, summarizeOutput, taskOpsRejectedPrompt, tmuxSessionName, tmuxSocketName, tmuxWindowName, truncatedPlanReEmitPrompt, wellKnownBinDirs, windowsCommandLine, withPath, wrapWithPty };
+export { ALL_PROVIDERS, AUTO_COMMANDS, AbstractRunner, AbstractTerminalSession, ActiveTaskSession, type AgentAdapter, type AgentAdapterFactory, type AgentEvent, type AgentProcessDeps, type AgentStartOptions, AiProvider, ApprovalKind, ApprovalMode, ApprovalRequest, ApprovalSource, BaseAiService, BaseConfig, BaseFileSystem, CLAUDE_CODE_MANIFEST, CLI_PROVIDERS, CMD_EXE_MAX_COMMAND_LINE, CORE_PLANNER_PROMPT, type CappedRows, type CheckpointListener, ClaudeCodeAdapter, CliAgentAiService, type CliAgentAiServiceDeps, CodexAdapter, type CommandClassification, CommandLineTooLongError, type CommandTier, type ComposeOptions, ConsoleLogger, ContextCollector, ConversationMessage, type ConversationRequest, type ConversationTurn, DiscoveredModel, EmbeddedNewlineError, EnvConfig, type ExecFileFn, type ExecImpl, FindSymbolOptions, FsPluginStore, GIT_READONLY_SUBCOMMANDS, GeminiService, GlobOptions, type GrepInvocation, GrepOptions, type HasBinFn, HeadlessRunner, type HeadlessRunnerDeps, HeadlessSession, type IAiService, IApproval, IConfig, IFileSystem, type ILogger, type INotification, IPluginStore, ITerminalRunner, ITerminalSession, JSON_REPAIR_INSTRUCTION, type KillTreeDeps, type LaunchDeps, type LaunchPlan, LegacyPlanState, LineBuffer, type MappedTool, ModelResolver, type ModelResolverDeps, type ModifyPlanRequest, type NotificationAction, OPENCODE_MANIFEST, OpenAiService, OpenCodeAdapter, type OrchestratorObserver, OrchestratorOption, PROVIDER_DETECT_PRIORITY, PROVIDER_LABEL, PROVIDER_PRIORITY, PROVIDER_SHORT_LABEL, type PendingApproval, PendingApprovals, type PendingApprovalsOptions, PlanParseError, type PlanRequest, PlanState, PlanStatus, PlanStore, Planner, type PlannerReplyClassification, type PlannerRuntimeToggles, type PrdBlock, type PreparedLaunch, type PriorOutput, type ProbeFn, ProviderModelLists, type ProviderRegistration, QueuedMessage, REFUSED_COMMANDS, ReadFileOpts, type RepairLoopOpts, type RepairVerdict, type ResearchChat, ResearchLogEntry, ResearchProgress, type ResearchShell, type ResearchShellDeps, ResearchStep, ResearchToolType, type ResearchTurn, ResolveContext, type RunnerCatalog, RunnerId, RunnerInstallation, RunnerInvocation, type RunnerMode, RunnerModeInfo, RunnerPluginManifest, RunnerRegistry, type RunnerSpawnOptions, STATE_DIR, SYMBOL_LANGUAGES, type SerializedPlan, type SerializedTask, type SerializedTaskStatus, Session, type SessionBroadcaster, type SessionData, type SessionDeps, type SessionMessage, type SessionMeta, type SessionPlanner, type SessionRuntimeSettings, SettingsService, type ShellDialect, type SpawnSpec, StdioAgentAdapter, TRUNCATED_PLAN_REPAIR_INSTRUCTION, Task, TaskOp, TaskOrchestrator, TaskSnapshot, TmuxRunner, type TmuxRunnerDeps, type ToolCall, ToolOutcome, type ToolResult, type UserSettings, Verdict, VerdictEngine, type VerdictListener, WINDOWS_MAX_COMMAND_LINE, applyHeadLimit, augmentPromptWithPriorOutputs, augmentedPath, buildConversationSystemPrompt, buildFallbackGrepArgs, buildGlobArgs, buildGrepArgs, buildMergePrompt, buildModifyDuringExecutionPrompt, buildModifyPlanPrompt, buildPlanWithResults, buildResearchPrompt, buildResearchToolsPrompt, buildRunnerInvocation, buildShellInvocation, buildSplitPrompt, buildSubagentSystemPrompt, clampThinkingEffort, classifyCommand, classifyPlannerReply, clearAugmentedPathCache, clearResearchShellCache, clearState, clipboardCopyCommand, coerceAssignments, collectDirectDependencyOutputs, composeAugmentedPrompt, configuredProviders, createAiService, defaultLogger, definitionPattern, deleteSession, discoverGeminiModels, effectiveAllowlist, ensureDir, executionLogBlock, executionSummary, extractPrdBlock, filterFallbackByAnchoredInclude, filterModelsForPrompt, formatSearchOutput, generatePlanWithRepair, getLatestSession, getProviderMeta, getSettingsPath, getStateDir, grantScopeFor, hasTmux, includeGlobFor, isCliProvider, isOpenAiProvider, killTree, languageForId, listSessions, loadSession, loadSessionPlanState, loadState, mapAgentTool, modelContextBlock, modifyValidationFeedback, normalizeAgentArgs, normalizeGeminiModel, pendingEditRulesBlock, planDirectLaunch, planShellLaunch, posixShellQuote, prefixModelId, providerForRunner, reEmitPlanPrompt, reEmitTaskOpsPrompt, referencePattern, renderPlanMap, renderPriorOutputs, repairLoop, researchShellWarning, researchToolsPath, resolveArgs, resolveProviderFromPrefix, resolveResearchShell, resolveWithin, retargetTaskRunner, runnerAssignment, runnerForProvider, sanitizeSlug, savePrdMarkdown, saveSession, saveState, serializePlan, serializeTask, serializeTaskStatus, sessionRuntimeSettings, stateExists, stripAnsi, stripModelPrefix, summarizeOutput, taskOpsRejectedPrompt, tmuxSessionName, tmuxSocketName, tmuxWindowName, truncatedPlanReEmitPrompt, wellKnownBinDirs, windowsCommandLine, withPath, wrapWithPty };

package/dist/index.js

@@ -124,6 +124,7 @@ __export(index_exports, {
   clearAugmentedPathCache: () => clearAugmentedPathCache,
   clearResearchShellCache: () => clearResearchShellCache,
   clearState: () => clearState,
+  clipboardCopyCommand: () => clipboardCopyCommand,
   coerceAssignments: () => coerceAssignments,
   collectDirectDependencyOutputs: () => collectDirectDependencyOutputs,
   collectProviderCredentials: () => collectProviderCredentials,
@@ -11374,8 +11375,12 @@ var Block = /* @__PURE__ */ ((Block2) => {
   Block2[Block2["IfInteractive"] = 7] = "IfInteractive";
   Block2[Block2["IfHeadlessSession"] = 8] = "IfHeadlessSession";
   Block2[Block2["IfInteractiveVariant"] = 9] = "IfInteractiveVariant";
+  Block2[Block2["IfProjectTrust"] = 10] = "IfProjectTrust";
   return Block2;
 })(Block || {});
+function isInteractive(ctx) {
+  return ctx.interactive ?? !ctx.headless;
+}
 function resolveArgs(manifest, ctx) {
   const args = [];
   const env = {};
@@ -11444,6 +11449,8 @@ function parseBlockOpen(raw) {
       return 8 /* IfHeadlessSession */;
     case "{{if interactiveVariant}}":
       return 9 /* IfInteractiveVariant */;
+    case "{{if projectTrust}}":
+      return 10 /* IfProjectTrust */;
     default:
       return null;
   }
@@ -11465,19 +11472,24 @@ function shouldIncludeBlock(block, ctx) {
     // `--variant` is a headless-only flag: it exists on `opencode run` but not
     // on the interactive TUI, which exits immediately if handed an unknown flag.
     case 6 /* IfVariant */:
-      return !!ctx.thinkingEffort && !!ctx.headless;
+      return !!ctx.thinkingEffort && !isInteractive(ctx);
     // Session-shape blocks: unlike IfHeadless (a permission-flag gate with a
     // plan-mode carve-out), these pick the CLI invocation shape — e.g.
     // opencode's `run` subcommand vs its interactive TUI — so no mode carve-out.
     case 7 /* IfInteractive */:
-      return !ctx.headless;
+      return isInteractive(ctx);
     case 8 /* IfHeadlessSession */:
-      return !!ctx.headless;
+      return !isInteractive(ctx);
     // Interactive counterpart of IfVariant, for runners whose TUI has no
     // variant flag and must receive the variant via env config instead.
     // Requires a provider-prefixed model: the config pins variant per model.
     case 9 /* IfInteractiveVariant */:
-      return !!ctx.thinkingEffort && !!ctx.model?.includes("/") && !ctx.headless;
+      return !!ctx.thinkingEffort && !!ctx.model?.includes("/") && isInteractive(ctx);
+    // Guards the flag/value pair that pre-trusts the workspace directory. The
+    // condition, not the token, is what keeps a bare `-c` out of the args when
+    // there is no cwd to name.
+    case 10 /* IfProjectTrust */:
+      return isInteractive(ctx) && !!ctx.cwd;
     default:
       return true;
   }
@@ -11498,6 +11510,10 @@ function resolveToken(token, manifest, ctx) {
   if (token === "{{model}}") return ctx.model || "";
   if (token === "{{thinkingEffort}}") return ctx.thinkingEffort || "";
   if (token === "{{mode}}") return ctx.mode || "build";
+  if (token === "{{projectTrust}}") {
+    if (!ctx.cwd) return "";
+    return `projects.${JSON.stringify(ctx.cwd)}.trust_level="trusted"`;
+  }
   if (token === "{{feature:thinking}}") {
     return manifest.features.thinkingFlag || "";
   }
@@ -11584,7 +11600,9 @@ function buildRunnerInvocation(opts) {
     thinkingEffort: opts.thinkingEffort,
     modelVariants: opts.modelVariants,
     mode: opts.mode ?? "build",
-    headless: opts.headless
+    headless: opts.headless,
+    interactive: opts.interactive,
+    cwd: opts.cwd
   });
 }
 
@@ -11705,8 +11723,14 @@ var HeadlessRunner = class extends AbstractRunner {
   hasScriptCmd;
   resolvePath;
   launchDeps;
-  /** Session shape when the caller names none; the VS Code runner overrides it to interactive. */
-  defaultHeadless = true;
+  /**
+   * Session shape: a piped subprocess is not a terminal, so runners get their
+   * non-interactive subcommand. The VS Code runner owns a pseudoterminal and
+   * overrides this to true. Autonomy is a separate axis (see `ResolveContext`)
+   * and stays on either way — no surface has a human answering permission
+   * prompts on the orchestrator's behalf.
+   */
+  defaultInteractive = false;
   constructor(deps = {}) {
     super();
     this.spawnImpl = deps.spawnImpl ?? import_child_process6.spawn;
@@ -11719,7 +11743,7 @@ var HeadlessRunner = class extends AbstractRunner {
   }
   /** Everything up to, but not including, spawning — so a surface that owns its own child reaches the same decisions. */
   async prepareLaunch(opts) {
-    const headless = opts.headless ?? this.defaultHeadless;
+    const interactive = this.defaultInteractive;
     const invocation = buildRunnerInvocation({
       runner: opts.runner,
       prompt: opts.prompt,
@@ -11727,11 +11751,13 @@ var HeadlessRunner = class extends AbstractRunner {
       thinkingEffort: opts.thinkingEffort,
       modelVariants: opts.modelVariants,
       mode: opts.mode,
-      headless,
+      headless: opts.headless ?? true,
+      interactive,
+      cwd: opts.cwd,
       registry: opts.registry
     });
     const manifest = opts.registry?.get(opts.runner)?.manifest;
-    const pty = (manifest?.runner.requiresTty === true || !headless) && this.hasScriptCmd();
+    const pty = (manifest?.runner.requiresTty === true || interactive) && this.hasScriptCmd();
     const resolvedPath = await this.resolvePath();
     const { command, args } = pty ? wrapWithPty(invocation.command, invocation.args) : { command: invocation.command, args: invocation.args };
     return {
@@ -11784,6 +11810,28 @@ function hasTmux(probe = defaultProbe) {
     return false;
   }
 }
+var defaultHasBin = (bin) => {
+  try {
+    (0, import_child_process7.execSync)(`${process.platform === "win32" ? "where" : "which"} ${bin}`, { stdio: "ignore" });
+    return true;
+  } catch {
+    return false;
+  }
+};
+function clipboardCopyCommand(hasBin = defaultHasBin, platform = process.platform, env = process.env) {
+  const candidates = platform === "darwin" ? [["pbcopy", "pbcopy"]] : platform === "win32" ? [["clip.exe", "clip.exe"]] : [
+    // Only prefer wl-copy when there is a Wayland display to talk to —
+    // on X11 it is often installed but fails at copy time.
+    ...env.WAYLAND_DISPLAY ? [["wl-copy", "wl-copy"]] : [],
+    ["xclip", "xclip -selection clipboard"],
+    ["xsel", "xsel --clipboard --input"],
+    ["wl-copy", "wl-copy"]
+  ];
+  for (const [bin, command] of candidates) {
+    if (hasBin(bin)) return command;
+  }
+  return null;
+}
 
 // src/services/TmuxRunner.ts
 var EXIT_RE = /<<<ORDEWELL_TMUX_EXIT:(\d+)>>>/;
@@ -11893,6 +11941,7 @@ var TmuxRunner = class extends AbstractRunner {
   resolvePath;
   pollIntervalMs;
   logDir;
+  clipboardCommand;
   /** Retries get a freshly named window so a failed attempt's output stays inspectable. */
   attempts = /* @__PURE__ */ new Map();
   ready = null;
@@ -11904,6 +11953,7 @@ var TmuxRunner = class extends AbstractRunner {
     this.resolvePath = deps.resolvePath ?? augmentedPath;
     this.pollIntervalMs = deps.pollIntervalMs ?? 500;
     this.logDir = deps.logDir ?? (0, import_os.tmpdir)();
+    this.clipboardCommand = deps.clipboardCommand ?? (() => clipboardCopyCommand());
   }
   /**
    * Reaps a session orphaned by a crashed prior daemon on the same port, then
@@ -11932,25 +11982,44 @@ var TmuxRunner = class extends AbstractRunner {
     await this.configureScrolling();
   }
   /**
-   * Makes an attached runner terminal scrollable with the mouse wheel and
-   * Page Up/Down. A fresh tmux session ships with `mouse off`, a 2000-line
-   * scrollback, and no PageUp binding — none of which lets a user page back
-   * through a finished task's output, which is the whole point of opening its
-   * window. Scoping is harmless: the daemon owns a private socket
-   * (`tmuxSocketName`), so these server-wide options touch nothing but its
-   * own session. Best-effort so an ancient or stripped tmux cannot stop tasks
-   * from spawning — the session still works without the scroll comforts.
+   * Gives an attached runner terminal wheel/PageUp scrolling over a deep
+   * scrollback, and a mouse selection that reaches the system clipboard — none
+   * of which a default tmux session does. Server-wide scoping is harmless: the
+   * daemon owns a private socket (`tmuxSocketName`).
+   *
+   * `mouse on` is what costs the emulator's own drag-select, so tmux must hand
+   * the selection back out itself: via a clipboard binary when there is one,
+   * and via OSC 52 (`set-clipboard`) for what that cannot cover, such as
+   * viewing over SSH. Naming the binary on the binding as well as in
+   * `copy-command` keeps drag-to-copy working on tmux older than 3.2, which has
+   * no `copy-command`.
    */
   async configureScrolling() {
-    try {
-      await this.tmux(["set-option", "-g", "history-limit", "100000"]);
-      await this.tmux(["set-option", "-g", "mouse", "on"]);
-      await this.tmux(["bind-key", "-n", "PageUp", "copy-mode", "-u"]);
-      await this.tmux(["bind-key", "-T", "copy-mode", "PageUp", "send-keys", "-X", "page-up"]);
-      await this.tmux(["bind-key", "-T", "copy-mode", "PageDown", "send-keys", "-X", "page-down"]);
-      await this.tmux(["bind-key", "-T", "copy-mode-vi", "PageUp", "send-keys", "-X", "page-up"]);
-      await this.tmux(["bind-key", "-T", "copy-mode-vi", "PageDown", "send-keys", "-X", "page-down"]);
-    } catch {
+    const clip = this.clipboardCommand();
+    const copySelection = clip ? ["copy-pipe-and-cancel", clip] : ["copy-pipe-and-cancel"];
+    const commands = [
+      // `history-limit` only governs windows created after it is set, so it
+      // must run before any `new-window` — once, here at session creation.
+      ["set-option", "-g", "history-limit", "100000"],
+      ["set-option", "-g", "mouse", "on"],
+      ["set-option", "-g", "set-clipboard", "on"],
+      ...clip ? [["set-option", "-g", "copy-command", clip]] : [],
+      ["bind-key", "-T", "copy-mode", "MouseDragEnd1Pane", "send-keys", "-X", ...copySelection],
+      ["bind-key", "-T", "copy-mode-vi", "MouseDragEnd1Pane", "send-keys", "-X", ...copySelection],
+      // Root-table PageUp; otherwise the key goes to the inner app and never
+      // reaches tmux's scrollback. Both mode tables, so `mode-keys` can't
+      // decide whether paging works.
+      ["bind-key", "-n", "PageUp", "copy-mode", "-u"],
+      ["bind-key", "-T", "copy-mode", "PageUp", "send-keys", "-X", "page-up"],
+      ["bind-key", "-T", "copy-mode", "PageDown", "send-keys", "-X", "page-down"],
+      ["bind-key", "-T", "copy-mode-vi", "PageUp", "send-keys", "-X", "page-up"],
+      ["bind-key", "-T", "copy-mode-vi", "PageDown", "send-keys", "-X", "page-down"]
+    ];
+    for (const args of commands) {
+      try {
+        await this.tmux(args);
+      } catch {
+      }
     }
   }
   /**
@@ -11975,7 +12044,14 @@ var TmuxRunner = class extends AbstractRunner {
       thinkingEffort: opts.thinkingEffort,
       modelVariants: opts.modelVariants,
       mode: opts.mode,
+      // A tmux window is a real TTY the user can attach to (ADR-0007), so the
+      // runner's own TUI is the point — `interactive`. It is still an
+      // unattended run, so autonomy stays on: the two are separate axes, and
+      // conflating them is what made Codex tasks stream `codex exec` output
+      // into a window that was supposed to show its TUI.
       headless: opts.headless ?? true,
+      interactive: true,
+      cwd: opts.cwd,
       registry: opts.registry
     });
     await this.ensureSession();
@@ -12213,18 +12289,33 @@ var CODEX_MANIFEST = {
   version: "1.0.0",
   runner: {
     command: "codex",
-    // Headless surfaces (CLI/web) use the non-interactive `exec` subcommand
-    // (`--skip-git-repo-check`: task workspaces aren't always git repos, and
-    // exec hard-fails outside one by default); interactive surfaces (VS Code
-    // terminal) launch the TUI with the prompt as its positional argument.
-    // Reasoning effort has no dedicated flag — it travels as a `-c` config
-    // override (see {{feature:reasoningEffortConfig}}). Both `exec` and the
-    // TUI accept `-m`, `-c`, and `--sandbox`.
+    // Headless surfaces (a piped subprocess) use the non-interactive `exec`
+    // subcommand (`--skip-git-repo-check`: task workspaces aren't always git
+    // repos, and exec hard-fails outside one by default); interactive surfaces
+    // (a tmux window, the VS Code terminal) launch the TUI with the prompt as
+    // its positional argument. Reasoning effort has no dedicated flag — it
+    // travels as a `-c` config override (see {{feature:reasoningEffortConfig}}).
+    // Both `exec` and the TUI accept `-m`, `-c`, and `--sandbox`.
+    //
+    // The two interactive-only entries restore what `exec` gives implicitly and
+    // the TUI does not: `exec` is non-interactive, so it can neither ask for
+    // command approval nor ask whether the directory is trusted. The TUI asks
+    // for both by default, and an orchestrated task has nobody to answer —
+    // without these it stalls on a menu instead of working. `-a` does not exist
+    // on `exec`, hence the shape gate rather than a `{{if headless}}` one.
     argsTemplate: [
       "{{if headlessSession}}",
       "exec",
       "--skip-git-repo-check",
       "{{/if}}",
+      "{{if interactive}}",
+      "-a",
+      "never",
+      "{{/if}}",
+      "{{if projectTrust}}",
+      "-c",
+      "{{projectTrust}}",
+      "{{/if}}",
       "{{if model}}",
       "-m",
       "{{model}}",
@@ -12244,9 +12335,9 @@ var CODEX_MANIFEST = {
     planMode: true,
     planModeFlag: "--sandbox",
     permissionModeValues: {
-      // Map mode IDs to --sandbox CLI values. `codex exec` is non-interactive
-      // and has no approval flag, so the sandbox axis is the whole permission
-      // story for headless runs.
+      // Map mode IDs to --sandbox CLI values. Approvals are off on both shapes
+      // (implicitly under `exec`, via `-a never` in the TUI), so the sandbox
+      // axis is the whole permission story for a Codex task.
       "agent": "workspace-write",
       "plan": "read-only",
       "fullAccess": "danger-full-access",
@@ -12854,6 +12945,7 @@ var SettingsService = class {
   clearAugmentedPathCache,
   clearResearchShellCache,
   clearState,
+  clipboardCopyCommand,
   coerceAssignments,
   collectDirectDependencyOutputs,
   collectProviderCredentials,