@sleds/cli 0.1.38 → 0.1.40

package/dist/sleds.mjs

@@ -894,7 +894,7 @@ var init_verbs = __esm(() => {
       mcp: "a `Worth:` line in the spec you estimate (`Worth: high · $5k–20k · Acme renewal`)",
       claudeCode: "`SLEDS-Worth:` line in the PR body",
       app: "Work › the item › Worth…",
-      how: "A level, dollars when you know them, a note. Yours to state; the tracker's priority stands in at low confidence; blank stays blank."
+      how: "A level, dollars when you know them, a note. Yours to state — the tracker's priority is urgency, never worth; blank stays blank."
     },
     {
       id: "intake",
@@ -5524,6 +5524,21 @@ var init_confluence = __esm(() => {
   CONFLUENCE_READ_SCOPES_LINE = CONFLUENCE_READ_SCOPES.join(", ");
 });
 
+// ../../packages/shared/src/tracker/fieldMap.ts
+var FILLED_ON_CREATE;
+var init_fieldMap = __esm(() => {
+  FILLED_ON_CREATE = new Set([
+    "summary",
+    "description",
+    "project",
+    "issuetype",
+    "parent",
+    "reporter",
+    "labels",
+    "priority"
+  ]);
+});
+
 // ../../packages/shared/src/help/whatsNew.ts
 var SEPT_30 = "/whats-new/2026-09-30", WHATS_NEW;
 var init_whatsNew = __esm(() => {
@@ -7153,7 +7168,10 @@ var BASE_URL_KEY = "ANTHROPIC_BASE_URL", AUTH_TOKEN_KEY = "ANTHROPIC_AUTH_TOKEN"
   if (!list.some(ours))
     return { ...settings };
   return withEventHooks(settings, event, list.filter((e) => !ours(e)));
-}, applySessionHook = (settings, command) => applyOnce(settings, SESSION_EVENT, isSledsSessionHook, sessionHookEntry(command)), removeSessionHook = (settings) => removeOurs(settings, SESSION_EVENT, isSledsSessionHook), hasSessionHook = (settings) => eventHooks(settings, SESSION_EVENT).some(isSledsSessionHook), applyStopHook = (settings, command) => applyOnce(settings, STOP_EVENT, isSledsStopHook, stopHookEntry(command)), removeStopHook = (settings) => removeOurs(settings, STOP_EVENT, isSledsStopHook), hasStopHook = (settings) => eventHooks(settings, STOP_EVENT).some(isSledsStopHook), isSeatToken = (token) => /^sled_[A-Za-z0-9_-]+$/.test(token), maskToken = (token) => token.length <= 9 ? `${token.slice(0, 5)}…` : `${token.slice(0, 9)}…`, serialize = (settings) => `${JSON.stringify(settings, null, 2)}
+}, applySessionHook = (settings, command) => applyOnce(settings, SESSION_EVENT, isSledsSessionHook, sessionHookEntry(command)), removeSessionHook = (settings) => removeOurs(settings, SESSION_EVENT, isSledsSessionHook), hasSessionHook = (settings) => eventHooks(settings, SESSION_EVENT).some(isSledsSessionHook), applyStopHook = (settings, command) => applyOnce(settings, STOP_EVENT, isSledsStopHook, stopHookEntry(command)), removeStopHook = (settings) => removeOurs(settings, STOP_EVENT, isSledsStopHook), hasStopHook = (settings) => eventHooks(settings, STOP_EVENT).some(isSledsStopHook), PERMISSION_EVENT_MATCHER = "permission_prompt", PERMISSION_EVENT_TIMEOUT_S = 5, isSledsPermissionHook, permissionHookEntry = (command) => ({
+  matcher: PERMISSION_EVENT_MATCHER,
+  hooks: [{ type: "command", command, timeout: PERMISSION_EVENT_TIMEOUT_S }]
+}), applyPermissionHook = (settings, command) => applyOnce(settings, NOTIFICATION_EVENT, isSledsPermissionHook, permissionHookEntry(command)), isSeatToken = (token) => /^sled_[A-Za-z0-9_-]+$/.test(token), maskToken = (token) => token.length <= 9 ? `${token.slice(0, 5)}…` : `${token.slice(0, 9)}…`, serialize = (settings) => `${JSON.stringify(settings, null, 2)}
 `, hasClaudeCode = (home, env = process.env) => existsSync(claudeDir(home, env)), readSettings = (home, env = process.env) => {
   const p = settingsPath(home, env);
   if (!existsSync(p))
@@ -7193,6 +7211,7 @@ var init_settings = __esm(() => {
   ORG_EXPORT = /(?:^|\s)SLEDS_ORG=(?:'[^']*'|\S+)(?=\s)/;
   isSledsSessionHook = isSledsHookFor("session-event");
   isSledsStopHook = isSledsHookFor("stop-event");
+  isSledsPermissionHook = isSledsHookFor("permission-event");
 });
 
 // src/config.ts
@@ -7520,6 +7539,7 @@ var init_src = __esm(() => {
   init_template();
   init_statusMap();
   init_confluence();
+  init_fieldMap();
   init_whatsNew();
   init_cheatSheet();
   init_pack2();
@@ -7935,6 +7955,14 @@ function parseRun(v) {
     ...typeof v.seenTicks === "number" ? { seenTicks: v.seenTicks } : {},
     ...typeof v.answeredAt === "number" ? { answeredAt: v.answeredAt } : {},
     ...typeof v.band === "string" ? { band: v.band } : {},
+    ...isObject8(v.permission) && typeof v.permission.decisionId === "string" && typeof v.permission.at === "number" ? {
+      permission: {
+        decisionId: v.permission.decisionId,
+        options: Array.isArray(v.permission.options) ? v.permission.options.filter((x) => typeof x === "string") : [],
+        at: v.permission.at,
+        ...v.permission.onScreen === true ? { onScreen: true } : {}
+      }
+    } : {},
     ...isObject8(v.provider) && typeof v.provider.why === "string" && typeof v.provider.since === "number" && typeof v.provider.tries === "number" ? { provider: { why: v.provider.why, since: v.provider.since, tries: v.provider.tries } } : {},
     ...parked ? { parked } : {},
     ...isObject8(v.pr) && typeof v.pr.url === "string" ? {
@@ -8210,6 +8238,7 @@ init_intake();
 init_template();
 init_statusMap();
 init_confluence();
+init_fieldMap();
 init_whatsNew();
 init_cheatSheet();
 init_pack2();
@@ -9385,10 +9414,10 @@ import {
   existsSync as existsSync16,
   lstatSync,
   mkdtempSync,
-  readFileSync as readFileSync15,
+  readFileSync as readFileSync16,
   readlinkSync,
-  rmSync as rmSync7,
-  writeFileSync as writeFileSync16
+  rmSync as rmSync8,
+  writeFileSync as writeFileSync17
 } from "node:fs";
 import { tmpdir } from "node:os";
 import { join as join19, resolve as resolve8 } from "node:path";
@@ -9880,6 +9909,14 @@ var withCodexSandbox = (agent, gitCommonDir) => {
     return line;
   return `${line} --sandbox workspace-write --add-dir ${shq(gitCommonDir)} -c sandbox_workspace_write.network_access=true`;
 };
+var mainCheckoutOf = (gitCommonDir, cwd) => {
+  const dir = gitCommonDir.replace(/\/+$/, "");
+  if (!dir.endsWith("/.git"))
+    return null;
+  const main = dir.slice(0, -"/.git".length);
+  return main && main !== cwd.replace(/\/+$/, "") ? main : null;
+};
+var claudeAddDirFlag = (mainCheckout) => mainCheckout ? ` --add-dir=${shq(mainCheckout)}` : "";
 var shq = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
 
 // src/runners/exec.ts
@@ -9904,21 +9941,23 @@ var agentShellCommand = (o) => {
   const prompt = `"$(cat ${shq2(o.promptFile)})"`;
   const agent = o.agent?.trim();
   if (agent)
-    return `${sandboxedAgent(agent, o.sandbox)} ${prompt}`;
+    return `${sandboxedAgent(agent, o.sandbox, o.mainCheckout)} ${prompt}`;
   const model = o.model ? ` --model ${shq2(o.model)}` : "";
   const effort = o.effort ? ` --effort ${shq2(o.effort)}` : "";
-  return `${sandboxedAgent("claude", o.sandbox)}${mcpConfigFlag(o)} --permission-mode ${shq2(o.permissionMode)}${model}${effort} ${prompt}`;
+  return `${sandboxedAgent("claude", o.sandbox, o.mainCheckout)}${hookSettingsFlag(o)}${mcpConfigFlag(o)} --permission-mode ${shq2(o.permissionMode)}${model}${effort} ${prompt}`;
 };
-var sandboxedAgent = (agent, sandbox) => {
-  if (!sandbox)
-    return agent;
+var sandboxedAgent = (agent, sandbox, mainCheckout) => {
   const kind = sandboxAgentKind(agent);
+  const line = kind === "claude" ? `${agent}${claudeAddDirFlag(mainCheckout)}` : agent;
+  if (!sandbox)
+    return line;
   if (kind === "claude")
-    return `env -u SLEDS_TOKEN ${agent} --settings ${shq2(sandbox.settingsFile)}`;
+    return `env -u SLEDS_TOKEN ${line} --settings ${shq2(sandbox.settingsFile)}`;
   if (kind === "codex")
     return `env -u SLEDS_TOKEN ${withCodexSandbox(agent, sandbox.gitCommonDir)}`;
   return agent;
 };
+var hookSettingsFlag = (o) => o.settingsFile && !o.sandbox ? ` --settings ${shq2(o.settingsFile)}` : "";
 var mcpConfigFlag = (o) => o.mcpConfig ? ` --mcp-config ${shq2(o.mcpConfig)}${o.strictMcp ? " --strict-mcp-config" : ""}` : "";
 var defaultSpawnDetached = (cmd, args, o) => {
   const child = spawn(cmd, [...args], { cwd: o.cwd, detached: true, stdio: "ignore" });
@@ -9971,6 +10010,15 @@ var tailText = (s, bytes = 4096) => {
   return nl >= 0 && nl < cut.length - 1 ? cut.slice(nl + 1) : cut;
 };
 
+// src/runners/types.ts
+var watchTarget = (h) => ({
+  runner: h.runner,
+  handle: h.id,
+  ...h.log ? { log: h.log } : {},
+  ...h.group ? { group: h.group } : {}
+});
+var isRunnerKey = (key) => /^(?:[1-9]|esc)$/.test(key);
+
 // src/runners/cmux.ts
 var CMUX_APP_BIN = "/Applications/cmux.app/Contents/Resources/bin/cmux";
 var resolveCmuxBin = (exists = existsSync11, path = process.env.PATH ?? "") => {
@@ -10112,6 +10160,10 @@ var cmuxProbeReason = (r) => {
 };
 var cmuxAuthRefused = (r) => r.status !== 0 && /\b(auth_required|unauthorized|authentication required|invalid password)\b/i.test(`${r.stderr}
 ${r.stdout}`);
+var cmuxNeedsForce = (r) => r.status !== 0 && /\bconfirmation_required\b|--force\b/i.test(`${r.stderr}
+${r.stdout}`);
+var CMUX_LIST_TRIES = 20;
+var CMUX_LIST_WAIT_MS = 250;
 var CMUX_SETTLE_MS = 300;
 var CMUX_ENTER_RETRIES = 2;
 var PROMPT_LINE = /^[\s│|]*[>❯›]\s?(.*)$/;
@@ -10165,6 +10217,12 @@ function cmuxRunner(exec, deps = {}) {
     return pw ? run(args) : r;
   };
   const failed = cmuxFailure;
+  const closeWorkspace = (id) => {
+    const c = cmux(["close-workspace", "--workspace", id]);
+    if (!cmuxNeedsForce(c))
+      return c.status === 0;
+    return cmux(["close-workspace", "--workspace", id, "--force"]).status === 0;
+  };
   return {
     name: "cmux",
     makesWorktree: false,
@@ -10204,19 +10262,29 @@ function cmuxRunner(exec, deps = {}) {
         const why = failed(r);
         const l = cmux(["--id-format", "both", "list-workspaces"]);
         const stray = l.status === 0 ? cmuxIdForName(l.stdout, o.name) : null;
-        const left = l.status !== 0 || (stray ? cmux(["close-workspace", "--workspace", stray]).status !== 0 : namedLines(l.stdout, o.name).length > 0);
+        const left = l.status !== 0 || (stray ? !closeWorkspace(stray) : namedLines(l.stdout, o.name).length > 0);
         throw new Error(`cmux workspace create ${o.name} failed: ${why}${left ? `; ${UNWATCHED}` : ""}`);
       }
       let id = parseCmuxWorkspace(r.stdout);
       const ref = id ? null : parseCmuxRef(r.stdout);
       let closed = false;
       if (ref) {
-        const l = cmux(["--id-format", "both", "list-workspaces"]);
-        if (l.status === 0) {
-          id = cmuxIdForRef(l.stdout, ref, o.name);
-          const stray = id ? null : cmuxIdForName(l.stdout, o.name);
+        let listed = null;
+        for (let i = 0;i < CMUX_LIST_TRIES; i++) {
+          if (i > 0)
+            sleep(CMUX_LIST_WAIT_MS);
+          const l = cmux(["--id-format", "both", "list-workspaces"]);
+          if (l.status !== 0)
+            continue;
+          listed = l.stdout;
+          if (namedLines(l.stdout, o.name).length > 0)
+            break;
+        }
+        if (listed !== null) {
+          id = cmuxIdForRef(listed, ref, o.name);
+          const stray = id ? null : cmuxIdForName(listed, o.name);
           if (stray)
-            closed = cmux(["close-workspace", "--workspace", stray]).status === 0;
+            closed = closeWorkspace(stray);
         }
       }
       if (!id) {
@@ -10277,6 +10345,13 @@ function cmuxRunner(exec, deps = {}) {
         return;
       return pending() ? `the Enter was swallowed; pressed it ${again} more times and the text is still in the input` : `the Enter was swallowed; pressed it again${again > 1 ? ` (${again}×)` : ""}`;
     },
+    sendKey(h, key) {
+      if (!isRunnerKey(key))
+        throw new Error(`cmux send-key ${h.id}: no key ${JSON.stringify(key)}`);
+      const r = cmux(["send-key", "--workspace", h.id, key === "esc" ? "escape" : key]);
+      if (r.status !== 0)
+        throw new Error(`cmux send-key ${h.id} failed: ${failed(r)}`);
+    },
     stop(h) {
       cmux(["close-workspace", "--workspace", h.id]);
       if (!h.group)
@@ -10327,12 +10402,12 @@ init_server();
 init_config();
 import {
   appendFileSync as appendFileSync2,
-  chmodSync as chmodSync3,
-  mkdirSync as mkdirSync11,
-  readFileSync as readFileSync12,
+  chmodSync as chmodSync4,
+  mkdirSync as mkdirSync12,
+  readFileSync as readFileSync13,
   existsSync as realExists,
-  rmSync as rmSync3,
-  writeFileSync as writeFileSync12
+  rmSync as rmSync4,
+  writeFileSync as writeFileSync13
 } from "node:fs";
 import { hostname as hostname2 } from "node:os";
 import { join as join15, resolve as resolve7 } from "node:path";
@@ -10347,7 +10422,7 @@ function beatBody(state, flags, host = {}, cap = {}) {
     name: flags.name,
     os: host.os ?? process.platform,
     runner: flags.runner,
-    version: host.version ?? "0.1.38" ?? "dev",
+    version: host.version ?? "0.1.40" ?? "dev",
     running: live.length,
     items: live.slice(0, BEAT_ITEMS).map((r) => `${r.item}/${r.node}`),
     ...cap.atOnce !== undefined ? { atOnce: cap.atOnce } : {},
@@ -11092,13 +11167,40 @@ function jiraFromEnv(epic, env = process.env) {
 // src/engine/loop.ts
 init_src();
 
-// src/runners/types.ts
-var watchTarget = (h) => ({
-  runner: h.runner,
-  handle: h.id,
-  ...h.log ? { log: h.log } : {},
-  ...h.group ? { group: h.group } : {}
-});
+// src/commands/permissionEvent.ts
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync10, readFileSync as readFileSync10, renameSync as renameSync6, rmSync as rmSync3, writeFileSync as writeFileSync11 } from "node:fs";
+
+// src/commands/seatEvent.ts
+init_config();
+init_meter();
+var HOOK_STDIN_TIMEOUT_MS = 1000;
+var isObject11 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var notificationType = (text) => {
+  try {
+    const raw = JSON.parse(text);
+    if (!isObject11(raw))
+      return;
+    return typeof raw.notification_type === "string" ? raw.notification_type : undefined;
+  } catch {
+    return;
+  }
+};
+
+// src/commands/permissionEvent.ts
+var isObject12 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var readPermissionMark = (file) => {
+  try {
+    const raw = JSON.parse(readFileSync10(file, "utf8"));
+    if (!isObject12(raw) || typeof raw.at !== "number")
+      return null;
+    return { message: typeof raw.message === "string" ? raw.message : "", at: raw.at };
+  } catch {
+    return null;
+  }
+};
+var clearPermissionMark = (file) => {
+  rmSync3(file, { force: true });
+};
 
 // src/engine/answerer.ts
 init_src();
@@ -11250,6 +11352,10 @@ function looksOf(s) {
   const l = s;
   return l && typeof l.openLook === "function" && typeof l.clearLook === "function" ? s : null;
 }
+function permissionsOf(s) {
+  const p = s;
+  return p && typeof p.openPermission === "function" && typeof p.clearPermission === "function" && typeof p.decisionOf === "function" ? s : null;
+}
 var FAIL_LOG_MAX = 2000;
 var UNREACHABLE2 = "SLEDS unreachable";
 function keysIn(states, state) {
@@ -11808,6 +11914,27 @@ function sledsSource(client, o) {
         throw new Error(serverMessage(r));
       return r.json.cleared === true;
     },
+    async openPermission(runId, p, engine) {
+      const r = await client.postFull("/proxy/run", {
+        runId,
+        engine,
+        event: { kind: "permission", md: p.md, about: { options: p.options } }
+      });
+      if (!r)
+        throw new Error(`${UNREACHABLE2} — the permission not raised`);
+      if (r.status >= 300 || !r.json || r.json.ok === false)
+        throw new Error(serverMessage(r));
+      const decisionId = str6(r.json.decisionId);
+      return { opened: r.json.opened === true, ...decisionId ? { decisionId } : {} };
+    },
+    async clearPermission(runId, why, engine) {
+      const r = await client.postFull("/proxy/run", { runId, engine, clearPermission: { why } });
+      if (!r)
+        throw new Error(`${UNREACHABLE2} — the permission not cleared`);
+      if (r.status >= 300 || !r.json || r.json.ok === false)
+        throw new Error(serverMessage(r));
+      return r.json.cleared === true;
+    },
     async decisionOf(item, decisionId) {
       const route = await routeOf(item);
       const decisions = Array.isArray(route?.decisions) ? route.decisions.filter(isObject8) : [];
@@ -11939,6 +12066,63 @@ function askedAndStopped(screen) {
   const last = (paras[paras.length - 1] ?? "").replace(/\s*\n\s*/g, " ");
   return ASKS.test(last) || CONFIRMS.test(last);
 }
+var DIALOG_ASKS = /^Do you want to .+\?$/;
+var DIALOG_OPTION = /^(❯\s*)?(\d)\.\s+(.+)$/;
+var DIALOG_FOOTER = /^(?:esc to |tab to |enter to |ctrl\+)/i;
+var unbox = (line) => line.trimEnd().replace(/^\s*[│┃║]\s?/, "").replace(/\s*[│┃║]$/, "");
+function permissionDialog(screen) {
+  const raw = screen.split(`
+`);
+  const lines = raw.map(unbox);
+  let q = -1;
+  for (let i = lines.length - 1;i >= 0; i--)
+    if (DIALOG_ASKS.test(lines[i].trim())) {
+      q = i;
+      break;
+    }
+  if (q < 0)
+    return null;
+  const options = [];
+  let cursors = 0;
+  let i = q + 1;
+  for (;i < lines.length; i++) {
+    const t = lines[i].trim();
+    const m = DIALOG_OPTION.exec(t);
+    if (m) {
+      if (m[2] !== String(options.length + 1))
+        return null;
+      if (m[1])
+        cursors++;
+      options.push({ key: m[2], label: m[3].replace(/\s*\(esc\)$/i, "") });
+    } else if (t && options.length && !isRule(raw[i]) && !isPrompt(t) && !isFooter(t) && !DIALOG_FOOTER.test(t)) {
+      const last = options[options.length - 1];
+      last.label = `${last.label} ${t.replace(/\s*\(esc\)$/i, "")}`;
+    } else
+      break;
+  }
+  if (options.length < 2 || cursors !== 1)
+    return null;
+  for (;i < lines.length; i++) {
+    const t = lines[i].trim();
+    if (t && !isRule(raw[i]) && !DIALOG_FOOTER.test(t) && !isFooter(t))
+      return null;
+  }
+  let from = 0;
+  for (let j = q - 1;j >= 0; j--) {
+    const t = lines[j].trim();
+    if (isRule(raw[j]) || /^⏺/.test(t) || /^⎿/.test(t)) {
+      from = j + 1;
+      break;
+    }
+  }
+  const body = lines.slice(from, q + 1);
+  const indent = Math.min(...body.filter((l) => l.trim()).map((l) => /^\s*/.exec(l)[0].length));
+  const text = body.map((l) => l.slice(indent)).join(`
+`).replace(/\n{3,}/g, `
+
+`).trim();
+  return { text, options };
+}
 var PROVIDER_FAILURES = [
   ["connection lost", /\bconnection (?:lost|error)\b/i],
   ["credit balance too low", /\bcredit balance (?:is )?too low\b/i],
@@ -11961,7 +12145,7 @@ function providerFailure(screen) {
 
 // src/engine/worktree.ts
 init_src();
-import { appendFileSync, existsSync as existsSync12, mkdirSync as mkdirSync10 } from "node:fs";
+import { appendFileSync, existsSync as existsSync12, mkdirSync as mkdirSync11 } from "node:fs";
 import { dirname as dirname11, isAbsolute, join as join14 } from "node:path";
 function worktreePath(repoPath, name) {
   return join14(repoPath, ".worktrees", name);
@@ -11987,7 +12171,7 @@ function defaultBranch(exec, repoPath) {
 var realWorktreeFs = {
   exists: existsSync12,
   append: (p, text) => {
-    mkdirSync10(dirname11(p), { recursive: true });
+    mkdirSync11(dirname11(p), { recursive: true });
     appendFileSync(p, text);
   }
 };
@@ -12213,6 +12397,15 @@ function sandboxFor(d, name, cwd) {
     throw new Error("sessions are sandboxed, but nothing writes their settings — not started");
   return { sandbox: d.writeSandboxSettings(name, cwd) };
 }
+function hooksFor(d, name) {
+  if (d.sandbox || !d.writeHookSettings)
+    return {};
+  return { settingsFile: d.writeHookSettings(name) };
+}
+function mainCheckoutFor(d, cwd) {
+  const main = d.mainCheckoutOf?.(cwd);
+  return main ? { mainCheckout: main } : {};
+}
 function engineMcpConfigFor(d, name, runToken, at, cwd) {
   if (d.source.name !== "sleds" || d.agent?.trim() || !d.writeMcpConfig)
     return;
@@ -12358,6 +12551,7 @@ async function tickOnce(d) {
       }
       continue;
     } else if (pr) {
+      await dropPermission(d, run, "the session opened its PR");
       const outcome = { kind: "pr", ref: pr.url };
       try {
         await d.source.report(claim, outcome, d.engine);
@@ -12381,6 +12575,7 @@ async function tickOnce(d) {
       }
     }
     if (status === "exited") {
+      await dropPermission(d, run, "the session exited");
       let log = "";
       try {
         log = runner.read(run.handle);
@@ -12430,6 +12625,11 @@ async function tickOnce(d) {
         }
       }
     }
+    if (await settlePermission(d, runner, run, shown)) {
+      idle = false;
+      asked = false;
+      failing = null;
+    }
     const retry = failing !== null && (run.provider?.tries ?? 0) < PROVIDER_RETRIES;
     if (idle || failing || needsHeartbeat(run.leaseUntil, d.now(), d.leaseMin)) {
       let beat;
@@ -12680,6 +12880,8 @@ async function tickOnce(d) {
         ...launch.agent ? { agent: launch.agent } : {},
         ...mcpConfig ? { mcpConfig, ...d.strictMcp ? { strictMcp: true } : {} } : {},
         ...sandboxFor(d, name, worktree),
+        ...hooksFor(d, name),
+        ...mainCheckoutFor(d, worktree),
         ...claim.group ? { group: claim.group } : {}
       };
     } catch (e) {
@@ -12834,6 +13036,115 @@ function parkQuestion(screen, idleMin) {
 function askedQuestion(screen) {
   return `The session stopped and is waiting on an answer, with no PR. ${lastMessage(screen)}`;
 }
+var MARK_OPTIONS = ["1 · Allow once", "esc · Deny"];
+function permissionKey(answer) {
+  const m = /^\s*(\d|esc)\s*·/i.exec(answer);
+  return m ? m[1].toLowerCase() : null;
+}
+async function settlePermission(d, runner, run, shown) {
+  const perms = permissionsOf(d.source);
+  if (!perms || !run.runId)
+    return false;
+  const at = ref(run);
+  const markFile = d.permissionMark?.(sessionName(run.item, run.node));
+  const dialog = runner.readsSession ? permissionDialog(shown) : null;
+  const p = run.permission;
+  if (p) {
+    const gone = runner.readsSession && (p.onScreen ? !dialog : (run.seenAt ?? 0) > p.at);
+    let now;
+    try {
+      now = await perms.decisionOf(run.item, p.decisionId);
+    } catch (e) {
+      d.log(`${at}: could not read the permission decision, asking next tick: ${message(e)}`);
+      return true;
+    }
+    if (now?.state === "answered" && now.answer) {
+      if (gone)
+        d.log(`${at}: the permission was answered after its dialog closed — not pressed`);
+      else if (!pressAnswer(d, runner, run, p.options, now.answer))
+        return true;
+      run.permission = undefined;
+      run.answeredAt = d.now();
+      if (markFile)
+        clearPermissionMark(markFile);
+      return true;
+    }
+    if (now?.state !== "open" && now?.state !== "escalated") {
+      run.permission = undefined;
+      return false;
+    }
+    if (!gone)
+      return true;
+    try {
+      await perms.clearPermission(run.runId, "the dialog closed in the terminal", d.engine);
+    } catch (e) {
+      d.log(`${at}: could not clear the permission, trying next tick: ${message(e)}`);
+      return true;
+    }
+    d.log(`${at}: the permission dialog closed before an answer — cleared`);
+    run.permission = undefined;
+    return false;
+  }
+  const mark = markFile ? readPermissionMark(markFile) : null;
+  if (!dialog && !mark)
+    return false;
+  if (!dialog && runner.readsSession && !run.seenTicks)
+    return false;
+  const options = dialog ? dialog.options.map((o) => `${o.key} · ${o.label}`) : MARK_OPTIONS;
+  const md = dialog?.text || mark?.message || "The session stopped at a permission dialog.";
+  let opened;
+  try {
+    opened = await perms.openPermission(run.runId, { md, options }, d.engine);
+  } catch (e) {
+    d.log(`${at}: could not raise the permission dialog, trying next tick: ${message(e)}`);
+    return true;
+  }
+  if (!opened.decisionId)
+    return true;
+  run.permission = {
+    decisionId: opened.decisionId,
+    options,
+    at: d.now(),
+    ...dialog ? { onScreen: true } : {}
+  };
+  if (markFile)
+    clearPermissionMark(markFile);
+  d.log(`${at}: stopped at a permission dialog — it waits for a person (${runner.watchHint(run.handle)})`);
+  return true;
+}
+function pressAnswer(d, runner, run, options, answer) {
+  const at = ref(run);
+  const key = permissionKey(answer);
+  const offered = key !== null && options.some((o) => permissionKey(o) === key);
+  try {
+    if (key !== null && offered) {
+      if (runner.sendKey)
+        runner.sendKey(run.handle, key);
+      else
+        runner.send(run.handle, key);
+      d.log(`${at}: the permission is answered — pressed ${key}; the session goes on`);
+    } else {
+      runner.sendKey?.(run.handle, "esc");
+      const note = runner.send(run.handle, answer);
+      d.log(`${at}: the permission is answered in words — Esc, then typed in${note ? ` (${note})` : ""}`);
+    }
+    return true;
+  } catch (e) {
+    d.log(`${at}: could not press the permission's answer, trying next tick: ${message(e)}`);
+    return false;
+  }
+}
+async function dropPermission(d, run, why) {
+  const perms = permissionsOf(d.source);
+  if (!run.permission || !perms || !run.runId)
+    return;
+  try {
+    await perms.clearPermission(run.runId, why, d.engine);
+  } catch (e) {
+    d.log(`${ref(run)}: could not clear the permission (${why}): ${message(e)}`);
+  }
+  run.permission = undefined;
+}
 var STILL_TICKS = 2;
 function lastMessage(screen) {
   const shown = stripTuiChrome(screen);
@@ -13267,6 +13578,8 @@ async function startAnswerer(d, answers, run) {
       ...launchOptions(launch),
       ...mcpConfig ? { mcpConfig, ...d.strictMcp ? { strictMcp: true } : {} } : {},
       ...sandboxFor(d, name, run.handle.cwd),
+      ...hooksFor(d, name),
+      ...mainCheckoutFor(d, run.handle.cwd),
       ...run.group ? { group: run.group } : {}
     });
   } catch (e) {
@@ -13441,7 +13754,9 @@ async function startDraft(d, claim, why, state, started, finished) {
       permissionMode: d.permissionMode,
       ...launchOptions(launch),
       ...mcpConfig ? { mcpConfig, ...d.strictMcp ? { strictMcp: true } : {} } : {},
-      ...sandboxFor(d, name, worktree)
+      ...sandboxFor(d, name, worktree),
+      ...hooksFor(d, name),
+      ...mainCheckoutFor(d, worktree)
     });
   } catch (e) {
     d.log(`${at}: could not start the drafter: ${message(e)}`);
@@ -14214,6 +14529,8 @@ function startResolver(d, run, e, answer) {
       ...launchOptions(launch),
       ...run.mcpConfig ? { mcpConfig: run.mcpConfig, ...d.strictMcp ? { strictMcp: true } : {} } : {},
       ...sandboxFor(d, name, run.handle.cwd),
+      ...hooksFor(d, name),
+      ...mainCheckoutFor(d, run.handle.cwd),
       ...run.group ? { group: run.group } : {}
     });
   } catch (err) {
@@ -14288,7 +14605,9 @@ async function startEventAnswerer(d, answers, state, dec, decided) {
       permissionMode: d.permissionMode,
       ...launchOptions(launch),
       ...mcpConfig ? { mcpConfig, ...d.strictMcp ? { strictMcp: true } : {} } : {},
-      ...sandboxFor(d, name, worktree)
+      ...sandboxFor(d, name, worktree),
+      ...hooksFor(d, name),
+      ...mainCheckoutFor(d, worktree)
     });
   } catch (e) {
     d.log(`${at}: could not start the ${KIND_SAYS[kind]} answerer — it goes to a person: ${message(e)}`);
@@ -14508,7 +14827,7 @@ function commandRunner(template, deps = {}) {
 }
 
 // src/runners/conductor.ts
-import { readFileSync as readFileSync10 } from "node:fs";
+import { readFileSync as readFileSync11 } from "node:fs";
 var obj = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : null;
 var str8 = (v) => typeof v === "string" && v.length > 0 ? v : null;
 var CONDUCTOR_API = "https://api.conductor.build";
@@ -14606,7 +14925,7 @@ var ids = (h) => {
 var ENDED = new Set(["archived", "deleted"]);
 function conductorRunner(exec, deps = {}) {
   const env = deps.env ?? process.env;
-  const readFile = deps.readFile ?? ((p) => readFileSync10(p, "utf8"));
+  const readFile = deps.readFile ?? ((p) => readFileSync11(p, "utf8"));
   const now = deps.now ?? Date.now;
   const base = env.CONDUCTOR_API_URL?.trim() || CONDUCTOR_API;
   const key = () => {
@@ -14725,8 +15044,8 @@ ${renderTranscript(messages)}`;
 var headlessScript = (o, log) => {
   const prompt = `"$(cat ${shq2(o.promptFile)})"`;
   const agent = o.agent?.trim();
-  const cmd = agent ? `${sandboxedAgent(agent, o.sandbox)} ${prompt}` : [
-    `${sandboxedAgent("claude", o.sandbox)} -p`,
+  const cmd = agent ? `${sandboxedAgent(agent, o.sandbox, o.mainCheckout)} ${prompt}` : [
+    `${sandboxedAgent("claude", o.sandbox, o.mainCheckout)} -p`,
     prompt,
     ...o.mcpConfig ? [mcpConfigFlag(o).trim()] : [],
     "--output-format stream-json --verbose",
@@ -14797,7 +15116,7 @@ function headlessRunner(deps = {}) {
 
 // src/runners/managed.ts
 init_src();
-import { readFileSync as readFileSync11 } from "node:fs";
+import { readFileSync as readFileSync12 } from "node:fs";
 var obj2 = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : null;
 var str9 = (v) => typeof v === "string" && v.length > 0 ? v : null;
 var ANTHROPIC_API = "https://api.anthropic.com";
@@ -14933,7 +15252,7 @@ var statusLine2 = (session, events, now) => {
 var YES = /^\s*(?:y|yes|allow|ok|okay|go|go ahead|approve[d]?)\b/i;
 function managedRunner(exec, deps = {}) {
   const env = deps.env ?? process.env;
-  const readFile = deps.readFile ?? ((p) => readFileSync11(p, "utf8"));
+  const readFile = deps.readFile ?? ((p) => readFileSync12(p, "utf8"));
   const now = deps.now ?? Date.now;
   const base = env.ANTHROPIC_BASE_URL?.trim() || ANTHROPIC_API;
   const need = (name, where) => {
@@ -15103,7 +15422,7 @@ ${renderTranscript(eventMessages(all))}`;
 }
 
 // src/runners/orca.ts
-import { writeFileSync as writeFileSync11 } from "node:fs";
+import { writeFileSync as writeFileSync12 } from "node:fs";
 var obj3 = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : null;
 var str10 = (v) => typeof v === "string" && v.length > 0 ? v : null;
 var parseOrcaJson = (stdout) => {
@@ -15162,7 +15481,7 @@ var orcaTerminalLive = (status, stdout) => {
 };
 var launcherPath2 = (promptFile) => `${promptFile.replace(/\.md$/, "")}.orca.sh`;
 function orcaRunner(exec, deps = {}) {
-  const writeFile = deps.writeFile ?? ((p, t) => writeFileSync11(p, t, { mode: 384 }));
+  const writeFile = deps.writeFile ?? ((p, t) => writeFileSync12(p, t, { mode: 384 }));
   const orca = (args, what) => {
     const r = exec("orca", args);
     const env = parseOrcaJson(r.stdout);
@@ -15302,6 +15621,14 @@ function tmuxRunner(exec) {
       }
       exec("tmux", ["send-keys", "-t", tmuxPane(h.id), "Enter"]);
     },
+    sendKey(h, key) {
+      if (!isRunnerKey(key))
+        throw new Error(`tmux send-keys ${h.id}: no key ${JSON.stringify(key)}`);
+      const r = exec("tmux", ["send-keys", "-t", tmuxPane(h.id), key === "esc" ? "Escape" : key]);
+      if (r.status !== 0) {
+        throw new Error(`tmux send-keys ${h.id} failed: ${r.stderr.trim() || `exit ${r.status}`}`);
+      }
+    },
     stop(h) {
       exec("tmux", ["kill-session", "-t", tmuxSession(h.id)]);
     },
@@ -15727,7 +16054,7 @@ function realPidAlive(pid) {
 function memberMcpConfigs(o, cwd) {
   const read = o.readJson ?? ((p) => {
     try {
-      return JSON.parse(readFileSync12(p, "utf8"));
+      return JSON.parse(readFileSync13(p, "utf8"));
     } catch {
       return null;
     }
@@ -15769,6 +16096,9 @@ function engineDeps(o, flags, source, runner, stateName) {
   const repo = flags.repo ? resolve7(cwd, flags.repo) : undefined;
   const reposDirs = splitReposDirs(flags.reposDir).map((d) => resolve7(cwd, d));
   const { branch, prTitle } = flags;
+  const hooksDir = join15(stateDir, "hooks");
+  const permissionMark = (name) => join15(hooksDir, `${name}.permission.json`);
+  const withHook = (name, settings) => applyPermissionHook(settings, [...o.sledsArgv ?? ["sleds"], "permission-event", "--mark", permissionMark(name)].map(shq2).join(" "));
   return {
     source,
     runner,
@@ -15793,18 +16123,35 @@ function engineDeps(o, flags, source, runner, stateName) {
       writeSandboxSettings: o.writeSandboxSettings ?? ((name, cwd) => {
         const gitCommonDir = gitCommonDirOf(exec, cwd);
         const dir = join15(stateDir, "sandbox");
-        mkdirSync11(dir, { recursive: true, mode: 448 });
+        mkdirSync12(dir, { recursive: true, mode: 448 });
         const p = join15(dir, `${name}.json`);
-        const settings = engineSandboxSettings(o.home, o.env ?? process.env, gitCommonDir, [
+        const walls = engineSandboxSettings(o.home, o.env ?? process.env, gitCommonDir, [
           ...SANDBOX_DEFAULT_ALLOW,
           ...flags.sandboxAllow ?? []
         ]);
-        writeFileSync12(p, `${JSON.stringify(settings, null, 2)}
+        const settings = withHook(name, { ...walls });
+        writeFileSync13(p, `${JSON.stringify(settings, null, 2)}
 `, { mode: 384 });
-        chmodSync3(p, 384);
+        chmodSync4(p, 384);
         return { settingsFile: p, gitCommonDir };
       })
     } : {},
+    writeHookSettings: (name) => {
+      mkdirSync12(hooksDir, { recursive: true, mode: 448 });
+      const p = join15(hooksDir, `${name}.json`);
+      writeFileSync13(p, `${JSON.stringify(withHook(name, {}), null, 2)}
+`, { mode: 384 });
+      chmodSync4(p, 384);
+      return p;
+    },
+    permissionMark,
+    mainCheckoutOf: o.mainCheckoutOf ?? ((cwd) => {
+      try {
+        return mainCheckoutOf(gitCommonDirOf(exec, cwd), cwd);
+      } catch {
+        return null;
+      }
+    }),
     ...branch ? { branchOf: (claim) => branchFor(branch, claim) } : {},
     ...prTitle ? { prTitleOf: (claim) => prTitleFor(prTitle, claim) } : {},
     now: o.now ?? Date.now,
@@ -15819,7 +16166,7 @@ function engineDeps(o, flags, source, runner, stateName) {
     }),
     writeMcpConfig: o.writeMcpConfig ?? ((name, runToken, worktree) => {
       const dir = join15(stateDir, "mcp");
-      mkdirSync11(dir, { recursive: true, mode: 448 });
+      mkdirSync12(dir, { recursive: true, mode: 448 });
       const p = join15(dir, `${name}.json`);
       let others = {};
       if (flags.strictMcp && flags.mcpAllow?.length) {
@@ -15830,16 +16177,16 @@ function engineDeps(o, flags, source, runner, stateName) {
         if (r.refused.length)
           log(`${name}: MCP pass-through refused ${r.refused.join(", ")} — the run's sleds server is the only SLEDS one`);
       }
-      writeFileSync12(p, pinOrg2(engineMcpConfig(runToken, others), mcpOrg), { mode: 384 });
-      chmodSync3(p, 384);
+      writeFileSync13(p, pinOrg2(engineMcpConfig(runToken, others), mcpOrg), { mode: 384 });
+      chmodSync4(p, 384);
       return p;
     }),
-    removeMcpConfig: o.removeMcpConfig ?? ((p) => rmSync3(p, { force: true })),
+    removeMcpConfig: o.removeMcpConfig ?? ((p) => rmSync4(p, { force: true })),
     writePrompt: o.writePrompt ?? ((name, text) => {
       const dir = join15(stateDir, "prompts");
-      mkdirSync11(dir, { recursive: true, mode: 448 });
+      mkdirSync12(dir, { recursive: true, mode: 448 });
       const p = join15(dir, `${name}.md`);
-      writeFileSync12(p, text, { mode: 384 });
+      writeFileSync13(p, text, { mode: 384 });
       return p;
     }),
     ensureWorktree: (e, repoPath, branch, path, base, install) => ensureWorktree(e, repoPath, branch, path, base, o.worktreeFs ?? { ...realWorktreeFs, exists }, { ...install ? { command: install } : {}, log: o.log ?? console.log }),
@@ -15923,7 +16270,7 @@ async function driveEngine(o, flags, deps, until = {}) {
     runner: deps.runner.name,
     atOnce: flags.atOnce,
     interval: flags.interval,
-    cliVersion: "0.1.38"
+    cliVersion: "0.1.40"
   };
   const beat = (checkedAt) => {
     const m = deps.machine;
@@ -16215,7 +16562,7 @@ async function enginePauseCmd(o) {
     result.released++;
     result.kept.push(run.handle.cwd);
     if (run.mcpConfig)
-      rmSync3(run.mcpConfig, { force: true });
+      rmSync4(run.mcpConfig, { force: true });
   }
   if (gone.size)
     writeState(file, { ...state, runs: state.runs.filter((r) => !gone.has(r)) });
@@ -16237,19 +16584,19 @@ init_config();
 init_state();
 import {
   existsSync as existsSync14,
-  mkdirSync as mkdirSync13,
-  readFileSync as readFileSync13,
+  mkdirSync as mkdirSync14,
+  readFileSync as readFileSync14,
   readdirSync as readdirSync2,
   realpathSync,
-  rmSync as rmSync5,
-  writeFileSync as writeFileSync14
+  rmSync as rmSync6,
+  writeFileSync as writeFileSync15
 } from "node:fs";
 import { hostname as hostname3 } from "node:os";
 import { basename as basename4, dirname as dirname12, isAbsolute as isAbsolute2, join as join18 } from "node:path";
 
 // src/schedule.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
-import { existsSync as existsSync13, mkdirSync as mkdirSync12, rmSync as rmSync4, writeFileSync as writeFileSync13 } from "node:fs";
+import { existsSync as existsSync13, mkdirSync as mkdirSync13, rmSync as rmSync5, writeFileSync as writeFileSync14 } from "node:fs";
 import { join as join16 } from "node:path";
 var REVERT_LABEL = "ai.sleds.revert";
 var defaultExec2 = (cmd, args) => {
@@ -16297,9 +16644,9 @@ var scheduleRevert = (d, deadlineMs) => {
   if (d.platform === "darwin") {
     const p = plistPath(d.home);
     try {
-      mkdirSync12(join16(d.home, "Library", "LaunchAgents"), { recursive: true });
+      mkdirSync13(join16(d.home, "Library", "LaunchAgents"), { recursive: true });
       d.exec("launchctl", ["unload", p]);
-      writeFileSync13(p, buildLaunchdPlist(d.sledsArgv, deadline));
+      writeFileSync14(p, buildLaunchdPlist(d.sledsArgv, deadline));
       const r = d.exec("launchctl", ["load", p]);
       if (r.ok)
         return { kind: "launchd", detail: `launchd agent ${REVERT_LABEL}` };
@@ -16328,7 +16675,7 @@ var cancelRevert = (d, kind) => {
     const p = plistPath(d.home);
     if (existsSync13(p)) {
       d.exec("launchctl", ["unload", p]);
-      rmSync4(p, { force: true });
+      rmSync5(p, { force: true });
     }
   }
   if (kind === "systemd" || d.platform === "linux") {
@@ -16504,7 +16851,7 @@ function readEngines(dir, suffix, manager, parse) {
     const path = join18(dir, name);
     let parsed;
     try {
-      parsed = parse(readFileSync13(path, "utf8"), name);
+      parsed = parse(readFileSync14(path, "utf8"), name);
     } catch {
       parsed = null;
     }
@@ -16558,7 +16905,7 @@ function engineInstall(o) {
   const stateDir = seatStateDir(orgStateDir(baseDir, parsed.org), seat);
   const label = engineLabel(parsed.name, parsed.org, seat);
   const logPath = engineLogPath(stateDir, parsed.name);
-  mkdirSync13(stateDir, { recursive: true, mode: 448 });
+  mkdirSync14(stateDir, { recursive: true, mode: 448 });
   const sledsArgv = stableArgv(o.sledsArgv, o.realpath);
   const execPath = sledsArgv[0] ?? process.execPath;
   const agentEnv = {
@@ -16571,7 +16918,7 @@ function engineInstall(o) {
   if (platform === "linux")
     return installUnit({ o, parsed, label, sledsArgv, env: agentEnv, logPath, exec });
   const plist = enginePlistPath(o.home, parsed.name, parsed.org, seat);
-  mkdirSync13(dirname12(plist), { recursive: true });
+  mkdirSync14(dirname12(plist), { recursive: true });
   if (existsSync14(plist))
     exec("launchctl", ["unload", plist]);
   for (const other of installedEngines(o.home)) {
@@ -16580,7 +16927,7 @@ function engineInstall(o) {
     if (engineArg(other.programArgs, "name") !== parsed.name)
       continue;
     exec("launchctl", ["unload", other.plist]);
-    rmSync5(other.plist, { force: true });
+    rmSync6(other.plist, { force: true });
     log(`replaced ${other.label}, this engine as installed before`);
   }
   const legacy = enginePlistPath(o.home, parsed.name);
@@ -16588,12 +16935,12 @@ function engineInstall(o) {
     const cfg = readConfig(o.home);
     if (org.sole || parsed.org === (cfg.activeOrg ?? cfg.org?.slug)) {
       exec("launchctl", ["unload", legacy]);
-      rmSync5(legacy, { force: true });
+      rmSync6(legacy, { force: true });
       log(`replaced ${engineLabel(parsed.name)}, the engine installed before orgs`);
     } else
       log(`note: ${engineLabel(parsed.name)} (installed before orgs) still runs — \`sleds engine uninstall --name ${parsed.name}\` removes it if it was this org's`);
   }
-  writeFileSync14(plist, buildEnginePlist({ label, sledsArgv, args: parsed.args, env: agentEnv, logPath }));
+  writeFileSync15(plist, buildEnginePlist({ label, sledsArgv, args: parsed.args, env: agentEnv, logPath }));
   const r = exec("launchctl", ["load", plist]);
   if (!r.ok) {
     error(`launchctl load failed: ${r.stderr.trim() || "unknown"}`);
@@ -16613,7 +16960,7 @@ function installUnit(a) {
   const unit = engineUnitPath(o.home, label);
   const unitName = basename4(unit);
   const systemctl = (...args) => exec("systemctl", ["--user", ...args]);
-  mkdirSync13(dirname12(unit), { recursive: true });
+  mkdirSync14(dirname12(unit), { recursive: true });
   if (existsSync14(unit))
     systemctl("stop", unitName);
   for (const other of installedEngines(o.home)) {
@@ -16622,10 +16969,10 @@ function installUnit(a) {
     if (engineArg(other.programArgs, "name") !== parsed.name)
       continue;
     systemctl("disable", "--now", basename4(other.plist));
-    rmSync5(other.plist, { force: true });
+    rmSync6(other.plist, { force: true });
     log(`replaced ${other.label}, this engine as installed before`);
   }
-  writeFileSync14(unit, buildEngineUnit({
+  writeFileSync15(unit, buildEngineUnit({
     label,
     name: parsed.name,
     sledsArgv: a.sledsArgv,
@@ -16683,7 +17030,7 @@ function engineUninstall(o) {
     exec("systemctl", ["--user", "disable", "--now", basename4(file)]);
   else
     exec("launchctl", ["unload", file]);
-  rmSync5(file, { force: true });
+  rmSync6(file, { force: true });
   if (unit)
     exec("systemctl", ["--user", "daemon-reload"]);
   log(`engine:${name} removed: ${basename4(file, unit ? ".service" : ".plist")} — its sessions keep running`);
@@ -16691,7 +17038,7 @@ function engineUninstall(o) {
 }
 
 // src/commands/musher.ts
-import { existsSync as existsSync15, mkdirSync as mkdirSync14, readFileSync as readFileSync14, rmSync as rmSync6, writeFileSync as writeFileSync15 } from "node:fs";
+import { existsSync as existsSync15, mkdirSync as mkdirSync15, readFileSync as readFileSync15, rmSync as rmSync7, writeFileSync as writeFileSync16 } from "node:fs";
 init_config();
 init_meter();
 var defaultWhich = (cmd) => {
@@ -16724,7 +17071,7 @@ var musherAgentState = (home, env = process.env) => {
   if (!existsSync15(plist))
     return { installed: false, thisSeat: false };
   try {
-    const text = readFileSync14(plist, "utf8");
+    const text = readFileSync15(plist, "utf8");
     const want = env.SLEDS_HOME?.trim();
     const has = /<key>SLEDS_HOME<\/key>\s*<string>([^<]*)<\/string>/.exec(text)?.[1];
     return { installed: true, thisSeat: (want ?? undefined) === (has ?? undefined) };
@@ -17084,7 +17431,7 @@ function sandboxChecks(o, env) {
   const probe = join19(dir, SANDBOX_PROBE);
   const work = mkdtempSync(join19(tmpdir(), "sleds-sandbox-"));
   try {
-    writeFileSync16(probe, `${nonce}
+    writeFileSync17(probe, `${nonce}
 `, { mode: 384 });
     const settingsFile = join19(work, "settings.json");
     const settings = sandboxSettings({
@@ -17092,7 +17439,7 @@ function sandboxChecks(o, env) {
       gitCommonDir: work,
       allow: SANDBOX_DEFAULT_ALLOW
     });
-    writeFileSync16(settingsFile, JSON.stringify(settings, null, 2), { mode: 384 });
+    writeFileSync17(settingsFile, JSON.stringify(settings, null, 2), { mode: 384 });
     const prompt = `Run exactly this one Bash command, once, then reply with its complete output verbatim and nothing else:
 
 ${SANDBOX_PROBE_COMMAND}`;
@@ -17114,8 +17461,8 @@ ${SANDBOX_PROBE_COMMAND}`;
     ], { cwd: work });
     return readSandboxProbe(run, nonce);
   } finally {
-    rmSync7(probe, { force: true });
-    rmSync7(work, { recursive: true, force: true });
+    rmSync8(probe, { force: true });
+    rmSync8(work, { recursive: true, force: true });
   }
 }
 function engineChecks(o, env) {
@@ -17232,7 +17579,7 @@ function boxChecks(o, env, which, need) {
   const file = boxEnvPath(o.home);
   let named = false;
   try {
-    named = /^\s*(?:export\s+)?ANTHROPIC_API_KEY\s*=\s*\S/m.test(readFileSync15(file, "utf8"));
+    named = /^\s*(?:export\s+)?ANTHROPIC_API_KEY\s*=\s*\S/m.test(readFileSync16(file, "utf8"));
   } catch {
     named = false;
   }
@@ -17336,12 +17683,12 @@ init_server();
 init_config();
 import {
   appendFileSync as appendFileSync3,
-  chmodSync as chmodSync4,
-  mkdirSync as mkdirSync15,
-  readFileSync as readFileSync16,
+  chmodSync as chmodSync5,
+  mkdirSync as mkdirSync16,
+  readFileSync as readFileSync17,
   existsSync as realExists2,
-  rmSync as rmSync8,
-  writeFileSync as writeFileSync17
+  rmSync as rmSync9,
+  writeFileSync as writeFileSync18
 } from "node:fs";
 import { hostname as hostname4 } from "node:os";
 import { join as join20, resolve as resolve9 } from "node:path";
@@ -17751,7 +18098,7 @@ function realPidAlive2(pid) {
 function memberMcpConfigs2(o, cwd) {
   const read = o.readJson ?? ((p) => {
     try {
-      return JSON.parse(readFileSync16(p, "utf8"));
+      return JSON.parse(readFileSync17(p, "utf8"));
     } catch {
       return null;
     }
@@ -17793,6 +18140,9 @@ function engineDeps2(o, flags, source, runner, stateName) {
   const repo = flags.repo ? resolve9(cwd, flags.repo) : undefined;
   const reposDirs = splitReposDirs(flags.reposDir).map((d) => resolve9(cwd, d));
   const { branch, prTitle } = flags;
+  const hooksDir = join20(stateDir, "hooks");
+  const permissionMark = (name) => join20(hooksDir, `${name}.permission.json`);
+  const withHook = (name, settings) => applyPermissionHook(settings, [...o.sledsArgv ?? ["sleds"], "permission-event", "--mark", permissionMark(name)].map(shq2).join(" "));
   return {
     source,
     runner,
@@ -17817,18 +18167,35 @@ function engineDeps2(o, flags, source, runner, stateName) {
       writeSandboxSettings: o.writeSandboxSettings ?? ((name, cwd) => {
         const gitCommonDir = gitCommonDirOf2(exec, cwd);
         const dir = join20(stateDir, "sandbox");
-        mkdirSync15(dir, { recursive: true, mode: 448 });
+        mkdirSync16(dir, { recursive: true, mode: 448 });
         const p = join20(dir, `${name}.json`);
-        const settings = engineSandboxSettings2(o.home, o.env ?? process.env, gitCommonDir, [
+        const walls = engineSandboxSettings2(o.home, o.env ?? process.env, gitCommonDir, [
           ...SANDBOX_DEFAULT_ALLOW,
           ...flags.sandboxAllow ?? []
         ]);
-        writeFileSync17(p, `${JSON.stringify(settings, null, 2)}
+        const settings = withHook(name, { ...walls });
+        writeFileSync18(p, `${JSON.stringify(settings, null, 2)}
 `, { mode: 384 });
-        chmodSync4(p, 384);
+        chmodSync5(p, 384);
         return { settingsFile: p, gitCommonDir };
       })
     } : {},
+    writeHookSettings: (name) => {
+      mkdirSync16(hooksDir, { recursive: true, mode: 448 });
+      const p = join20(hooksDir, `${name}.json`);
+      writeFileSync18(p, `${JSON.stringify(withHook(name, {}), null, 2)}
+`, { mode: 384 });
+      chmodSync5(p, 384);
+      return p;
+    },
+    permissionMark,
+    mainCheckoutOf: o.mainCheckoutOf ?? ((cwd) => {
+      try {
+        return mainCheckoutOf(gitCommonDirOf2(exec, cwd), cwd);
+      } catch {
+        return null;
+      }
+    }),
     ...branch ? { branchOf: (claim) => branchFor(branch, claim) } : {},
     ...prTitle ? { prTitleOf: (claim) => prTitleFor(prTitle, claim) } : {},
     now: o.now ?? Date.now,
@@ -17843,7 +18210,7 @@ function engineDeps2(o, flags, source, runner, stateName) {
     }),
     writeMcpConfig: o.writeMcpConfig ?? ((name, runToken, worktree) => {
       const dir = join20(stateDir, "mcp");
-      mkdirSync15(dir, { recursive: true, mode: 448 });
+      mkdirSync16(dir, { recursive: true, mode: 448 });
       const p = join20(dir, `${name}.json`);
       let others = {};
       if (flags.strictMcp && flags.mcpAllow?.length) {
@@ -17854,16 +18221,16 @@ function engineDeps2(o, flags, source, runner, stateName) {
         if (r.refused.length)
           log(`${name}: MCP pass-through refused ${r.refused.join(", ")} — the run's sleds server is the only SLEDS one`);
       }
-      writeFileSync17(p, pinOrg3(engineMcpConfig(runToken, others), mcpOrg), { mode: 384 });
-      chmodSync4(p, 384);
+      writeFileSync18(p, pinOrg3(engineMcpConfig(runToken, others), mcpOrg), { mode: 384 });
+      chmodSync5(p, 384);
       return p;
     }),
-    removeMcpConfig: o.removeMcpConfig ?? ((p) => rmSync8(p, { force: true })),
+    removeMcpConfig: o.removeMcpConfig ?? ((p) => rmSync9(p, { force: true })),
     writePrompt: o.writePrompt ?? ((name, text) => {
       const dir = join20(stateDir, "prompts");
-      mkdirSync15(dir, { recursive: true, mode: 448 });
+      mkdirSync16(dir, { recursive: true, mode: 448 });
       const p = join20(dir, `${name}.md`);
-      writeFileSync17(p, text, { mode: 384 });
+      writeFileSync18(p, text, { mode: 384 });
       return p;
     }),
     ensureWorktree: (e, repoPath, branch, path, base, install) => ensureWorktree(e, repoPath, branch, path, base, o.worktreeFs ?? { ...realWorktreeFs, exists }, { ...install ? { command: install } : {}, log: o.log ?? console.log }),
@@ -17956,7 +18323,7 @@ async function driveEngine2(o, flags, deps, until = {}) {
     runner: deps.runner.name,
     atOnce: flags.atOnce,
     interval: flags.interval,
-    cliVersion: "0.1.38"
+    cliVersion: "0.1.40"
   };
   const beat = (checkedAt) => {
     const m = deps.machine;
@@ -18362,7 +18729,7 @@ async function enginePauseCmd2(o) {
     result.released++;
     result.kept.push(run.handle.cwd);
     if (run.mcpConfig)
-      rmSync8(run.mcpConfig, { force: true });
+      rmSync9(run.mcpConfig, { force: true });
   }
   if (gone.size)
     writeState(file, { ...state, runs: state.runs.filter((r) => !gone.has(r)) });
@@ -18384,12 +18751,12 @@ init_config();
 init_state();
 import {
   existsSync as existsSync17,
-  mkdirSync as mkdirSync16,
-  readFileSync as readFileSync17,
+  mkdirSync as mkdirSync17,
+  readFileSync as readFileSync18,
   readdirSync as readdirSync4,
   realpathSync as realpathSync2,
-  rmSync as rmSync9,
-  writeFileSync as writeFileSync18
+  rmSync as rmSync10,
+  writeFileSync as writeFileSync19
 } from "node:fs";
 import { hostname as hostname5 } from "node:os";
 import { basename as basename5, dirname as dirname13, isAbsolute as isAbsolute3, join as join21 } from "node:path";
@@ -18511,7 +18878,7 @@ function readEngines2(dir, suffix, manager, parse) {
     const path = join21(dir, name);
     let parsed;
     try {
-      parsed = parse(readFileSync17(path, "utf8"), name);
+      parsed = parse(readFileSync18(path, "utf8"), name);
     } catch {
       parsed = null;
     }
@@ -18565,7 +18932,7 @@ function engineInstall2(o) {
   const stateDir = seatStateDir(orgStateDir(baseDir, parsed.org), seat);
   const label = engineLabel2(parsed.name, parsed.org, seat);
   const logPath = engineLogPath2(stateDir, parsed.name);
-  mkdirSync16(stateDir, { recursive: true, mode: 448 });
+  mkdirSync17(stateDir, { recursive: true, mode: 448 });
   const sledsArgv = stableArgv2(o.sledsArgv, o.realpath);
   const execPath = sledsArgv[0] ?? process.execPath;
   const agentEnv = {
@@ -18578,7 +18945,7 @@ function engineInstall2(o) {
   if (platform === "linux")
     return installUnit2({ o, parsed, label, sledsArgv, env: agentEnv, logPath, exec });
   const plist = enginePlistPath2(o.home, parsed.name, parsed.org, seat);
-  mkdirSync16(dirname13(plist), { recursive: true });
+  mkdirSync17(dirname13(plist), { recursive: true });
   if (existsSync17(plist))
     exec("launchctl", ["unload", plist]);
   for (const other of installedEngines2(o.home)) {
@@ -18587,7 +18954,7 @@ function engineInstall2(o) {
     if (engineArg2(other.programArgs, "name") !== parsed.name)
       continue;
     exec("launchctl", ["unload", other.plist]);
-    rmSync9(other.plist, { force: true });
+    rmSync10(other.plist, { force: true });
     log(`replaced ${other.label}, this engine as installed before`);
   }
   const legacy = enginePlistPath2(o.home, parsed.name);
@@ -18595,12 +18962,12 @@ function engineInstall2(o) {
     const cfg = readConfig(o.home);
     if (org.sole || parsed.org === (cfg.activeOrg ?? cfg.org?.slug)) {
       exec("launchctl", ["unload", legacy]);
-      rmSync9(legacy, { force: true });
+      rmSync10(legacy, { force: true });
       log(`replaced ${engineLabel2(parsed.name)}, the engine installed before orgs`);
     } else
       log(`note: ${engineLabel2(parsed.name)} (installed before orgs) still runs — \`sleds engine uninstall --name ${parsed.name}\` removes it if it was this org's`);
   }
-  writeFileSync18(plist, buildEnginePlist2({ label, sledsArgv, args: parsed.args, env: agentEnv, logPath }));
+  writeFileSync19(plist, buildEnginePlist2({ label, sledsArgv, args: parsed.args, env: agentEnv, logPath }));
   const r = exec("launchctl", ["load", plist]);
   if (!r.ok) {
     error(`launchctl load failed: ${r.stderr.trim() || "unknown"}`);
@@ -18620,7 +18987,7 @@ function installUnit2(a) {
   const unit = engineUnitPath(o.home, label);
   const unitName = basename5(unit);
   const systemctl = (...args) => exec("systemctl", ["--user", ...args]);
-  mkdirSync16(dirname13(unit), { recursive: true });
+  mkdirSync17(dirname13(unit), { recursive: true });
   if (existsSync17(unit))
     systemctl("stop", unitName);
   for (const other of installedEngines2(o.home)) {
@@ -18629,10 +18996,10 @@ function installUnit2(a) {
     if (engineArg2(other.programArgs, "name") !== parsed.name)
       continue;
     systemctl("disable", "--now", basename5(other.plist));
-    rmSync9(other.plist, { force: true });
+    rmSync10(other.plist, { force: true });
     log(`replaced ${other.label}, this engine as installed before`);
   }
-  writeFileSync18(unit, buildEngineUnit({
+  writeFileSync19(unit, buildEngineUnit({
     label,
     name: parsed.name,
     sledsArgv: a.sledsArgv,
@@ -18690,7 +19057,7 @@ function engineUninstall2(o) {
     exec("systemctl", ["--user", "disable", "--now", basename5(file)]);
   else
     exec("launchctl", ["unload", file]);
-  rmSync9(file, { force: true });
+  rmSync10(file, { force: true });
   if (unit)
     exec("systemctl", ["--user", "daemon-reload"]);
   log(`engine:${name} removed: ${basename5(file, unit ? ".service" : ".plist")} — its sessions keep running`);
@@ -18821,7 +19188,7 @@ import { closeSync as closeSync3, fstatSync as fstatSync2, openSync as openSync3
 import { hostname as hostname6 } from "node:os";
 
 // src/commands/engineStatus.ts
-import { existsSync as existsSync18, readFileSync as readFileSync18 } from "node:fs";
+import { existsSync as existsSync18, readFileSync as readFileSync19 } from "node:fs";
 init_state();
 
 // src/engine/status.ts
@@ -19111,7 +19478,7 @@ var engineLogCmd = (o) => {
 
 // src/commands/engineProfile.ts
 init_src();
-import { existsSync as existsSync19, readFileSync as readFileSync19 } from "node:fs";
+import { existsSync as existsSync19, readFileSync as readFileSync20 } from "node:fs";
 import { hostname as hostname7 } from "node:os";
 var PROFILE_USAGE = "usage: sleds engine profile [--json]   |   sleds engine profile set <field>=<value>… [--workspace] [--json]   |   sleds engine profile set --stdin [--workspace] [--json]   |   sleds engine profile --strict-mcp [--mcp-allow <a,b>] | --no-strict-mcp [--workspace] [--json]   |   sleds engine profile --sandbox [--sandbox-allow <a,b>] | --no-sandbox [--workspace] [--json]   |   sleds engine profile set --hold on|off [--workspace] [--json]   |   sleds engine profile set cmuxPassword=<pw> | --cmux-password <pw> [--json]";
 var PROFILE_FIELDS = [
@@ -19376,7 +19743,7 @@ async function engineProfileCmd(o) {
     const rest = words.slice(1);
     let stdin = null;
     if (fromStdin) {
-      const taken = cmuxPasswordFromJson((o.stdin ?? (() => readFileSync19(0, "utf8")))());
+      const taken = cmuxPasswordFromJson((o.stdin ?? (() => readFileSync20(0, "utf8")))());
       if ("error" in taken || taken.password !== undefined && password !== undefined) {
         error("error" in taken ? taken.error : "the cmux password is given once");
         error(PROFILE_USAGE);
@@ -19461,7 +19828,7 @@ var keychainLine = (k) => k === "set" ? "cmuxPassword: set (Keychain)" : k === "
 
 // src/commands/engineStatus.ts
 init_state();
-import { existsSync as existsSync20, readFileSync as readFileSync20 } from "node:fs";
+import { existsSync as existsSync20, readFileSync as readFileSync21 } from "node:fs";
 import { hostname as hostname8 } from "node:os";
 var ENGINE_STATUS_USAGE = "usage: sleds engine status [--name <n>] [--org <slug>] [--json]";
 function parseStatusArgs(argv, host) {
@@ -19517,7 +19884,7 @@ function readEngineStatus(stateDir, engine, host, pidAlive, seat) {
 }
 function safeRead(path) {
   try {
-    return readFileSync20(path, "utf8");
+    return readFileSync21(path, "utf8");
   } catch {
     return "";
   }
@@ -19638,7 +20005,7 @@ init_meter();
 
 // src/owed.ts
 init_config();
-import { existsSync as existsSync21, mkdirSync as mkdirSync17, readFileSync as readFileSync21, renameSync as renameSync6, writeFileSync as writeFileSync19 } from "node:fs";
+import { existsSync as existsSync21, mkdirSync as mkdirSync18, readFileSync as readFileSync22, renameSync as renameSync7, writeFileSync as writeFileSync20 } from "node:fs";
 import { dirname as dirname14, join as join22 } from "node:path";
 var owedPath = (home) => join22(configDir(home), "owed.json");
 var sessionPath = (home) => join22(configDir(home), "session.json");
@@ -19659,17 +20026,17 @@ var readJson = (p) => {
   if (!existsSync21(p))
     return null;
   try {
-    return JSON.parse(readFileSync21(p, "utf8"));
+    return JSON.parse(readFileSync22(p, "utf8"));
   } catch {
     return null;
   }
 };
 var writeJson = (p, v) => {
-  mkdirSync17(dirname14(p), { recursive: true, mode: 448 });
+  mkdirSync18(dirname14(p), { recursive: true, mode: 448 });
   const tmp = `${p}.${process.pid}.tmp`;
-  writeFileSync19(tmp, `${JSON.stringify(v, null, 2)}
+  writeFileSync20(tmp, `${JSON.stringify(v, null, 2)}
 `, { mode: 384 });
-  renameSync6(tmp, p);
+  renameSync7(tmp, p);
 };
 var readOwed = (home, now = Date.now()) => {
   const f = readJson(owedPath(home));
@@ -19874,7 +20241,7 @@ var hooksOrg = (home, env = process.env) => {
 };
 
 // src/commands/init.ts
-import { mkdirSync as mkdirSync18, writeFileSync as writeFileSync20 } from "node:fs";
+import { mkdirSync as mkdirSync19, writeFileSync as writeFileSync21 } from "node:fs";
 import { createInterface } from "node:readline";
 init_config();
 init_state();
@@ -20561,8 +20928,8 @@ var init = async (o) => {
   });
   if (mcpLine)
     wrote.push(mcpLine);
-  mkdirSync18(skillDir(o.home), { recursive: true });
-  writeFileSync20(skillPath(o.home), SKILL_MD);
+  mkdirSync19(skillDir(o.home), { recursive: true });
+  writeFileSync21(skillPath(o.home), SKILL_MD);
   wrote.push(`installed skill at ${skillPath(o.home)}`);
   if (o.installMusher) {
     const r = o.installMusher();
@@ -20686,7 +21053,7 @@ var login = async (o) => {
 // src/commands/logout.ts
 init_config();
 init_state();
-import { existsSync as existsSync22, readFileSync as readFileSync22, rmSync as rmSync10 } from "node:fs";
+import { existsSync as existsSync22, readFileSync as readFileSync23, rmSync as rmSync11 } from "node:fs";
 import { hostname as hostname10 } from "node:os";
 init_settings();
 var LOGOUT_USAGE = "usage: sleds logout [--org <slug>] [--json]";
@@ -20810,7 +21177,7 @@ async function logout(o) {
       continue;
     if (!e.org) {
       (o.exec ?? defaultExec2)("launchctl", ["unload", e.plist]);
-      rmSync10(e.plist, { force: true });
+      rmSync11(e.plist, { force: true });
       continue;
     }
     engineUninstall({
@@ -20843,8 +21210,8 @@ async function logout(o) {
     };
   writeConfig(o.home, next);
   const tp = tokenPath(o.home, env);
-  if (existsSync22(tp) && readFileSync22(tp, "utf8").trim() === seat.token)
-    rmSync10(tp, { force: true });
+  if (existsSync22(tp) && readFileSync23(tp, "utf8").trim() === seat.token)
+    rmSync11(tp, { force: true });
   const active = next.activeOrg ?? next.org?.slug ?? null;
   const result = { ok: true, email, org: slug, paused, active };
   if (parsed.json)
@@ -20921,7 +21288,7 @@ var meter = async (o) => {
 init_config();
 init_meter();
 import { spawnSync as spawnSync7 } from "node:child_process";
-import { existsSync as existsSync23, mkdirSync as mkdirSync19, readFileSync as readFileSync23, rmSync as rmSync11, writeFileSync as writeFileSync21 } from "node:fs";
+import { existsSync as existsSync23, mkdirSync as mkdirSync20, readFileSync as readFileSync24, rmSync as rmSync12, writeFileSync as writeFileSync22 } from "node:fs";
 import { hostname as hostname11 } from "node:os";
 import { dirname as dirname15 } from "node:path";
 var defaultWhich3 = (cmd) => {
@@ -20961,8 +21328,8 @@ var musherInstall = (o) => {
   const plist = musherPlistPath(o.home, env);
   const label = musherLabel(env);
   const dir = configDir(o.home, env);
-  mkdirSync19(dirname15(plist), { recursive: true });
-  mkdirSync19(dir, { recursive: true, mode: 448 });
+  mkdirSync20(dirname15(plist), { recursive: true });
+  mkdirSync20(dir, { recursive: true, mode: 448 });
   const execPath = o.sledsArgv[0] ?? process.execPath;
   const agentEnv = {
     PATH: musherPath(o.home, execPath, env.PATH ?? ""),
@@ -20973,7 +21340,7 @@ var musherInstall = (o) => {
   const exec = o.exec ?? defaultExecSync;
   if (existsSync23(plist))
     exec("launchctl", ["unload", plist]);
-  writeFileSync21(plist, buildMusherPlist({ sledsArgv: o.sledsArgv, env: agentEnv, logPath: musherLogPath(dir), label }));
+  writeFileSync22(plist, buildMusherPlist({ sledsArgv: o.sledsArgv, env: agentEnv, logPath: musherLogPath(dir), label }));
   const r = exec("launchctl", ["load", plist]);
   if (!r.ok) {
     error(`launchctl load failed: ${r.stderr.trim() || "unknown"}`);
@@ -20994,7 +21361,7 @@ var musherUninstall = (o) => {
   const exec = o.exec ?? defaultExecSync;
   if (existsSync23(plist)) {
     exec("launchctl", ["unload", plist]);
-    rmSync11(plist, { force: true });
+    rmSync12(plist, { force: true });
     log(`musher removed: ${musherLabel(env)}`);
   } else
     log("musher was not installed.");
@@ -21257,7 +21624,7 @@ var on = (o) => {
 init_config();
 init_meter();
 init_settings();
-import { existsSync as existsSync24, rmSync as rmSync12 } from "node:fs";
+import { existsSync as existsSync24, rmSync as rmSync13 } from "node:fs";
 var ORG_USAGE = "usage: sleds org list [--json]   |   sleds org use <slug>";
 var orgRows = (cfg, activeSlug) => {
   const seats = { ...cfg.orgs ?? {} };
@@ -21334,7 +21701,7 @@ var orgUse = (o) => {
       writeSettings(o.home, removeProxy(settings));
   }
   try {
-    rmSync12(meterCachePath(o.home), { force: true });
+    rmSync13(meterCachePath(o.home), { force: true });
   } catch {}
   log(`Active org: ${seat.org?.name ? `${seat.org.name} (${slug})` : slug}${seat.email ? ` · ${seat.email}` : ""}.`);
   log("Claude Code, the status line and the hooks act as this org now.");
@@ -21360,7 +21727,7 @@ var orgCmd = (o) => {
 // src/commands/pack.ts
 init_src();
 import { spawnSync as spawnSync8 } from "node:child_process";
-import { writeFileSync as writeFileSync22 } from "node:fs";
+import { writeFileSync as writeFileSync23 } from "node:fs";
 import { join as join23 } from "node:path";
 function packFileName(key) {
   return `pack-${slugify(key, 80) || "item"}.md`;
@@ -21390,22 +21757,43 @@ var packCmd = async (o) => {
     return 0;
   }
   const path = join23(o.cwd ?? process.cwd(), packFileName(key));
-  (o.write ?? ((p, t) => writeFileSync22(p, t.endsWith(`
+  (o.write ?? ((p, t) => writeFileSync23(p, t.endsWith(`
 `) ? t : `${t}
 `)))(path, r.text);
   log(`Wrote ${path} — hand it to any model. \`sleds pack ${key} --run\` starts Claude Code with it.`);
   return 0;
 };
 
-// src/commands/promptEvent.ts
-init_config();
-
-// src/commands/seatEvent.ts
-init_config();
-init_meter();
-var HOOK_STDIN_TIMEOUT_MS = 1000;
+// src/commands/permissionEvent.ts
+import { chmodSync as chmodSync6, mkdirSync as mkdirSync21, readFileSync as readFileSync25, renameSync as renameSync8, rmSync as rmSync14, writeFileSync as writeFileSync24 } from "node:fs";
+import { dirname as dirname16 } from "node:path";
+var isObject13 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var messageOf = (text) => {
+  try {
+    const raw = JSON.parse(text);
+    return isObject13(raw) && typeof raw.message === "string" ? raw.message : "";
+  } catch {
+    return "";
+  }
+};
+var permissionEvent = async (o) => {
+  try {
+    const input = o.stdin ?? await readStdin(HOOK_STDIN_TIMEOUT_MS);
+    if (!o.mark || notificationType(input) !== "permission_prompt")
+      return 0;
+    const mark = { message: messageOf(input), at: (o.now ?? Date.now)() };
+    mkdirSync21(dirname16(o.mark), { recursive: true, mode: 448 });
+    const tmp = `${o.mark}.${process.pid}.tmp`;
+    writeFileSync24(tmp, `${JSON.stringify(mark)}
+`, { mode: 384 });
+    renameSync8(tmp, o.mark);
+    chmodSync6(o.mark, 384);
+  } catch {}
+  return 0;
+};
 
 // src/commands/promptEvent.ts
+init_config();
 var LABEL = {
   fiveHour: "5-hour",
   sevenDay: "weekly",
@@ -21488,7 +21876,7 @@ var promptEvent = async (o) => {
 
 // src/commands/route.ts
 init_src();
-import { readFileSync as readFileSync24 } from "node:fs";
+import { readFileSync as readFileSync26 } from "node:fs";
 import { hostname as hostname12 } from "node:os";
 var ARM_USAGE = "usage: sleds route arm <key> [--off] [--json] [--name <engine>] [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--mode <permission-mode>] [--model <id>] [--effort <e>] [--branch '<template>'] [--pr-title '<template>'] [--repos-dir <dir>]";
 var USAGE = "usage: sleds route <key> [--long | --dot | --json]   |   sleds route arm <key> [--off] [--json]   |   sleds route answer <key>/<node> --stdin   |   sleds route propose <key> --file <nodes.json>   |   sleds route approve <key>   |   sleds route redraft <key>   |   sleds route single <key>   |   sleds route decisions [<key>] [--flagged]   |   sleds route decision <key> <id> --seen | --answer --stdin [--route accept|keep|redraft] | --keep-route | --apply [--answer --stdin] | --overrule --stdin | --ready   |   sleds route run <key> [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--interval <s>] [--lease <min>] [--idle <min>] [--repo <path>] [--repos-dir <dir>] [--mode <permission-mode>] [--model <id>] [--branch '<template>'] [--pr-title '<template>'] [--once]";
@@ -21661,7 +22049,7 @@ async function answerCmd(o, argv) {
   const words = argv.filter((a) => a !== "--json" && a !== "--stdin");
   const ref = words[0] ?? "";
   const slash = ref.lastIndexOf("/");
-  const answer = (fromStdin ? (o.stdin ?? (() => readFileSync24(0, "utf8")))() : words.slice(1).join(" ")).trim();
+  const answer = (fromStdin ? (o.stdin ?? (() => readFileSync26(0, "utf8")))() : words.slice(1).join(" ")).trim();
   if (slash <= 0 || slash === ref.length - 1 || fromStdin && words.length > 1) {
     error(ANSWER_USAGE);
     return 2;
@@ -21858,7 +22246,7 @@ async function decisionCmd(o, argv) {
     error(DECISION_USAGE);
     return 2;
   }
-  const md = seen || routeAlone ? "" : (fromStdin ? (o.stdin ?? (() => readFileSync24(0, "utf8")))() : rest.join(" ")).trim();
+  const md = seen || routeAlone ? "" : (fromStdin ? (o.stdin ?? (() => readFileSync26(0, "utf8")))() : rest.join(" ")).trim();
   if (!seen && !routeAlone && (!md || fromStdin && rest.length > 0)) {
     error(md ? DECISION_USAGE : `${answer ? "an answer" : "an overrule"} needs some text`);
     return 2;
@@ -21999,7 +22387,7 @@ function approvedLine(key, j) {
 function readNodes(o, a) {
   let text;
   try {
-    text = a.file ? (o.readFile ?? ((p) => readFileSync24(p, "utf8")))(a.file) : (o.stdin ?? (() => readFileSync24(0, "utf8")))();
+    text = a.file ? (o.readFile ?? ((p) => readFileSync26(p, "utf8")))(a.file) : (o.stdin ?? (() => readFileSync26(0, "utf8")))();
   } catch (e) {
     return { error: e instanceof Error ? e.message : String(e) };
   }
@@ -22273,11 +22661,11 @@ var run = async (o) => {
 init_config();
 init_meter();
 var HOOK_STDIN_TIMEOUT_MS2 = 1000;
-var isObject11 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-var notificationType = (text) => {
+var isObject14 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var notificationType2 = (text) => {
   try {
     const raw = JSON.parse(text);
-    if (!isObject11(raw))
+    if (!isObject14(raw))
       return;
     return typeof raw.notification_type === "string" ? raw.notification_type : undefined;
   } catch {
@@ -22288,7 +22676,7 @@ var seatEvent = async (o) => {
   const log = o.log ?? console.log;
   const now = (o.now ?? Date.now)();
   const input = o.stdin ?? await readStdin(HOOK_STDIN_TIMEOUT_MS2);
-  const kind = notificationType(input);
+  const kind = notificationType2(input);
   try {
     const key = seatKeyFor(o.home, process.env);
     const state = readSeatState(o.home, key);
@@ -22310,12 +22698,12 @@ var seatEvent = async (o) => {
 
 // src/commands/seatSync.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync25, mkdirSync as mkdirSync20, readFileSync as readFileSync25, readdirSync as readdirSync5, rmSync as rmSync14, writeFileSync as writeFileSync23 } from "node:fs";
+import { existsSync as existsSync25, mkdirSync as mkdirSync22, readFileSync as readFileSync27, readdirSync as readdirSync5, rmSync as rmSync16, writeFileSync as writeFileSync25 } from "node:fs";
 import { platform as platform2 } from "node:os";
-import { dirname as dirname16, join as join25 } from "node:path";
+import { dirname as dirname17, join as join25 } from "node:path";
 
 // src/cookieDb.ts
-import { copyFileSync, rmSync as rmSync13 } from "node:fs";
+import { copyFileSync, rmSync as rmSync15 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
 import { join as join24 } from "node:path";
 var QUERY = "SELECT name, hex(encrypted_value) AS ev FROM cookies WHERE host_key LIKE '%claude.ai%'";
@@ -22353,7 +22741,7 @@ async function readCookieRows(dbPath) {
     return rows.map((r) => ({ name: r.name, encrypted_value: Buffer.from(r.ev, "hex") }));
   } finally {
     try {
-      rmSync13(copy, { force: true });
+      rmSync15(copy, { force: true });
     } catch {}
   }
 }
@@ -22438,8 +22826,8 @@ function resolveProfileDir(localStateJson, profile) {
   if (localStateJson) {
     try {
       const raw = JSON.parse(localStateJson);
-      const p = isObject12(raw) && isObject12(raw.profile) ? raw.profile : null;
-      if (p && isObject12(p.info_cache))
+      const p = isObject15(raw) && isObject15(raw.profile) ? raw.profile : null;
+      if (p && isObject15(p.info_cache))
         cache = p.info_cache;
     } catch {}
   }
@@ -22448,7 +22836,7 @@ function resolveProfileDir(localStateJson, profile) {
   const want = profile.toLowerCase();
   const hits = [];
   for (const [dir, info] of Object.entries(cache)) {
-    if (!isObject12(info))
+    if (!isObject15(info))
       continue;
     const match = ["name", "user_name", "gaia_name"].some((k) => {
       const v = info[k];
@@ -22487,15 +22875,15 @@ function sourceArgs(source) {
 function seatTokenPath(home, source) {
   return `${home}/.config/sleds/${launchLabel(source).slice("ai.sleds.".length)}.token`;
 }
-var isObject12 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isObject15 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var num7 = (v) => typeof v === "number" && Number.isFinite(v) ? v : undefined;
 var round22 = (n) => Math.round(n * 100) / 100;
 function parseUsageResponse(raw, now = Date.now()) {
-  if (!isObject12(raw))
+  if (!isObject15(raw))
     return null;
   const out = { capturedAt: now, models: {} };
   for (const [k, v] of Object.entries(raw)) {
-    if (!isObject12(v))
+    if (!isObject15(v))
       continue;
     if (k === "extra_usage") {
       const credits = num7(v.used_credits);
@@ -22660,7 +23048,7 @@ function findCookieDb(home, source) {
     return db;
   }
   const localStatePath = join25(root, "Local State");
-  const localState = existsSync25(localStatePath) ? readFileSync25(localStatePath, "utf8") : null;
+  const localState = existsSync25(localStatePath) ? readFileSync27(localStatePath, "utf8") : null;
   const wanted = source.profile ?? "Default";
   const { dir, ambiguous } = resolveProfileDir(localState, wanted);
   if (ambiguous)
@@ -22743,16 +23131,16 @@ function install(home, argv, source, log) {
     return 1;
   }
   const dir = join25(home, "Library", "LaunchAgents");
-  mkdirSync20(dir, { recursive: true });
+  mkdirSync22(dir, { recursive: true });
   const path = plistPath2(home, source);
   const tokenPath = seatTokenPath(home, source);
-  rmSync14(tokenPath, { force: true });
+  rmSync16(tokenPath, { force: true });
   if (source.token) {
-    mkdirSync20(dirname16(tokenPath), { recursive: true, mode: 448 });
-    writeFileSync23(tokenPath, `${source.token}
+    mkdirSync22(dirname17(tokenPath), { recursive: true, mode: 448 });
+    writeFileSync25(tokenPath, `${source.token}
 `, { mode: 384 });
   }
-  writeFileSync23(path, launchAgentPlist(bun, script, home, source), { mode: 384 });
+  writeFileSync25(path, launchAgentPlist(bun, script, home, source), { mode: 384 });
   try {
     execFileSync4("launchctl", ["unload", path], { stdio: "ignore" });
   } catch {}
@@ -22765,7 +23153,7 @@ function uninstall(home, source, log) {
   try {
     execFileSync4("launchctl", ["unload", "-w", path], { stdio: "ignore" });
   } catch {}
-  rmSync14(seatTokenPath(home, source), { force: true });
+  rmSync16(seatTokenPath(home, source), { force: true });
   log(existsSync25(path) ? `seat-sync timer removed (${path} can be deleted)` : "no seat-sync timer");
   return 0;
 }
@@ -22840,7 +23228,7 @@ var seatSync = async (o) => {
 };
 function readSeatToken(home, source) {
   try {
-    return readFileSync25(seatTokenPath(home, source), "utf8").trim() || undefined;
+    return readFileSync27(seatTokenPath(home, source), "utf8").trim() || undefined;
   } catch {
     return;
   }
@@ -22923,7 +23311,7 @@ var sessionEvent = async (o) => {
 
 // src/commands/specEvent.ts
 init_meter();
-import { readFileSync as readFileSync26, statSync as statSync2 } from "node:fs";
+import { readFileSync as readFileSync28, statSync as statSync2 } from "node:fs";
 import { basename as basename6, isAbsolute as isAbsolute4, relative } from "node:path";
 var HOOK_STDIN_TIMEOUT_MS3 = 1000;
 var ESTIMATE_TIMEOUT_MS = 4000;
@@ -22979,7 +23367,7 @@ function readFileOrNull(path) {
   try {
     if (statSync2(path).size > 2000000)
       return null;
-    return readFileSync26(path, "utf8");
+    return readFileSync28(path, "utf8");
   } catch {
     return null;
   }
@@ -23308,10 +23696,10 @@ var announce = (o, events) => {
 
 // src/commands/stopEvent.ts
 init_meter();
-import { existsSync as existsSync27, readFileSync as readFileSync27 } from "node:fs";
+import { existsSync as existsSync27, readFileSync as readFileSync29 } from "node:fs";
 
 // src/transcript.ts
-var isObject13 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isObject16 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var n = (v) => typeof v === "number" && Number.isFinite(v) ? v : 0;
 function sumTranscript(text) {
   const seen = new Set;
@@ -23332,7 +23720,7 @@ function sumTranscript(text) {
     } catch {
       continue;
     }
-    if (!isObject13(j) || j.type !== "assistant" || !isObject13(j.message))
+    if (!isObject16(j) || j.type !== "assistant" || !isObject16(j.message))
       continue;
     const m = j.message;
     const id = typeof m.id === "string" ? m.id : typeof j.uuid === "string" ? j.uuid : undefined;
@@ -23341,7 +23729,7 @@ function sumTranscript(text) {
         continue;
       seen.add(id);
     }
-    const u = isObject13(m.usage) ? m.usage : undefined;
+    const u = isObject16(m.usage) ? m.usage : undefined;
     if (!u)
       continue;
     const input = n(u.input_tokens);
@@ -23404,7 +23792,7 @@ async function postTranscript(o, payload, now) {
   const src = meterSource(o.home);
   if (!src)
     return false;
-  const read = o.readFile ?? ((p) => existsSync27(p) ? readFileSync27(p, "utf8") : null);
+  const read = o.readFile ?? ((p) => existsSync27(p) ? readFileSync29(p, "utf8") : null);
   let text;
   try {
     text = read(path);
@@ -23482,7 +23870,7 @@ var stopEvent = async (o) => {
 
 // src/commands/uninstall.ts
 import { spawnSync as spawnSync9 } from "node:child_process";
-import { existsSync as existsSync28, rmSync as rmSync15 } from "node:fs";
+import { existsSync as existsSync28, rmSync as rmSync17 } from "node:fs";
 init_config();
 init_meter();
 init_settings();
@@ -23543,19 +23931,19 @@ var uninstall2 = (o) => {
   }
   for (const file of [meterCachePath(o.home), ...allSeatStatePaths(o.home)]) {
     if (existsSync28(file)) {
-      rmSync15(file, { force: true });
+      rmSync17(file, { force: true });
       removed.push(file);
     }
   }
   const skill = skillDir(o.home);
   if (existsSync28(skill)) {
-    rmSync15(skill, { recursive: true, force: true });
+    rmSync17(skill, { recursive: true, force: true });
     removed.push(skill);
   }
   const plist = musherPlistPath(o.home);
   if (existsSync28(plist)) {
     (o.unloadAgent ?? defaultUnload)(plist);
-    rmSync15(plist, { force: true });
+    rmSync17(plist, { force: true });
     removed.push(`launchd agent ${musherLabel()}`);
   }
   if (removed.length === 0) {
@@ -23708,17 +24096,17 @@ var webhooksCmd = async (o) => {
 
 // src/config.ts
 init_settings();
-import { chmodSync as chmodSync5, existsSync as existsSync29, mkdirSync as mkdirSync21, readFileSync as readFileSync28, renameSync as renameSync7, writeFileSync as writeFileSync24 } from "node:fs";
+import { chmodSync as chmodSync7, existsSync as existsSync29, mkdirSync as mkdirSync23, readFileSync as readFileSync30, renameSync as renameSync9, writeFileSync as writeFileSync26 } from "node:fs";
 import { join as join26, resolve as resolve10 } from "node:path";
 var configDir2 = (home, env = process.env) => {
   const o = env.SLEDS_HOME?.trim();
   return o ? resolve10(home, o) : join26(home, ".config", "sleds");
 };
 var configPath2 = (home) => join26(configDir2(home), "config.json");
-var isObject14 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isObject17 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var optString2 = (v) => typeof v === "string" ? v : undefined;
 var parsePriorEnv2 = (v) => {
-  if (!isObject14(v))
+  if (!isObject17(v))
     return;
   const out = {};
   const url = optString2(v[BASE_URL_KEY]);
@@ -23733,7 +24121,7 @@ var parsePriorEnv2 = (v) => {
 };
 var parseSchedule2 = (v) => v === "launchd" || v === "systemd" || v === "manual" ? v : undefined;
 var parseConfig2 = (raw) => {
-  if (!isObject14(raw))
+  if (!isObject17(raw))
     return {};
   const cfg = {};
   const token = optString2(raw.token);
@@ -23783,11 +24171,11 @@ var parseConfig2 = (raw) => {
   return cfg;
 };
 var parseOrgs2 = (raw) => {
-  if (!isObject14(raw))
+  if (!isObject17(raw))
     return;
   const out = {};
   for (const [slug, v] of Object.entries(raw)) {
-    if (!isObject14(v))
+    if (!isObject17(v))
       continue;
     const token = optString2(v.token);
     if (!token)
@@ -23806,7 +24194,7 @@ var parseOrgs2 = (raw) => {
   return Object.keys(out).length > 0 ? out : undefined;
 };
 var parseMusher2 = (raw) => {
-  if (!isObject14(raw))
+  if (!isObject17(raw))
     return;
   const out = {};
   const pm = optString2(raw.permissionMode);
@@ -23822,7 +24210,7 @@ var parseMusher2 = (raw) => {
   return out;
 };
 var parseOrgInfo2 = (raw) => {
-  if (!isObject14(raw) || !isObject14(raw.capabilities))
+  if (!isObject17(raw) || !isObject17(raw.capabilities))
     return;
   const name = optString2(raw.name);
   const slug = optString2(raw.slug);
@@ -23848,7 +24236,7 @@ var readConfig2 = (home) => {
   const p = configPath2(home);
   if (!existsSync29(p))
     return {};
-  return parseConfig2(JSON.parse(readFileSync28(p, "utf8")));
+  return parseConfig2(JSON.parse(readFileSync30(p, "utf8")));
 };
 
 // src/runners/exec.ts
@@ -23900,7 +24288,7 @@ var defaultExec5 = (cmd, args) => {
 };
 
 // src/settings.ts
-import { dirname as dirname17, join as join27, resolve as resolve11 } from "node:path";
+import { dirname as dirname18, join as join27, resolve as resolve11 } from "node:path";
 var withSeatEnv2 = (command, home, env = process.env, org) => {
   const parts = [];
   const sh = env.SLEDS_HOME?.trim();
@@ -23923,15 +24311,16 @@ var pinOrg4 = (command, org) => {
   return `${lead}SLEDS_ORG=${shellWord2(slug)} ${bare.slice(lead.length)}`;
 };
 var shellWord2 = (v) => /^[\w./~-]+$/.test(v) ? v : `'${v.replace(/'/g, "'\\''")}'`;
-var isObject15 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isObject18 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var isSledsHookFor2 = (sub) => (entry) => {
-  if (!isObject15(entry) || !Array.isArray(entry.hooks))
+  if (!isObject18(entry) || !Array.isArray(entry.hooks))
     return false;
   const re = new RegExp(`\\b${sub}\\b`);
-  return entry.hooks.some((h) => isObject15(h) && h.type === "command" && typeof h.command === "string" && re.test(h.command));
+  return entry.hooks.some((h) => isObject18(h) && h.type === "command" && typeof h.command === "string" && re.test(h.command));
 };
 var isSledsSessionHook2 = isSledsHookFor2("session-event");
 var isSledsStopHook2 = isSledsHookFor2("stop-event");
+var isSledsPermissionHook2 = isSledsHookFor2("permission-event");
 
 // src/index.ts
 var USAGE3 = `usage: sleds <command> [options]
@@ -24081,6 +24470,8 @@ commands:
   statusline  Print the one-line meter Claude Code shows (installed by init; 10s cache).
   hooks       Register the Claude Code Notification hook for seat limits (init does this too).
   seat-event  Claude Code hook: record a seat wall and say how to continue. Reads hook JSON on stdin.
+  permission-event --mark <file>  Claude Code Notification hook the engine gives its sessions: on
+              a permission dialog, write {message, at} to <file> for the engine. Local; exits 0.
   session-event Claude Code SessionStart hook: states the loop and the rows this machine still
               owes before the first turn. Reads hook JSON on stdin.
   stop-event  Claude Code Stop hook: a session that estimated a row and posted no actual is asked
@@ -24225,7 +24616,8 @@ var main = async (argv) => {
         exec: defaultExec4,
         runnerFor: runnerFor3,
         sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
-        shouldStop: () => stopping
+        shouldStop: () => stopping,
+        sledsArgv: sledsArgv()
       };
       return cmd === "engine" ? engineCmd(io) : routeCmd(io);
     }
@@ -24332,6 +24724,8 @@ var main = async (argv) => {
       });
     case "seat-event":
       return seatEvent({ home });
+    case "permission-event":
+      return permissionEvent({ mark: stringFlag(flags, "mark") });
     case "spec-event":
       return specEvent({ home });
     case "prompt-event":
@@ -24389,7 +24783,7 @@ ${renderHelpText(argv[1])}`);
     case "version":
     case "--version":
     case "-v":
-      console.log("sleds 0.1.38");
+      console.log("sleds 0.1.40");
       return 0;
     default:
       console.error(`unknown command: ${cmd}