@yemi33/minions 0.1.1693 → 0.1.1694

package/CHANGELOG.md

@@ -1,8 +1,9 @@
 # Changelog
 
-## 0.1.1693 (2026-05-04)
+## 0.1.1694 (2026-05-04)
 
 ### Features
+- remove stale permission mode settings (#2009)
 - sync review verdict PR status (#2008)
 
 ## 0.1.1691 (2026-05-04)

package/README.md

@@ -406,7 +406,7 @@ No bash or shell involved — Node spawns Node directly. Dependency branches are
 - **Working directory** — project root (agent creates worktrees as needed)
 - **MCP servers** — inherited from `~/.claude.json` (no extra config needed)
 - **Full tool access** — all built-in tools plus all MCP tools
-- **Permission mode** — `bypassPermissions` (no interactive prompts)
+- **Permission bypass** — runtime-owned; Claude uses `--dangerously-skip-permissions`, while Copilot uses `--autopilot --allow-all --no-ask-user` (no dashboard `permissionMode` control)
 - **Output format** — `stream-json` (real-time streaming for live dashboard + completion recovery)
 
 ### Post-Completion

package/dashboard/js/render-agents.js

@@ -54,7 +54,6 @@ function renderAgents(agents) {
       })()}
       ${a._blockingToolCall ? `<div style="margin-top:4px;padding:4px 8px;background:rgba(130,160,210,0.13);border:1px solid rgba(130,160,210,0.3);border-radius:4px;font-size:10px;color:var(--muted)">&#x23F3; Blocking tool call (${escapeHtml(a._blockingToolCall.tool)}) &mdash; silent ${Math.round(a._blockingToolCall.silentMs/60000)}min, timeout in ${Math.round(a._blockingToolCall.remainingMs/60000)}min</div>` : ''}
       ${a._warning ? `<div style="margin-top:4px;padding:4px 8px;background:rgba(210,153,34,0.15);border:1px solid rgba(210,153,34,0.3);border-radius:4px;font-size:10px;color:var(--yellow)">&#x26A0; ${escapeHtml(a._warning)}</div>` : ''}
-      ${a._permissionMode && a._permissionMode !== 'bypassPermissions' && !a._warning ? `<div style="margin-top:4px;font-size:9px;color:var(--muted)">Permission mode: ${escapeHtml(a._permissionMode)}</div>` : ''}
       ${a.resultSummary ? `<div class="agent-result" title="${escapeHtml(a.resultSummary)}">${renderMd(a.resultSummary.slice(0, 200))}${a.resultSummary.length > 200 ? '...' : ''}</div>` : ''}
     </div>
   `).join('');

package/dashboard/js/settings.js

@@ -258,20 +258,12 @@ async function openSettings() {
     '</div>' +
 
     '<h3 style="font-size:13px;color:var(--blue);margin-bottom:8px">Claude CLI</h3>' +
-    '<div style="display:grid;grid-template-columns:1fr 1fr;gap:8px;margin-bottom:16px">' +
+    '<div style="display:grid;grid-template-columns:1fr 1fr;gap:8px;margin-bottom:8px">' +
       settingsField('Output Format', 'set-outputFormat', c.outputFormat || 'stream-json', '', '') +
-      settingsField('Allowed Tools', 'set-allowedTools', c.allowedTools || '', '', 'Tools agents can use without permission prompts. Add MCP tools here if using non-bypass mode (e.g. mcp__azure-ado__*)') +
+      settingsField('Allowed Tools', 'set-allowedTools', c.allowedTools || '', '', 'Claude allow-list passed through for compatibility; runtime bypass flags are adapter-owned.') +
     '</div>' +
-    '<div style="margin-bottom:16px">' +
-      '<label style="font-size:10px;color:var(--muted);display:block;margin-bottom:2px">Permission Mode <span style="opacity:0.6">(how agents handle tool approvals)</span></label>' +
-      '<select id="set-permissionMode" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:12px">' +
-        '<option value="bypassPermissions"' + ((c.permissionMode || 'bypassPermissions') === 'bypassPermissions' ? ' selected' : '') + '>Bypass (recommended) — agents run autonomously without permission prompts</option>' +
-        '<option value="auto"' + ((c.permissionMode) === 'auto' ? ' selected' : '') + '>Auto — auto-approve safe tools, prompt for risky ones (agents may hang on risky tools)</option>' +
-        '<option value="default"' + ((c.permissionMode) === 'default' ? ' selected' : '') + '>Default — prompt for every tool (agents WILL hang — not recommended)</option>' +
-      '</select>' +
-      '<div id="set-permissionMode-warn" style="font-size:9px;margin-top:4px;padding:4px 8px;border-radius:4px;' + ((c.permissionMode && c.permissionMode !== 'bypassPermissions') ? 'display:block;background:rgba(248,81,73,0.1);color:var(--red)' : 'display:none') + '">' +
-        '\u26A0 Tools listed in Allowed Tools above are auto-approved even in non-bypass modes. Agents will only hang if they try to use a tool NOT on that list (e.g. MCP tools). In bypass mode, all tools are approved automatically.' +
-      '</div>' +
+    '<div style="font-size:10px;color:var(--muted);margin-bottom:16px;padding:6px 8px;border:1px solid var(--border);border-radius:4px;background:var(--surface-subtle, rgba(130,160,210,0.08))">' +
+      'Permission bypass is runtime-owned: Claude agents use <code>--dangerously-skip-permissions</code>; Copilot agents use <code>--autopilot --allow-all --no-ask-user</code>. There is no dashboard permission-mode setting.' +
     '</div>' +
 
     '<h3 style="font-size:13px;color:var(--blue);margin-bottom:8px">Agents</h3>' +
@@ -314,20 +306,6 @@ async function openSettings() {
   document.getElementById('modal-body').style.whiteSpace = '';
   document.getElementById('modal').classList.add('open');
 
-  // Wire permission mode warning toggle
-  var pmSelect = document.getElementById('set-permissionMode');
-  if (pmSelect) pmSelect.addEventListener('change', function() {
-    var warn = document.getElementById('set-permissionMode-warn');
-    if (!warn) return;
-    if (this.value !== 'bypassPermissions') {
-      warn.style.display = 'block';
-      warn.style.background = 'rgba(248,81,73,0.1)';
-      warn.style.color = 'var(--red)';
-    } else {
-      warn.style.display = 'none';
-    }
-  });
-
   // ── Runtime fleet wiring (P-7a5c1f8e) ──────────────────────────────────────
   // 1. Load registered runtimes into the defaultCli + ccCli dropdowns.
   // 2. Load models for the selected defaultCli into the defaultModel input.
@@ -595,7 +573,6 @@ async function saveSettings() {
     const claudePayload = {
       outputFormat: document.getElementById('set-outputFormat').value,
       allowedTools: document.getElementById('set-allowedTools').value,
-      permissionMode: document.getElementById('set-permissionMode').value,
     };
 
     const teamsPayload = {

package/dashboard.js

@@ -5405,6 +5405,12 @@ What would you like to discuss or change? When you're happy, say "approve" and I
     } catch (e) { return jsonReply(res, e.statusCode || 500, { error: e.message }); }
   }
 
+  function settingsClaudeConfig(config) {
+    const claude = { ...shared.DEFAULT_CLAUDE, ...(config.claude || {}) };
+    delete claude.permissionMode;
+    return claude;
+  }
+
   async function handleSettingsRead(req, res) {
     try {
       const config = queries.getConfig();
@@ -5414,7 +5420,7 @@ What would you like to discuss or change? When you're happy, say "approve" and I
       if (engine.prPollCommentsEvery === undefined && engine.adoPollCommentsEvery !== undefined) engine.prPollCommentsEvery = engine.adoPollCommentsEvery;
       return jsonReply(res, 200, {
         engine,
-        claude: { ...shared.DEFAULT_CLAUDE, ...(config.claude || {}) },
+        claude: settingsClaudeConfig(config),
         agents: config.agents || {},
         teams: { ...shared.ENGINE_DEFAULTS.teams, ...(config.teams || {}) },
         projects: (config.projects || []).map(p => ({
@@ -5437,6 +5443,7 @@ What would you like to discuss or change? When you're happy, say "approve" and I
       if (!config.engine) config.engine = {};
       if (!config.claude) config.claude = {};
       if (!config.agents) config.agents = {};
+      delete config.claude.permissionMode;
 
       const _clamped = [];
       const _engineModelDiscovery = require('./engine/model-discovery');
@@ -5607,10 +5614,6 @@ What would you like to discuss or change? When you're happy, say "approve" and I
         for (const key of ['allowedTools', 'outputFormat']) {
           if (body.claude[key] !== undefined) config.claude[key] = String(body.claude[key]);
         }
-        if (body.claude.permissionMode !== undefined) {
-          const valid = ['bypassPermissions', 'auto', 'default'];
-          config.claude.permissionMode = valid.includes(body.claude.permissionMode) ? body.claude.permissionMode : 'bypassPermissions';
-        }
       }
 
       if (body.agents) {

package/docs/auto-discovery.md

@@ -250,10 +250,12 @@ Combines:
 ```bash
 claude -p --system-prompt-file <sysprompt-file> \
   --output-format stream-json --max-turns 100 --verbose \
-  --permission-mode bypassPermissions
+  --dangerously-skip-permissions
 # Prompt text is piped via stdin (not passed as an arg).
 # Agent dispatches route through engine/spawn-agent.js; CC / doc-chat use a direct
 # spawn path in engine/llm.js that bypasses spawn-agent.js entirely.
+# Permission bypass is runtime-owned: Copilot uses
+# --autopilot --allow-all --no-ask-user instead.
 ```
 
 - Process runs in the worktree directory (or rootDir for reviews)

package/docs/blog-first-successful-dispatch.md

@@ -63,9 +63,9 @@ proc.stdin.end();
 
 Fix: switched to `--output-format stream-json` — streams events as they happen.
 
-### Permission Mode
+### Permission Bypass
 
-Agents would hang waiting for permission prompts (invisible in headless mode). Added `--permission-mode bypassPermissions`.
+Agents would hang waiting for permission prompts (invisible in headless mode). Modern Minions keeps bypass behavior inside runtime adapters: Claude emits `--dangerously-skip-permissions`; Copilot emits `--autopilot --allow-all --no-ask-user`. The legacy `config.claude.permissionMode` key is ignored.
 
 ### CLAUDECODE Environment Variable
 
@@ -85,7 +85,7 @@ When the engine restarts, the in-memory `activeProcesses` Map is lost. Active di
 
 **Dispatch 1773292681199** — Dallas, central work item, auto-route:
 
-1. Engine spawns `node spawn-agent.js prompt.md sysprompt.md --output-format stream-json --verbose --permission-mode bypassPermissions`
+1. Engine spawns `node spawn-agent.js prompt.md sysprompt.md --runtime claude --output-format stream-json --verbose`
 2. spawn-agent.js resolves `cli.js`, spawns `node cli.js -p --system-prompt <content> ...`
 3. Prompt piped via stdin — no shell interpretation
 4. MCP servers connect (azure-ado, azure-kusto, mobile, DevBox)

package/docs/deprecated.json

@@ -22,5 +22,13 @@
     "reason": "These cadence settings gate both ADO and GitHub PR polling, so the ADO-prefixed names are misleading.",
     "locations": ["engine.js read-side fallback from config.engine.adoPollStatusEvery/adoPollCommentsEvery", "dashboard.js handleSettingsRead/handleSettingsUpdate alias fallback for old keys"],
     "cleanup": "Remove the adoPoll* alias fallback reads after existing configs have been migrated to prPollStatusEvery/prPollCommentsEvery."
+  },
+  {
+    "id": "config-claude-permission-mode",
+    "summary": "config.claude.permissionMode ignored; runtime adapters own permission bypass flags",
+    "deprecated": "2026-05-04",
+    "reason": "Claude and Copilot require different non-interactive bypass flags, so a shared Claude config field was misleading and no longer controls spawns.",
+    "locations": ["dashboard.js settings update strips config.claude.permissionMode", "dashboard/js/settings.js no longer renders a Permission Mode selector"],
+    "cleanup": "After old configs have been rewritten through settings, remove the deprecated-field preflight warning entry for permissionMode."
   }
 ]

package/engine/copilot-models.json

@@ -1,5 +1,5 @@
 {
   "runtime": "copilot",
   "models": null,
-  "cachedAt": "2026-05-04T03:30:25.499Z"
+  "cachedAt": "2026-05-04T03:31:17.601Z"
 }

package/engine/queries.js

@@ -428,25 +428,11 @@ function getAgentStatus(agentId) {
     if (active._blockingToolCall) {
       result._blockingToolCall = active._blockingToolCall;
     }
-    // Detect permission-waiting and in-flight tools: read only head+tail of live-output.log (max 2KB total)
+    // Detect in-flight tools: read only head+tail of live-output.log (max 2KB total)
     try {
       const liveLogPath = path.join(AGENTS_DIR, agentId, 'live-output.log');
       const { head, tail } = readHeadTail(liveLogPath, 1024);
       if (head) {
-        // Check init message (in head) for permission mode
-        const initMatch = head.match(/"permissionMode"\s*:\s*"([^"]+)"/);
-        if (initMatch && initMatch[1] !== 'bypassPermissions') {
-          result._permissionMode = initMatch[1];
-        }
-        // Check if agent has been silent for >60s (use tail for recent activity)
-        const lastLine = tail.trimEnd().split('\n').pop();
-        if (lastLine && lastLine.includes('"type":"assistant"') && lastLine.includes('"tool_use"')) {
-          const liveStat = fs.statSync(liveLogPath);
-          const silentMs = Date.now() - liveStat.mtimeMs;
-          if (silentMs > 60000 && result._permissionMode) {
-            result._warning = 'Possibly waiting for permission approval — agent is not in bypass mode';
-          }
-        }
         // Detect in-flight tool calls (task_started with no task_notification)
         const inFlight = detectInFlightTool(tail);
         if (inFlight && inFlight.description) {
@@ -570,7 +556,6 @@ function getAgents(config) {
       completed_at: s.completed_at || null,
       _blockingToolCall: s._blockingToolCall || null,
       _warning: s._warning || null,
-      _permissionMode: s._permissionMode || null,
       chartered, inboxCount: inboxFiles.length + steeringInboxFiles.length
     };
   });

package/engine/shared.js

@@ -851,7 +851,7 @@ const ENGINE_DEFAULTS = {
   // Backward-compat: keep `engine.claude.*` field family deprecation tracker. Listed here so preflight
   // knows which subkeys to flag as deprecated. Do not consume `claude.*` in new code — use the runtime
   // adapter system (engine/runtimes/) and the resolveAgent*/resolveCc* helpers instead.
-  _deprecatedConfigClaudeFields: ['binary', 'outputFormat', 'allowedTools', 'maxTurns', 'effort', 'budgetCap'],
+  _deprecatedConfigClaudeFields: ['binary', 'outputFormat', 'allowedTools', 'permissionMode', 'maxTurns', 'effort', 'budgetCap'],
   // Teams integration — config.teams shape: { enabled, appId, appPassword, certPath, privateKeyPath, tenantId, notifyEvents, ccMirror, inboxPollInterval }
   // Auth modes: (1) appId + appPassword (client secret), or (2) appId + certPath + privateKeyPath + tenantId (certificate)
   teams: {

package/minions.js

@@ -470,6 +470,7 @@ async function initMinions({ skipScan = false, scanRoot, scanDepth } = {}) {
     if (config.engine[k] === undefined) config.engine[k] = v;
   }
   if (!config.claude) config.claude = {};
+  delete config.claude.permissionMode;
   for (const [k, v] of Object.entries(DEFAULT_CLAUDE)) {
     if (config.claude[k] === undefined) config.claude[k] = v;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yemi33/minions",
-  "version": "0.1.1693",
+  "version": "0.1.1694",
   "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
   "bin": {
     "minions": "bin/minions.js"