palmier 1.1.21 → 1.1.23

package/README.md

@@ -13,7 +13,7 @@ The control surface is bidirectional:
 * **Phone → agents:** start ad-hoc sessions, register schedule- or event-triggered tasks, inspect session output, and respond to agent input/confirmation requests.
 * **Agents → phone:** agents can read device state (location, calendar, contacts, notifications, SMS, battery) and trigger actions (push notifications, full-screen alarms, SMS, email, contact/calendar writes, ringer mode).
 
-Capability access is opt-in per device: each capability is gated behind an Android permission and a per-host toggle. An optional yolo mode auto-approves agent input/confirmation requests.
+Capability access is opt-in per device: each capability is gated behind an Android permission and a per-host toggle. Agents always run in yolo mode (all tool calls auto-approved) when their CLI supports it.
 
 ## Quick Start
 
@@ -158,21 +158,7 @@ Revoking the linked device also clears the host's linked-device record; device c
 
 Palmier can store website passwords and PINs like a browser's password manager so agents can sign in to sites without ever seeing the credentials. When an agent driving a browser (via the `playwright-cli` skill) reaches a login or PIN field, it calls the `fill-password` tool with the page URL, the username, and the field's element ref. Palmier matches the saved secret by **origin**, fills it directly into the live browser session, and presses Enter to submit the form in the same step — so the plaintext secret sits on the page for as little time as possible and never enters the agent's context. If nothing is saved for that `(origin, username)`, Palmier prompts you in the app with a masked dialog. The dialog has a "Save for next time" checkbox (on by default): leave it checked to store the secret for reuse, or uncheck it to fill it just this once without saving. Either way it is filled into the page. The plaintext secret is never returned to the agent and is never written to task history.
 
-Saved passwords and PINs are encrypted at rest with AES-256-GCM under a host-local key, both stored in `~/.config/palmier/` (`passwords.enc` and `password-key`). Manage them from the app via **Manage saved passwords** in the side panel (lists origin and username only, with per-entry delete), or from the host CLI:
-
-```bash
-# List saved passwords (origin and username only — never the password)
-palmier passwords list
-
-# Delete a specific saved password
-palmier passwords delete https://example.com alice
-
-# Delete every saved password for an origin
-palmier passwords delete https://example.com
-
-# Delete all saved passwords
-palmier passwords clear
-```
+Saved passwords and PINs are encrypted at rest with AES-256-GCM under a host-local key, both stored in `~/.config/palmier/` (`passwords.enc` and `password-key`). Manage them from the app via **Manage saved passwords** in the side panel (lists origin and username only, with per-entry delete).
 
 ### The `init` Command
 
@@ -229,9 +215,6 @@ The default network interface is detected once during `palmier init` and saved t
 | `palmier clients list` | List active client tokens |
 | `palmier clients revoke <token>` | Revoke a specific client token |
 | `palmier clients revoke-all` | Revoke all client tokens |
-| `palmier passwords list` | List saved passwords (origin and username only) |
-| `palmier passwords delete <origin> [username]` | Delete a saved password (omit username to delete all for the origin) |
-| `palmier passwords clear` | Delete all saved passwords |
 | `palmier info` | Show host connection info (address, mode) |
 | `palmier serve` | Run the persistent RPC handler (default command) |
 | `palmier restart` | Restart the palmier serve daemon |

package/dist/agent-tools.d.ts

@@ -1,4 +1,4 @@
-import { type NatsConnection } from "nats";
+import { type NatsConnection } from "@nats-io/transport-node";
 import type { HostConfig } from "./types.js";
 export declare class ToolError extends Error {
     statusCode: number;

package/dist/agent-tools.js

@@ -1,4 +1,3 @@
-import { StringCodec } from "nats";
 import { registerPending } from "./pending-requests.js";
 import { getLinkedDevice } from "./linked-device.js";
 import { getNotifications } from "./notification-store.js";
@@ -33,11 +32,10 @@ const notifyTool = {
             throw new ToolError("title and body are required", 400);
         if (!ctx.nc)
             throw new ToolError("NATS not connected — push notifications require server mode", 503);
-        const sc = StringCodec();
         const payload = { hostId: ctx.config.hostId, title, body, session_id: ctx.taskId };
         const subject = `host.${ctx.config.hostId}.push.send`;
-        const reply = await ctx.nc.request(subject, sc.encode(JSON.stringify(payload)), { timeout: 15_000 });
-        const result = JSON.parse(sc.decode(reply.data));
+        const reply = await ctx.nc.request(subject, JSON.stringify(payload), { timeout: 15_000 });
+        const result = JSON.parse(reply.string());
         if (result.ok)
             return { ok: true };
         throw new ToolError(result.error ?? "Push notification failed", 502);
@@ -309,9 +307,8 @@ const deviceGeolocationTool = {
         const device = getLinkedDevice();
         if (!device)
             throw new ToolError("No linked device configured", 400);
-        const sc = StringCodec();
-        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.geolocation`, sc.encode(JSON.stringify({ hostId: ctx.config.hostId, requestId: ctx.taskId, fcmToken: device.fcmToken })), { timeout: 5_000 });
-        const ack = JSON.parse(sc.decode(ackReply.data));
+        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.geolocation`, JSON.stringify({ hostId: ctx.config.hostId, requestId: ctx.taskId, fcmToken: device.fcmToken }), { timeout: 5_000 });
+        const ack = JSON.parse(ackReply.string());
         if (ack.error)
             throw new ToolError(ack.error, 502);
         const locationPromise = new Promise((resolve, reject) => {
@@ -323,7 +320,7 @@ const deviceGeolocationTool = {
             (async () => {
                 for await (const msg of sub) {
                     clearTimeout(timer);
-                    resolve(sc.decode(msg.data));
+                    resolve(msg.string());
                 }
             })();
         });
@@ -350,9 +347,8 @@ const readContactsTool = {
         const device = getLinkedDevice();
         if (!device)
             throw new ToolError("No linked device configured", 400);
-        const sc = StringCodec();
-        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.contacts`, sc.encode(JSON.stringify({ hostId: ctx.config.hostId, requestId: ctx.taskId, fcmToken: device.fcmToken, action: "read" })), { timeout: 5_000 });
-        const ack = JSON.parse(sc.decode(ackReply.data));
+        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.contacts`, JSON.stringify({ hostId: ctx.config.hostId, requestId: ctx.taskId, fcmToken: device.fcmToken, action: "read" }), { timeout: 5_000 });
+        const ack = JSON.parse(ackReply.string());
         if (ack.error)
             throw new ToolError(ack.error, 502);
         const responsePromise = new Promise((resolve, reject) => {
@@ -364,7 +360,7 @@ const readContactsTool = {
             (async () => {
                 for await (const msg of sub) {
                     clearTimeout(timer);
-                    resolve(sc.decode(msg.data));
+                    resolve(msg.string());
                 }
             })();
         });
@@ -399,12 +395,11 @@ const createContactTool = {
         const { name, phone, email } = args;
         if (!name)
             throw new ToolError("name is required", 400);
-        const sc = StringCodec();
-        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.contacts`, sc.encode(JSON.stringify({
+        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.contacts`, JSON.stringify({
             hostId: ctx.config.hostId, requestId: ctx.taskId, fcmToken: device.fcmToken,
             action: "create", name, phone, email,
-        })), { timeout: 5_000 });
-        const ack = JSON.parse(sc.decode(ackReply.data));
+        }), { timeout: 5_000 });
+        const ack = JSON.parse(ackReply.string());
         if (ack.error)
             throw new ToolError(ack.error, 502);
         const responsePromise = new Promise((resolve, reject) => {
@@ -416,7 +411,7 @@ const createContactTool = {
             (async () => {
                 for await (const msg of sub) {
                     clearTimeout(timer);
-                    resolve(sc.decode(msg.data));
+                    resolve(msg.string());
                 }
             })();
         });
@@ -448,14 +443,13 @@ const readCalendarTool = {
         if (!device)
             throw new ToolError("No linked device configured", 400);
         const { startDate, endDate } = args;
-        const sc = StringCodec();
-        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.calendar`, sc.encode(JSON.stringify({
+        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.calendar`, JSON.stringify({
             hostId: ctx.config.hostId, requestId: ctx.taskId, fcmToken: device.fcmToken,
             action: "read",
             ...(startDate ? { startDate: String(startDate) } : {}),
             ...(endDate ? { endDate: String(endDate) } : {}),
-        })), { timeout: 5_000 });
-        const ack = JSON.parse(sc.decode(ackReply.data));
+        }), { timeout: 5_000 });
+        const ack = JSON.parse(ackReply.string());
         if (ack.error)
             throw new ToolError(ack.error, 502);
         const responsePromise = new Promise((resolve, reject) => {
@@ -467,7 +461,7 @@ const readCalendarTool = {
             (async () => {
                 for await (const msg of sub) {
                     clearTimeout(timer);
-                    resolve(sc.decode(msg.data));
+                    resolve(msg.string());
                 }
             })();
         });
@@ -504,15 +498,14 @@ const createCalendarEventTool = {
         const { title, startTime, endTime, location, description } = args;
         if (!title || !startTime || !endTime)
             throw new ToolError("title, startTime, and endTime are required", 400);
-        const sc = StringCodec();
-        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.calendar`, sc.encode(JSON.stringify({
+        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.calendar`, JSON.stringify({
             hostId: ctx.config.hostId, requestId: ctx.taskId, fcmToken: device.fcmToken,
             action: "create",
             title, startTime: String(startTime), endTime: String(endTime),
             ...(location ? { location } : {}),
             ...(description ? { description } : {}),
-        })), { timeout: 5_000 });
-        const ack = JSON.parse(sc.decode(ackReply.data));
+        }), { timeout: 5_000 });
+        const ack = JSON.parse(ackReply.string());
         if (ack.error)
             throw new ToolError(ack.error, 502);
         const responsePromise = new Promise((resolve, reject) => {
@@ -524,7 +517,7 @@ const createCalendarEventTool = {
             (async () => {
                 for await (const msg of sub) {
                     clearTimeout(timer);
-                    resolve(sc.decode(msg.data));
+                    resolve(msg.string());
                 }
             })();
         });
@@ -558,12 +551,11 @@ const sendSmsTool = {
         const { to, body } = args;
         if (!to || !body)
             throw new ToolError("to and body are required", 400);
-        const sc = StringCodec();
-        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.sms`, sc.encode(JSON.stringify({
+        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.sms`, JSON.stringify({
             hostId: ctx.config.hostId, requestId: ctx.taskId, fcmToken: device.fcmToken,
             action: "send", to, body,
-        })), { timeout: 5_000 });
-        const ack = JSON.parse(sc.decode(ackReply.data));
+        }), { timeout: 5_000 });
+        const ack = JSON.parse(ackReply.string());
         if (ack.error)
             throw new ToolError(ack.error, 502);
         const responsePromise = new Promise((resolve, reject) => {
@@ -575,7 +567,7 @@ const sendSmsTool = {
             (async () => {
                 for await (const msg of sub) {
                     clearTimeout(timer);
-                    resolve(sc.decode(msg.data));
+                    resolve(msg.string());
                 }
             })();
         });
@@ -610,15 +602,14 @@ const sendAlarmTool = {
         const { title, description } = args;
         if (!title)
             throw new ToolError("title is required", 400);
-        const sc = StringCodec();
         const payload = {
             hostId: ctx.config.hostId, requestId: ctx.taskId, fcmToken: device.fcmToken,
             title,
         };
         if (description)
             payload.description = description;
-        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.alarm`, sc.encode(JSON.stringify(payload)), { timeout: 5_000 });
-        const ack = JSON.parse(sc.decode(ackReply.data));
+        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.alarm`, JSON.stringify(payload), { timeout: 5_000 });
+        const ack = JSON.parse(ackReply.string());
         if (ack.error)
             throw new ToolError(ack.error, 502);
         const responsePromise = new Promise((resolve, reject) => {
@@ -630,7 +621,7 @@ const sendAlarmTool = {
             (async () => {
                 for await (const msg of sub) {
                     clearTimeout(timer);
-                    resolve(sc.decode(msg.data));
+                    resolve(msg.string());
                 }
             })();
         });
@@ -657,9 +648,8 @@ const readBatteryTool = {
         const device = getLinkedDevice();
         if (!device)
             throw new ToolError("No linked device configured", 400);
-        const sc = StringCodec();
-        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.battery`, sc.encode(JSON.stringify({ hostId: ctx.config.hostId, requestId: ctx.taskId, fcmToken: device.fcmToken })), { timeout: 5_000 });
-        const ack = JSON.parse(sc.decode(ackReply.data));
+        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.battery`, JSON.stringify({ hostId: ctx.config.hostId, requestId: ctx.taskId, fcmToken: device.fcmToken }), { timeout: 5_000 });
+        const ack = JSON.parse(ackReply.string());
         if (ack.error)
             throw new ToolError(ack.error, 502);
         const responsePromise = new Promise((resolve, reject) => {
@@ -671,7 +661,7 @@ const readBatteryTool = {
             (async () => {
                 for await (const msg of sub) {
                     clearTimeout(timer);
-                    resolve(sc.decode(msg.data));
+                    resolve(msg.string());
                 }
             })();
         });
@@ -704,9 +694,8 @@ const setRingerModeTool = {
         const { mode } = args;
         if (!["normal", "vibrate", "silent"].includes(mode))
             throw new ToolError("mode must be 'normal', 'vibrate', or 'silent'", 400);
-        const sc = StringCodec();
-        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.ringer`, sc.encode(JSON.stringify({ hostId: ctx.config.hostId, requestId: ctx.taskId, fcmToken: device.fcmToken, mode })), { timeout: 5_000 });
-        const ack = JSON.parse(sc.decode(ackReply.data));
+        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.ringer`, JSON.stringify({ hostId: ctx.config.hostId, requestId: ctx.taskId, fcmToken: device.fcmToken, mode }), { timeout: 5_000 });
+        const ack = JSON.parse(ackReply.string());
         if (ack.error)
             throw new ToolError(ack.error, 502);
         const responsePromise = new Promise((resolve, reject) => {
@@ -718,7 +707,7 @@ const setRingerModeTool = {
             (async () => {
                 for await (const msg of sub) {
                     clearTimeout(timer);
-                    resolve(sc.decode(msg.data));
+                    resolve(msg.string());
                 }
             })();
         });
@@ -755,7 +744,6 @@ const sendEmailTool = {
         const { to, subject, body, cc, bcc } = args;
         if (!to)
             throw new ToolError("to is required", 400);
-        const sc = StringCodec();
         const payload = {
             hostId: ctx.config.hostId, requestId: ctx.taskId, fcmToken: device.fcmToken,
             to,
@@ -768,8 +756,8 @@ const sendEmailTool = {
             payload.cc = cc;
         if (bcc)
             payload.bcc = bcc;
-        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.email`, sc.encode(JSON.stringify(payload)), { timeout: 5_000 });
-        const ack = JSON.parse(sc.decode(ackReply.data));
+        const ackReply = await ctx.nc.request(`host.${ctx.config.hostId}.fcm.email`, JSON.stringify(payload), { timeout: 5_000 });
+        const ack = JSON.parse(ackReply.string());
         if (ack.error)
             throw new ToolError(ack.error, 502);
         const responsePromise = new Promise((resolve, reject) => {
@@ -781,7 +769,7 @@ const sendEmailTool = {
             (async () => {
                 for await (const msg of sub) {
                     clearTimeout(timer);
-                    resolve(sc.decode(msg.data));
+                    resolve(msg.string());
                 }
             })();
         });

package/dist/agents/agent-instructions.md

@@ -29,7 +29,9 @@ Whenever a tool you are trying to use is denied or you lack the required permiss
 
 ## Browsers
 
-When launching a browser with the Playwright CLI `open` command, always pass `--headed` (never run headless) and `--persistent` (reuse a persistent profile so logins and cookies survive across runs).
+Whenever the task needs a browser, launch it with the Playwright CLI (`playwright-cli open`). Do not use any other browser tool, automation library, or launch method.
+
+When launching, always pass `--headed` (never run headless) and `--persistent` (reuse a persistent profile so logins and cookies survive across runs).
 
 When the task is finished, close any browser you opened with the Playwright CLI `close` command (pass the same `-s=<session>` if you used one) before printing the completion marker.
 

package/dist/agents/agent.d.ts

@@ -1,4 +1,4 @@
-import type { ParsedTask, RequiredPermission } from "../types.js";
+import type { ParsedTask } from "../types.js";
 export interface CommandLine {
     args: string[];
     /** If provided, the string is written to the process's stdin and then the pipe is closed. */
@@ -28,8 +28,6 @@ export interface AgentTool {
     /** Whether this agent supports permission overrides (e.g. --allowedTools).
      *  When falsy, the permissions section is omitted from agent instructions. */
     supportsPermissions?: boolean;
-    /** Whether this agent supports yolo mode (auto-approve all tools). */
-    supportsYolo?: boolean;
     /** When true, the run loop persists the agent's stderr output only if the invocation fails. */
     suppressStdErr?: boolean;
     /** Matches the model name (capture group 1) in the banner the CLI prints on stderr.
@@ -40,10 +38,8 @@ export interface AgentTool {
      *  Surfaced next to the agent in the installer. */
     freeUsage?: string;
     /** Return the command and args used to run a task. If followupPrompt is provided, use it instead of the task's prompt,
-     *  and treat it as a continuation of the original run (reuse the same session, etc).
-     *  extraPermissions: pass an array of RequiredPermission for transient permissions granted for this run only,
-     *  or pass `"yolo"` to enable yolo mode (auto-approve all tools, skip permission instructions). */
-    getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine;
+     *  and treat it as a continuation of the original run (reuse the same session, etc). */
+    getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string): CommandLine;
 }
 export declare function getPromptCommandLine(agent: AgentTool, prompt: string): CommandLine;
 export declare function probeAgent(agent: AgentTool): Promise<boolean>;
@@ -56,7 +52,6 @@ export interface DetectedAgent {
     key: string;
     label: string;
     supportsPermissions?: boolean;
-    supportsYolo?: boolean;
     npmPackage?: string;
     /** Runtime marker for "managed by Palmier" — present iff Palmier installed/manages this agent. */
     version?: string;

package/dist/agents/agent.js

@@ -121,7 +121,6 @@ export async function detectAgents(previous, newlyInstalled) {
             key,
             label: agent.label,
             supportsPermissions: agent.supportsPermissions,
-            supportsYolo: agent.supportsYolo,
             ...(agent.npmPackage ? { npmPackage: agent.npmPackage } : {}),
             ...(version ? { version } : {}),
         });

package/dist/agents/aider.js

@@ -4,14 +4,9 @@ export const aiderAgent = {
     command: "aider",
     promptArgs: ["--message"],
     probeArg: "--version",
-    supportsYolo: true,
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = [];
-        if (yolo) {
-            args.push("--yes-always");
-        }
+        const args = ["--yes-always"];
         args.push("--message", prompt);
         return { args };
     },

package/dist/agents/claude.js

@@ -6,20 +6,11 @@ export const claudeAgent = {
     probeArg: "--version",
     authArgs: ["auth", "login"],
     supportsPermissions: true,
-    supportsYolo: true,
     npmPackage: "@anthropic-ai/claude-code",
     freeUsage: "Free with Claude Pro",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = ["--permission-mode", yolo ? "bypassPermissions" : "acceptEdits", "-p"];
-        if (!yolo) {
-            args.push("--allowedTools", "WebFetch", "Skill(playwright-cli:*)", "Bash(curl:*)", "Bash(wget:*)", "Bash(playwright:*)", "Bash(playwright-cli:*)");
-            const allPerms = [...(task.frontmatter.permissions ?? []), ...(extraPermissions ?? [])];
-            for (const p of allPerms) {
-                args.push(p.name);
-            }
-        }
+        const args = ["--permission-mode", "bypassPermissions", "-p"];
         if (followupPrompt) {
             args.push("-c");
         }

package/dist/agents/cline.js

@@ -4,15 +4,10 @@ export const clineAgent = {
     command: "cline",
     promptArgs: ["--yolo", "-p"],
     probeArg: "--version",
-    supportsYolo: true,
     npmPackage: "cline",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = [];
-        if (yolo) {
-            args.push("--yolo");
-        }
+        const args = ["--yolo"];
         args.push(prompt);
         return { args };
     },

package/dist/agents/codex.js

@@ -5,15 +5,13 @@ export const codexAgent = {
     promptArgs: ["exec", "--skip-git-repo-check"],
     probeArg: "--version",
     authArgs: ["login"],
-    supportsYolo: true,
     suppressStdErr: true,
     stderrModelPattern: /^model: (.+)$/m,
     npmPackage: "@openai/codex",
     freeUsage: "Free Tier",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = ["exec", "--skip-git-repo-check", "--sandbox", yolo ? "danger-full-access" : "workspace-write"];
+        const args = ["exec", "--skip-git-repo-check", "--sandbox", "danger-full-access"];
         if (followupPrompt) {
             args.push("resume", "--last");
         }

package/dist/agents/copilot.js

@@ -5,21 +5,13 @@ export const copilotAgent = {
     promptArgs: ["-p"],
     probeArg: "-v",
     authArgs: ["login"],
-    supportsYolo: true,
     suppressStdErr: true,
     npmPackage: "@github/copilot",
     freeUsage: "Free Tier",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
         const args = ["-p", prompt];
-        if (yolo) {
-            args.push("--yolo");
-        }
-        else {
-            const allPerms = [...(task.frontmatter.permissions ?? []), ...(extraPermissions ?? [])];
-            args.push(`--allow-tool=${["web_fetch", ...allPerms.map((p) => p.name)].join(",")}`);
-        }
+        args.push("--yolo");
         if (followupPrompt) {
             args.push("--continue");
         }

package/dist/agents/cursor.js

@@ -4,14 +4,9 @@ export const cursorAgent = {
     command: "cursor",
     promptArgs: ["-p"],
     probeArg: "--version",
-    supportsYolo: true,
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = [];
-        if (yolo) {
-            args.push("--force");
-        }
+        const args = ["--force"];
         if (followupPrompt) {
             args.push("--continue");
         }

package/dist/agents/deepagents.js

@@ -4,14 +4,9 @@ export const deepAgentsAgent = {
     command: "deepagents",
     promptArgs: ["--non-interactive"],
     probeArg: "--version",
-    supportsYolo: true,
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = [];
-        if (yolo) {
-            args.push("--auto-approve");
-        }
+        const args = ["--auto-approve"];
         if (followupPrompt) {
             args.push("--resume");
         }

package/dist/agents/droid.js

@@ -4,15 +4,10 @@ export const droidAgent = {
     command: "droid",
     promptArgs: ["exec"],
     probeArg: "--version",
-    supportsYolo: true,
     npmPackage: "@factory/cli",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = ["exec", "--session-id", task.frontmatter.id];
-        if (yolo) {
-            args.push("--skip-permissions-unsafe");
-        }
+        const args = ["exec", "--session-id", task.frontmatter.id, "--skip-permissions-unsafe"];
         args.push(prompt);
         return { args };
     },

package/dist/agents/goose.js

@@ -4,15 +4,13 @@ export const gooseAgent = {
     command: "goose",
     promptArgs: ["run", "--text"],
     probeArg: "--version",
-    supportsYolo: true,
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
         const args = ["run"];
         if (followupPrompt) {
             args.push("--resume");
         }
         args.push("--text", prompt);
-        return { args, ...(yolo ? { env: { GOOSE_MODE: "auto" } } : {}) };
+        return { args, env: { GOOSE_MODE: "auto" } };
     },
 };

package/dist/agents/grok.js

@@ -5,16 +5,11 @@ export const grokAgent = {
     promptArgs: ["-p"],
     probeArg: "--version",
     authArgs: ["login"],
-    supportsYolo: true,
     npmPackage: "@xai-official/grok",
     freeUsage: "Free Tier",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = [];
-        if (yolo) {
-            args.push("--always-approve");
-        }
+        const args = ["--always-approve"];
         if (followupPrompt) {
             args.push("-c");
         }

package/dist/agents/hermes.js

@@ -4,14 +4,9 @@ export const hermesAgent = {
     command: "hermes",
     promptArgs: ["chat", "-q"],
     probeArg: "--version",
-    supportsYolo: true,
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = ["chat"];
-        if (yolo) {
-            args.push("--trust-all-tools");
-        }
+        const args = ["chat", "--trust-all-tools"];
         if (followupPrompt) {
             args.push("--continue");
         }

package/dist/agents/kimi.js

@@ -4,19 +4,15 @@ export const kimiAgent = {
     command: "kimi",
     promptArgs: ["-p"],
     probeArg: "--version",
-    supportsYolo: false,
     suppressStdErr: true,
     npmPackage: "@moonshot-ai/kimi-code",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
         const args = [];
-        if (yolo) {
-            args.push("--yolo");
-        }
         if (followupPrompt) {
             args.push("--continue");
         }
+        // Print mode (-p) already implies yolo.
         args.push("-p", prompt);
         return { args };
     },

package/dist/agents/kiro.js

@@ -4,14 +4,9 @@ export const kiroAgent = {
     command: "kiro-cli",
     promptArgs: ["--no-interactive"],
     probeArg: "--version",
-    supportsYolo: true,
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = [];
-        if (yolo) {
-            args.push("--trust-all-tools");
-        }
+        const args = ["--trust-all-tools"];
         if (followupPrompt) {
             args.push("--resume");
         }

package/dist/agents/openclaw.js

@@ -5,7 +5,7 @@ export const openClawAgent = {
     promptArgs: ["agent", "--local", "--agent", "main", "--message"],
     probeArg: "--version",
     npmPackage: "openclaw",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
         // OpenClaw does not support stdin as prompt.
         const args = ["agent", "--local", "--session-id", task.frontmatter.id, "--message", prompt];