palmier 1.1.22 → 1.1.23

package/README.md

@@ -13,7 +13,7 @@ The control surface is bidirectional:
 * **Phone → agents:** start ad-hoc sessions, register schedule- or event-triggered tasks, inspect session output, and respond to agent input/confirmation requests.
 * **Agents → phone:** agents can read device state (location, calendar, contacts, notifications, SMS, battery) and trigger actions (push notifications, full-screen alarms, SMS, email, contact/calendar writes, ringer mode).
 
-Capability access is opt-in per device: each capability is gated behind an Android permission and a per-host toggle. An optional yolo mode auto-approves agent input/confirmation requests.
+Capability access is opt-in per device: each capability is gated behind an Android permission and a per-host toggle. Agents always run in yolo mode (all tool calls auto-approved) when their CLI supports it.
 
 ## Quick Start
 
@@ -158,21 +158,7 @@ Revoking the linked device also clears the host's linked-device record; device c
 
 Palmier can store website passwords and PINs like a browser's password manager so agents can sign in to sites without ever seeing the credentials. When an agent driving a browser (via the `playwright-cli` skill) reaches a login or PIN field, it calls the `fill-password` tool with the page URL, the username, and the field's element ref. Palmier matches the saved secret by **origin**, fills it directly into the live browser session, and presses Enter to submit the form in the same step — so the plaintext secret sits on the page for as little time as possible and never enters the agent's context. If nothing is saved for that `(origin, username)`, Palmier prompts you in the app with a masked dialog. The dialog has a "Save for next time" checkbox (on by default): leave it checked to store the secret for reuse, or uncheck it to fill it just this once without saving. Either way it is filled into the page. The plaintext secret is never returned to the agent and is never written to task history.
 
-Saved passwords and PINs are encrypted at rest with AES-256-GCM under a host-local key, both stored in `~/.config/palmier/` (`passwords.enc` and `password-key`). Manage them from the app via **Manage saved passwords** in the side panel (lists origin and username only, with per-entry delete), or from the host CLI:
-
-```bash
-# List saved passwords (origin and username only — never the password)
-palmier passwords list
-
-# Delete a specific saved password
-palmier passwords delete https://example.com alice
-
-# Delete every saved password for an origin
-palmier passwords delete https://example.com
-
-# Delete all saved passwords
-palmier passwords clear
-```
+Saved passwords and PINs are encrypted at rest with AES-256-GCM under a host-local key, both stored in `~/.config/palmier/` (`passwords.enc` and `password-key`). Manage them from the app via **Manage saved passwords** in the side panel (lists origin and username only, with per-entry delete).
 
 ### The `init` Command
 
@@ -229,9 +215,6 @@ The default network interface is detected once during `palmier init` and saved t
 | `palmier clients list` | List active client tokens |
 | `palmier clients revoke <token>` | Revoke a specific client token |
 | `palmier clients revoke-all` | Revoke all client tokens |
-| `palmier passwords list` | List saved passwords (origin and username only) |
-| `palmier passwords delete <origin> [username]` | Delete a saved password (omit username to delete all for the origin) |
-| `palmier passwords clear` | Delete all saved passwords |
 | `palmier info` | Show host connection info (address, mode) |
 | `palmier serve` | Run the persistent RPC handler (default command) |
 | `palmier restart` | Restart the palmier serve daemon |

package/dist/agents/agent.d.ts

@@ -1,4 +1,4 @@
-import type { ParsedTask, RequiredPermission } from "../types.js";
+import type { ParsedTask } from "../types.js";
 export interface CommandLine {
     args: string[];
     /** If provided, the string is written to the process's stdin and then the pipe is closed. */
@@ -28,8 +28,6 @@ export interface AgentTool {
     /** Whether this agent supports permission overrides (e.g. --allowedTools).
      *  When falsy, the permissions section is omitted from agent instructions. */
     supportsPermissions?: boolean;
-    /** Whether this agent supports yolo mode (auto-approve all tools). */
-    supportsYolo?: boolean;
     /** When true, the run loop persists the agent's stderr output only if the invocation fails. */
     suppressStdErr?: boolean;
     /** Matches the model name (capture group 1) in the banner the CLI prints on stderr.
@@ -40,10 +38,8 @@ export interface AgentTool {
      *  Surfaced next to the agent in the installer. */
     freeUsage?: string;
     /** Return the command and args used to run a task. If followupPrompt is provided, use it instead of the task's prompt,
-     *  and treat it as a continuation of the original run (reuse the same session, etc).
-     *  extraPermissions: pass an array of RequiredPermission for transient permissions granted for this run only,
-     *  or pass `"yolo"` to enable yolo mode (auto-approve all tools, skip permission instructions). */
-    getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string, extraPermissions?: RequiredPermission[] | "yolo"): CommandLine;
+     *  and treat it as a continuation of the original run (reuse the same session, etc). */
+    getTaskRunCommandLine(task: ParsedTask, followupPrompt?: string): CommandLine;
 }
 export declare function getPromptCommandLine(agent: AgentTool, prompt: string): CommandLine;
 export declare function probeAgent(agent: AgentTool): Promise<boolean>;
@@ -56,7 +52,6 @@ export interface DetectedAgent {
     key: string;
     label: string;
     supportsPermissions?: boolean;
-    supportsYolo?: boolean;
     npmPackage?: string;
     /** Runtime marker for "managed by Palmier" — present iff Palmier installed/manages this agent. */
     version?: string;

package/dist/agents/agent.js

@@ -121,7 +121,6 @@ export async function detectAgents(previous, newlyInstalled) {
             key,
             label: agent.label,
             supportsPermissions: agent.supportsPermissions,
-            supportsYolo: agent.supportsYolo,
             ...(agent.npmPackage ? { npmPackage: agent.npmPackage } : {}),
             ...(version ? { version } : {}),
         });

package/dist/agents/aider.js

@@ -4,14 +4,9 @@ export const aiderAgent = {
     command: "aider",
     promptArgs: ["--message"],
     probeArg: "--version",
-    supportsYolo: true,
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = [];
-        if (yolo) {
-            args.push("--yes-always");
-        }
+        const args = ["--yes-always"];
         args.push("--message", prompt);
         return { args };
     },

package/dist/agents/claude.js

@@ -6,20 +6,11 @@ export const claudeAgent = {
     probeArg: "--version",
     authArgs: ["auth", "login"],
     supportsPermissions: true,
-    supportsYolo: true,
     npmPackage: "@anthropic-ai/claude-code",
     freeUsage: "Free with Claude Pro",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = ["--permission-mode", yolo ? "bypassPermissions" : "acceptEdits", "-p"];
-        if (!yolo) {
-            args.push("--allowedTools", "WebFetch", "Skill(playwright-cli:*)", "Bash(curl:*)", "Bash(wget:*)", "Bash(playwright:*)", "Bash(playwright-cli:*)");
-            const allPerms = [...(task.frontmatter.permissions ?? []), ...(extraPermissions ?? [])];
-            for (const p of allPerms) {
-                args.push(p.name);
-            }
-        }
+        const args = ["--permission-mode", "bypassPermissions", "-p"];
         if (followupPrompt) {
             args.push("-c");
         }

package/dist/agents/cline.js

@@ -4,15 +4,10 @@ export const clineAgent = {
     command: "cline",
     promptArgs: ["--yolo", "-p"],
     probeArg: "--version",
-    supportsYolo: true,
     npmPackage: "cline",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = [];
-        if (yolo) {
-            args.push("--yolo");
-        }
+        const args = ["--yolo"];
         args.push(prompt);
         return { args };
     },

package/dist/agents/codex.js

@@ -5,15 +5,13 @@ export const codexAgent = {
     promptArgs: ["exec", "--skip-git-repo-check"],
     probeArg: "--version",
     authArgs: ["login"],
-    supportsYolo: true,
     suppressStdErr: true,
     stderrModelPattern: /^model: (.+)$/m,
     npmPackage: "@openai/codex",
     freeUsage: "Free Tier",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = ["exec", "--skip-git-repo-check", "--sandbox", yolo ? "danger-full-access" : "workspace-write"];
+        const args = ["exec", "--skip-git-repo-check", "--sandbox", "danger-full-access"];
         if (followupPrompt) {
             args.push("resume", "--last");
         }

package/dist/agents/copilot.js

@@ -5,21 +5,13 @@ export const copilotAgent = {
     promptArgs: ["-p"],
     probeArg: "-v",
     authArgs: ["login"],
-    supportsYolo: true,
     suppressStdErr: true,
     npmPackage: "@github/copilot",
     freeUsage: "Free Tier",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
         const args = ["-p", prompt];
-        if (yolo) {
-            args.push("--yolo");
-        }
-        else {
-            const allPerms = [...(task.frontmatter.permissions ?? []), ...(extraPermissions ?? [])];
-            args.push(`--allow-tool=${["web_fetch", ...allPerms.map((p) => p.name)].join(",")}`);
-        }
+        args.push("--yolo");
         if (followupPrompt) {
             args.push("--continue");
         }

package/dist/agents/cursor.js

@@ -4,14 +4,9 @@ export const cursorAgent = {
     command: "cursor",
     promptArgs: ["-p"],
     probeArg: "--version",
-    supportsYolo: true,
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = [];
-        if (yolo) {
-            args.push("--force");
-        }
+        const args = ["--force"];
         if (followupPrompt) {
             args.push("--continue");
         }

package/dist/agents/deepagents.js

@@ -4,14 +4,9 @@ export const deepAgentsAgent = {
     command: "deepagents",
     promptArgs: ["--non-interactive"],
     probeArg: "--version",
-    supportsYolo: true,
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = [];
-        if (yolo) {
-            args.push("--auto-approve");
-        }
+        const args = ["--auto-approve"];
         if (followupPrompt) {
             args.push("--resume");
         }

package/dist/agents/droid.js

@@ -4,15 +4,10 @@ export const droidAgent = {
     command: "droid",
     promptArgs: ["exec"],
     probeArg: "--version",
-    supportsYolo: true,
     npmPackage: "@factory/cli",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = ["exec", "--session-id", task.frontmatter.id];
-        if (yolo) {
-            args.push("--skip-permissions-unsafe");
-        }
+        const args = ["exec", "--session-id", task.frontmatter.id, "--skip-permissions-unsafe"];
         args.push(prompt);
         return { args };
     },

package/dist/agents/goose.js

@@ -4,15 +4,13 @@ export const gooseAgent = {
     command: "goose",
     promptArgs: ["run", "--text"],
     probeArg: "--version",
-    supportsYolo: true,
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
         const args = ["run"];
         if (followupPrompt) {
             args.push("--resume");
         }
         args.push("--text", prompt);
-        return { args, ...(yolo ? { env: { GOOSE_MODE: "auto" } } : {}) };
+        return { args, env: { GOOSE_MODE: "auto" } };
     },
 };

package/dist/agents/grok.js

@@ -5,16 +5,11 @@ export const grokAgent = {
     promptArgs: ["-p"],
     probeArg: "--version",
     authArgs: ["login"],
-    supportsYolo: true,
     npmPackage: "@xai-official/grok",
     freeUsage: "Free Tier",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = [];
-        if (yolo) {
-            args.push("--always-approve");
-        }
+        const args = ["--always-approve"];
         if (followupPrompt) {
             args.push("-c");
         }

package/dist/agents/hermes.js

@@ -4,14 +4,9 @@ export const hermesAgent = {
     command: "hermes",
     promptArgs: ["chat", "-q"],
     probeArg: "--version",
-    supportsYolo: true,
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = ["chat"];
-        if (yolo) {
-            args.push("--trust-all-tools");
-        }
+        const args = ["chat", "--trust-all-tools"];
         if (followupPrompt) {
             args.push("--continue");
         }

package/dist/agents/kimi.js

@@ -4,19 +4,15 @@ export const kimiAgent = {
     command: "kimi",
     promptArgs: ["-p"],
     probeArg: "--version",
-    supportsYolo: false,
     suppressStdErr: true,
     npmPackage: "@moonshot-ai/kimi-code",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
         const args = [];
-        if (yolo) {
-            args.push("--yolo");
-        }
         if (followupPrompt) {
             args.push("--continue");
         }
+        // Print mode (-p) already implies yolo.
         args.push("-p", prompt);
         return { args };
     },

package/dist/agents/kiro.js

@@ -4,14 +4,9 @@ export const kiroAgent = {
     command: "kiro-cli",
     promptArgs: ["--no-interactive"],
     probeArg: "--version",
-    supportsYolo: true,
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = [];
-        if (yolo) {
-            args.push("--trust-all-tools");
-        }
+        const args = ["--trust-all-tools"];
         if (followupPrompt) {
             args.push("--resume");
         }

package/dist/agents/openclaw.js

@@ -5,7 +5,7 @@ export const openClawAgent = {
     promptArgs: ["agent", "--local", "--agent", "main", "--message"],
     probeArg: "--version",
     npmPackage: "openclaw",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
         // OpenClaw does not support stdin as prompt.
         const args = ["agent", "--local", "--session-id", task.frontmatter.id, "--message", prompt];

package/dist/agents/opencode.js

@@ -4,15 +4,10 @@ export const openCodeAgent = {
     command: "opencode",
     promptArgs: ["run"],
     probeArg: "--version",
-    supportsYolo: true,
     npmPackage: "opencode-ai",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = ["run"];
-        if (yolo) {
-            args.push("--dangerously-skip-permissions");
-        }
+        const args = ["run", "--dangerously-skip-permissions"];
         if (followupPrompt) {
             args.push("--continue");
         }

package/dist/agents/qoder.js

@@ -5,16 +5,11 @@ export const qoderAgent = {
     promptArgs: ["-p"],
     probeArg: "--version",
     authArgs: ["login"],
-    supportsYolo: true,
     npmPackage: "@qoder-ai/qodercli",
     freeUsage: "Free Tier",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = [];
-        if (yolo) {
-            args.push("--yolo");
-        }
+        const args = ["--yolo"];
         if (followupPrompt) {
             args.push("-c");
         }

package/dist/agents/qwen.js

@@ -5,12 +5,10 @@ export const qwenAgent = {
     promptArgs: ["-p"],
     probeArg: "--version",
     authArgs: ["auth", "qwen-oauth"],
-    supportsYolo: true,
     npmPackage: "@qwen-code/qwen-code",
-    getTaskRunCommandLine(task, followupPrompt, extraPermissions) {
-        const yolo = extraPermissions === "yolo";
+    getTaskRunCommandLine(task, followupPrompt) {
         const prompt = followupPrompt ?? getAgentInstructions(task);
-        const args = ["--approval-mode", yolo ? "yolo" : "auto-edit"];
+        const args = ["--approval-mode", "yolo"];
         if (followupPrompt) {
             args.push("-c");
         }

package/dist/agents/shared-prompt.js

@@ -3,20 +3,15 @@ import * as path from "path";
 import { fileURLToPath } from "url";
 import { loadConfig } from "../config.js";
 import { generateEndpointDocs } from "../agent-tools.js";
-import { getAgent } from "./agent.js";
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const AGENT_INSTRUCTIONS_TEMPLATE = fs.readFileSync(path.join(__dirname, "agent-instructions.md"), "utf-8");
 export function getAgentInstructions(task) {
     const port = loadConfig().httpPort ?? 7256;
     const taskDescription = task.frontmatter.user_prompt;
-    let instructions = AGENT_INSTRUCTIONS_TEMPLATE
+    return AGENT_INSTRUCTIONS_TEMPLATE
         .replace(/\{\{ENDPOINT_DOCS\}\}/g, generateEndpointDocs(port, task.frontmatter.id))
-        .replace(/\{\{TASK_DESCRIPTION\}\}/g, taskDescription);
-    const agent = getAgent(task.frontmatter.agent);
-    if (!agent.supportsPermissions || !!task.frontmatter.yolo_mode) {
-        instructions = instructions.replace(/## Permissions\r?\n[\s\S]*?(?=## |\r?\n---)/m, "");
-    }
-    return instructions;
+        .replace(/\{\{TASK_DESCRIPTION\}\}/g, taskDescription)
+        .replace(/## Permissions\r?\n[\s\S]*?(?=## |\r?\n---)/m, "");
 }
 export const TASK_SUCCESS_MARKER = "[PALMIER_TASK_SUCCESS]";
 export const TASK_FAILURE_MARKER = "[PALMIER_TASK_FAILURE]";

package/dist/agents/wizard.js

@@ -61,7 +61,6 @@ export async function pickAndInstallAgent(current, options = {}) {
         key: choice.key,
         label: choice.label,
         ...(tool.supportsPermissions ? { supportsPermissions: true } : {}),
-        ...(tool.supportsYolo ? { supportsYolo: true } : {}),
         npmPackage: choice.npmPackage,
         ...(version ? { version } : {}),
     };

package/dist/commands/run.js

@@ -80,7 +80,7 @@ async function invokeAgentWithRetries(ctx, invokeTask) {
                 ensureWriter(stream).write(trailing);
             }
         }
-        const { args, stdin, env: agentEnv, files } = ctx.agent.getTaskRunCommandLine(invokeTask, undefined, ctx.task.frontmatter.yolo_mode ? "yolo" : ctx.transientPermissions);
+        const { args, stdin, env: agentEnv, files } = ctx.agent.getTaskRunCommandLine(invokeTask);
         const command = ctx.agent.command;
         const runDir = getRunDir(ctx.taskDir, ctx.runId);
         if (files) {

package/dist/index.js

@@ -11,7 +11,6 @@ import { serveCommand } from "./commands/serve.js";
 import { pairCommand } from "./commands/pair.js";
 import { restartCommand } from "./commands/restart.js";
 import { clientsListCommand, clientsRevokeCommand, clientsRevokeAllCommand } from "./commands/clients.js";
-import { passwordsListCommand, passwordsDeleteCommand, passwordsClearCommand } from "./commands/passwords.js";
 import { agentsCommand } from "./commands/agents.js";
 import { uninstallCommand } from "./commands/uninstall.js";
 const __dirname = dirname(fileURLToPath(import.meta.url));
@@ -78,27 +77,6 @@ clientsCmd
     .action(async () => {
     await clientsRevokeAllCommand();
 });
-const passwordsCmd = program
-    .command("passwords")
-    .description("Manage saved passwords");
-passwordsCmd
-    .command("list")
-    .description("List saved passwords (origin and username only)")
-    .action(async () => {
-    await passwordsListCommand();
-});
-passwordsCmd
-    .command("delete <origin> [username]")
-    .description("Delete a saved password (omit username to delete all for the origin)")
-    .action(async (origin, username) => {
-    await passwordsDeleteCommand(origin, username);
-});
-passwordsCmd
-    .command("clear")
-    .description("Delete all saved passwords")
-    .action(async () => {
-    await passwordsClearCommand();
-});
 program
     .command("agents")
     .description("List, install, and uninstall agent CLIs")

package/dist/password-store.d.ts

@@ -8,6 +8,4 @@ export declare function normalizeOrigin(url: string): string;
 export declare function lookupPassword(origin: string, username: string): string | undefined;
 export declare function savePassword(origin: string, username: string, password: string): void;
 export declare function listPasswords(): PasswordIdentity[];
-/** Delete one (origin, username) entry, or every entry for an origin when username is omitted. */
-export declare function deletePassword(origin: string, username?: string): boolean;
-export declare function clearPasswords(): number;
+export declare function deletePassword(origin: string, username: string): boolean;

package/dist/password-store.js

@@ -80,17 +80,11 @@ export function savePassword(origin, username, password) {
 export function listPasswords() {
     return readFile().map(({ origin, username }) => ({ origin, username }));
 }
-/** Delete one (origin, username) entry, or every entry for an origin when username is omitted. */
 export function deletePassword(origin, username) {
     const entries = readFile();
-    const remaining = entries.filter((e) => username === undefined ? e.origin !== origin : !(e.origin === origin && e.username === username));
+    const remaining = entries.filter((e) => !(e.origin === origin && e.username === username));
     if (remaining.length === entries.length)
         return false;
     writeFile(remaining);
     return true;
 }
-export function clearPasswords() {
-    const entries = readFile();
-    writeFile([]);
-    return entries.length;
-}