very-happy-cli 0.2.89 → 0.2.90

package/dist/{installTerminalHooks-C7JS6CBM.mjs → installTerminalHooks-C-OgZr5k.mjs}

@@ -3,8 +3,8 @@ import { join, resolve } from 'node:path';
 import { homedir } from 'node:os';
 import { spawnSync } from 'node:child_process';
 import chalk from 'chalk';
-import { p as projectPath } from './types-d_104eQF.mjs';
-import { t as tmuxSupportsSessionEnv } from './index-vCgb7QnZ.mjs';
+import { p as projectPath } from './types-DS3i_5LV.mjs';
+import { t as tmuxSupportsSessionEnv } from './index-an09rejO.mjs';
 import 'axios';
 import 'node:util';
 import 'node:fs/promises';

package/dist/{installTerminalHooks-T4NE5fmC.cjs → installTerminalHooks-DDpVxk8-.cjs}

@@ -5,8 +5,8 @@ var path = require('node:path');
 var os = require('node:os');
 var node_child_process = require('node:child_process');
 var chalk = require('chalk');
-var persistence = require('./types-DLI6sss2.cjs');
-var index = require('./index-DYDAFqAN.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
+var index = require('./index-4YmVbx7j.cjs');
 require('axios');
 require('node:util');
 require('node:fs/promises');

package/dist/lib.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var persistence = require('./types-DLI6sss2.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
 require('axios');
 require('chalk');
 require('node:util');

package/dist/lib.d.cts

@@ -451,6 +451,14 @@ type Metadata = {
     flavor?: string;
     sandbox?: SandboxConfig | null;
     dangerouslySkipPermissions?: boolean | null;
+    /**
+     * Effective permission mode the running Claude process enforces right now
+     * (SDK vocabulary: default | acceptEdits | bypassPermissions | plan). The
+     * CLI is the single source of truth: it writes this at start, on every
+     * message/RPC/plan-approval change. Web displays it verbatim; old clients
+     * ignore it and old CLIs never write it (capability claude-live-permission-v2).
+     */
+    permissionMode?: string;
     /** Lineage for sessions created via the fork / duplicate flow. */
     parentSessionId?: string;
     forkedFromMessageId?: string;

package/dist/lib.d.mts

@@ -451,6 +451,14 @@ type Metadata = {
     flavor?: string;
     sandbox?: SandboxConfig | null;
     dangerouslySkipPermissions?: boolean | null;
+    /**
+     * Effective permission mode the running Claude process enforces right now
+     * (SDK vocabulary: default | acceptEdits | bypassPermissions | plan). The
+     * CLI is the single source of truth: it writes this at start, on every
+     * message/RPC/plan-approval change. Web displays it verbatim; old clients
+     * ignore it and old CLIs never write it (capability claude-live-permission-v2).
+     */
+    permissionMode?: string;
     /** Lineage for sessions created via the fork / duplicate flow. */
     parentSessionId?: string;
     forkedFromMessageId?: string;

package/dist/lib.mjs

@@ -1,4 +1,4 @@
-export { A as ApiClient, a as ApiSessionClient, R as RawJSONLinesSchema, c as configuration, l as logger } from './types-d_104eQF.mjs';
+export { A as ApiClient, a as ApiSessionClient, R as RawJSONLinesSchema, c as configuration, l as logger } from './types-DS3i_5LV.mjs';
 import 'axios';
 import 'chalk';
 import 'node:util';

package/dist/{mcp-DgPg5mKa.cjs → mcp-B6Nq-RUL.cjs}

@@ -3,9 +3,9 @@
 var mcp_js = require('@modelcontextprotocol/sdk/server/mcp.js');
 var stdio_js = require('@modelcontextprotocol/sdk/server/stdio.js');
 var z = require('zod');
-var index = require('./index-DYDAFqAN.cjs');
+var index = require('./index-4YmVbx7j.cjs');
 var limits = require('./limits-KdWKmwtH.cjs');
-var persistence = require('./types-DLI6sss2.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
 require('chalk');
 require('node:os');
 require('node:crypto');

package/dist/{mcp-B3EgenZh.mjs → mcp-Du-N0qlK.mjs}

@@ -1,9 +1,9 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { z } from 'zod';
-import { p as pushClipboardViaDaemon } from './index-vCgb7QnZ.mjs';
+import { p as pushClipboardViaDaemon } from './index-an09rejO.mjs';
 import { C as CLIPBOARD_TOOL_NAME, a as CLIPBOARD_TOOL_TITLE, b as CLIPBOARD_TOOL_DESCRIPTION, c as CLIPBOARD_MAX_BYTES } from './limits-CwFb5S2b.mjs';
-import { l as logger } from './types-d_104eQF.mjs';
+import { l as logger } from './types-DS3i_5LV.mjs';
 import 'chalk';
 import 'node:os';
 import 'node:crypto';

package/dist/{runGemini-xZnGj7jx.cjs → runGemini-ChG7cGMC.cjs}

@@ -4,10 +4,10 @@ var ink = require('ink');
 var React = require('react');
 var node_crypto = require('node:crypto');
 var path = require('node:path');
-var persistence = require('./types-DLI6sss2.cjs');
-var index = require('./index-DYDAFqAN.cjs');
-var AcpBackend = require('./AcpBackend-ClEvE-A-.cjs');
-var config = require('./config-BZNnPK1L.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
+var index = require('./index-4YmVbx7j.cjs');
+var AcpBackend = require('./AcpBackend-CnYZFdd0.cjs');
+var config = require('./config-CgXitj0f.cjs');
 require('axios');
 require('chalk');
 require('node:util');

package/dist/{runGemini-B3iv1QRL.mjs → runGemini-DBr_TiTL.mjs}

@@ -2,10 +2,10 @@ import { useStdout, useInput, Box, Text, render } from 'ink';
 import React, { useState, useRef, useEffect, useCallback } from 'react';
 import { randomUUID } from 'node:crypto';
 import { join } from 'node:path';
-import { l as logger, h as connectionState, A as ApiClient, i as readSettings, e as errorLogMetadata, j as encodeBase64, p as projectPath, d as contentLogMetadata } from './types-d_104eQF.mjs';
-import { g as GEMINI_API_KEY_ENV, j as GOOGLE_API_KEY_ENV, G as GEMINI_MODEL_ENV, B as BasePermissionHandler, k as BaseReasoningProcessor, i as initialMachineMetadata, d as createSessionMetadata, e as setupOfflineReconnection, n as notifyDaemonSessionStarted, M as MessageQueue2, h as hashObject, l as MessageBuffer, C as CHANGE_TITLE_INSTRUCTION, r as registerKillSessionHandler, f as startHappyServer } from './index-vCgb7QnZ.mjs';
-import { A as AcpBackend } from './AcpBackend-DuxcHPyn.mjs';
-import { readGeminiLocalConfig, determineGeminiModel, getGeminiModelSource, getInitialGeminiModel, saveGeminiModelToConfig } from './config-CdoGLla8.mjs';
+import { l as logger, h as connectionState, A as ApiClient, i as readSettings, e as errorLogMetadata, j as encodeBase64, p as projectPath, d as contentLogMetadata } from './types-DS3i_5LV.mjs';
+import { g as GEMINI_API_KEY_ENV, j as GOOGLE_API_KEY_ENV, G as GEMINI_MODEL_ENV, B as BasePermissionHandler, k as BaseReasoningProcessor, i as initialMachineMetadata, d as createSessionMetadata, e as setupOfflineReconnection, n as notifyDaemonSessionStarted, M as MessageQueue2, h as hashObject, l as MessageBuffer, C as CHANGE_TITLE_INSTRUCTION, r as registerKillSessionHandler, f as startHappyServer } from './index-an09rejO.mjs';
+import { A as AcpBackend } from './AcpBackend-BV4wSnJ3.mjs';
+import { readGeminiLocalConfig, determineGeminiModel, getGeminiModelSource, getInitialGeminiModel, saveGeminiModelToConfig } from './config-BEdyyciP.mjs';
 import 'axios';
 import 'chalk';
 import 'node:util';

package/dist/{runOpenClaw-CmM4ZLYi.mjs → runOpenClaw-Cbde8t92.mjs}

@@ -3,9 +3,9 @@ import { execFileSync } from 'node:child_process';
 import os from 'node:os';
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { k as ensurePrivateDirectorySync, m as hardenPrivateFileSync, w as writePrivateFileSync, e as errorLogMetadata, d as contentLogMetadata, h as connectionState, A as ApiClient, i as readSettings, j as encodeBase64, l as logger, c as configuration } from './types-d_104eQF.mjs';
-import { A as AcpSessionManager } from './AcpSessionManager-CGrA8bTm.mjs';
-import { i as initialMachineMetadata, d as createSessionMetadata, e as setupOfflineReconnection, n as notifyDaemonSessionStarted, M as MessageQueue2, r as registerKillSessionHandler } from './index-vCgb7QnZ.mjs';
+import { k as ensurePrivateDirectorySync, m as hardenPrivateFileSync, w as writePrivateFileSync, e as errorLogMetadata, d as contentLogMetadata, h as connectionState, A as ApiClient, i as readSettings, j as encodeBase64, l as logger, c as configuration } from './types-DS3i_5LV.mjs';
+import { A as AcpSessionManager } from './AcpSessionManager-Cyne6Rmg.mjs';
+import { i as initialMachineMetadata, d as createSessionMetadata, e as setupOfflineReconnection, n as notifyDaemonSessionStarted, M as MessageQueue2, r as registerKillSessionHandler } from './index-an09rejO.mjs';
 import WebSocket from 'ws';
 import * as ed from '@noble/ed25519';
 import { sha512 } from '@noble/hashes/sha2.js';

package/dist/{runOpenClaw-6ZLPeYYZ.cjs → runOpenClaw-D2jtVgpC.cjs}

@@ -5,9 +5,9 @@ var node_child_process = require('node:child_process');
 var os = require('node:os');
 var node_fs = require('node:fs');
 var path = require('node:path');
-var persistence = require('./types-DLI6sss2.cjs');
-var AcpSessionManager = require('./AcpSessionManager-DgbEf8FX.cjs');
-var index = require('./index-DYDAFqAN.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
+var AcpSessionManager = require('./AcpSessionManager-BPBdrrME.cjs');
+var index = require('./index-4YmVbx7j.cjs');
 var WebSocket = require('ws');
 var ed = require('@noble/ed25519');
 var sha2_js = require('@noble/hashes/sha2.js');

package/dist/{send-M2ax7UGy.mjs → send-BHliX59m.mjs}

@@ -1,8 +1,8 @@
 import chalk from 'chalk';
 import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
-import { r as readPersistedSessions, c as configuration } from './types-d_104eQF.mjs';
-import { b as sendUserMessage, a as sessionWebUrl } from './index-vCgb7QnZ.mjs';
+import { r as readPersistedSessions, c as configuration } from './types-DS3i_5LV.mjs';
+import { b as sendUserMessage, a as sessionWebUrl } from './index-an09rejO.mjs';
 import 'axios';
 import 'node:util';
 import 'node:os';

package/dist/{send-S9ibMiAt.cjs → send-Bjen1TUE.cjs}

@@ -3,8 +3,8 @@
 var chalk = require('chalk');
 var node_fs = require('node:fs');
 var path = require('node:path');
-var persistence = require('./types-DLI6sss2.cjs');
-var index = require('./index-DYDAFqAN.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
+var index = require('./index-4YmVbx7j.cjs');
 require('axios');
 require('node:util');
 require('node:os');

package/dist/{spawn-ie_kfwQe.cjs → spawn-CH1Rq-LW.cjs}

@@ -3,8 +3,8 @@
 var chalk = require('chalk');
 var node_fs = require('node:fs');
 var path = require('node:path');
-var index = require('./index-DYDAFqAN.cjs');
-var persistence = require('./types-DLI6sss2.cjs');
+var index = require('./index-4YmVbx7j.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
 require('node:os');
 require('node:crypto');
 require('cross-spawn');

package/dist/{spawn-Dx_xnLlg.mjs → spawn-JxaPHAoP.mjs}

@@ -1,8 +1,8 @@
 import chalk from 'chalk';
 import { readFileSync, statSync } from 'node:fs';
 import { resolve } from 'node:path';
-import { c as checkIfDaemonRunningAndCleanupStaleState, s as spawnDaemonSession, a as sessionWebUrl, w as waitForSessionKey, b as sendUserMessage } from './index-vCgb7QnZ.mjs';
-import { l as logger } from './types-d_104eQF.mjs';
+import { c as checkIfDaemonRunningAndCleanupStaleState, s as spawnDaemonSession, a as sessionWebUrl, w as waitForSessionKey, b as sendUserMessage } from './index-an09rejO.mjs';
+import { l as logger } from './types-DS3i_5LV.mjs';
 import 'node:os';
 import 'node:crypto';
 import 'cross-spawn';

package/dist/{types-DLI6sss2.cjs → types-BNGeiP1C.cjs}

@@ -51,7 +51,7 @@ var z__namespace = /*#__PURE__*/_interopNamespaceDefault(z);
 var pty__namespace = /*#__PURE__*/_interopNamespaceDefault(pty);
 
 var name = "very-happy-cli";
-var version = "0.2.89";
+var version = "0.2.90";
 var description = "Remote multi-agent workspace CLI with deep Claude integration, native terminal streaming, and self-hosting.";
 var author = "Kirill Dubovitskiy";
 var contributors = [
@@ -164,12 +164,12 @@ var dependencies = {
 	zod: "^4.0.0"
 };
 var optionalDependencies = {
-	"very-happy-tools-arm64-darwin": "0.2.89",
-	"very-happy-tools-x64-darwin": "0.2.89",
-	"very-happy-tools-arm64-linux": "0.2.89",
-	"very-happy-tools-x64-linux": "0.2.89",
-	"very-happy-tools-arm64-win32": "0.2.89",
-	"very-happy-tools-x64-win32": "0.2.89"
+	"very-happy-tools-arm64-darwin": "0.2.90",
+	"very-happy-tools-x64-darwin": "0.2.90",
+	"very-happy-tools-arm64-linux": "0.2.90",
+	"very-happy-tools-x64-linux": "0.2.90",
+	"very-happy-tools-arm64-win32": "0.2.90",
+	"very-happy-tools-x64-win32": "0.2.90"
 };
 var devDependencies = {
 	"@slopus/happy-wire": "workspace:*",
@@ -1484,7 +1484,7 @@ class RpcHandlerManager {
   }
 }
 
-const __dirname$1 = path$1.dirname(url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('types-DLI6sss2.cjs', document.baseURI).href))));
+const __dirname$1 = path$1.dirname(url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('types-BNGeiP1C.cjs', document.baseURI).href))));
 function projectPath() {
   const path = path$1.resolve(__dirname$1, "..");
   return path;
@@ -8829,6 +8829,20 @@ function previewAscii(line) {
   return line.length > 80 ? `${out}\u2026` : out;
 }
 
+const VH_TMUX_SOCKET_ENV = "VH_TMUX_SOCKET";
+function tmuxSocketFlags(env = process.env) {
+  const socket = env[VH_TMUX_SOCKET_ENV];
+  return socket ? ["-S", socket] : [];
+}
+function tmuxArgs(args, env = process.env) {
+  return [...tmuxSocketFlags(env), ...args];
+}
+function scrubTmuxClientEnv(env) {
+  delete env.TMUX;
+  delete env.TMUX_PANE;
+  return env;
+}
+
 const CONTROL_CLIENT_KILL_GRACE_MS = 2e3;
 const CONTROL_COMMAND_TIMEOUT_MS = 1e4;
 function isSafeControlCommand(command) {
@@ -8838,7 +8852,7 @@ class ControlClient {
   constructor(tmuxSession, env, handlers) {
     this.tmuxSession = tmuxSession;
     this.handlers = handlers;
-    this.child = node_child_process.spawn("tmux", ["-C", "attach-session", "-t", `=${tmuxSession}:`], {
+    this.child = node_child_process.spawn("tmux", tmuxArgs(["-C", "attach-session", "-t", `=${tmuxSession}:`], env), {
       stdio: ["pipe", "pipe", "pipe"],
       env
     });
@@ -9990,7 +10004,7 @@ let tmuxAvailableCache = null;
 function isTmuxAvailable() {
   if (tmuxAvailableCache !== null) return tmuxAvailableCache;
   try {
-    const r = node_child_process.spawnSync("tmux", ["-V"], { stdio: "ignore", env: ptyEnv() });
+    const r = node_child_process.spawnSync("tmux", tmuxArgs(["-V"]), { stdio: "ignore", env: ptyEnv() });
     tmuxAvailableCache = r.status === 0;
   } catch {
     tmuxAvailableCache = false;
@@ -10001,7 +10015,7 @@ let tmuxEnvFlagCache = null;
 function tmuxSupportsEnvFlag() {
   if (tmuxEnvFlagCache !== null) return tmuxEnvFlagCache;
   try {
-    const r = node_child_process.spawnSync("tmux", ["-V"], { encoding: "utf8", env: ptyEnv() });
+    const r = node_child_process.spawnSync("tmux", tmuxArgs(["-V"]), { encoding: "utf8", env: ptyEnv() });
     tmuxEnvFlagCache = r.status === 0 && tmuxSupportsNewSessionEnv(r.stdout || "");
   } catch {
     tmuxEnvFlagCache = false;
@@ -10045,6 +10059,7 @@ function ptyEnv() {
   for (const [k, v] of Object.entries(process.env)) {
     if (typeof v === "string") env[k] = v;
   }
+  scrubTmuxClientEnv(env);
   const local = `${os.homedir()}/.local/bin`;
   if (!(env.PATH || "").split(":").includes(local)) {
     env.PATH = `${local}:${env.PATH || ""}`;
@@ -10700,7 +10715,7 @@ class WebTerminalManager {
     const name = `vh-${plan.terminalId}`;
     const exists = node_child_process.spawnSync(
       "tmux",
-      ["has-session", "-t", `=${name}:`],
+      tmuxArgs(["has-session", "-t", `=${name}:`]),
       { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env }
     ).status === 0;
     if (exists) return false;
@@ -10714,12 +10729,12 @@ class WebTerminalManager {
     ] : [];
     const created = node_child_process.spawnSync(
       "tmux",
-      tmuxNewSessionArgs(name, 120, 30, plan.cwd, envFlags, defaultShell()),
+      tmuxArgs(tmuxNewSessionArgs(name, 120, 30, plan.cwd, envFlags, defaultShell())),
       { stdio: "ignore", timeout: TMUX_CREATE_TIMEOUT_MS, env }
     );
     const live = created.status === 0 && node_child_process.spawnSync(
       "tmux",
-      ["has-session", "-t", `=${name}:`],
+      tmuxArgs(["has-session", "-t", `=${name}:`]),
       { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env }
     ).status === 0;
     if (!live) {
@@ -10729,12 +10744,12 @@ class WebTerminalManager {
     if (plan.title) {
       node_child_process.spawnSync(
         "tmux",
-        ["set-option", "-t", `=${name}:`, "@vh_title", plan.title],
+        tmuxArgs(["set-option", "-t", `=${name}:`, "@vh_title", plan.title]),
         { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env }
       );
     }
     for (const argv of startupInjectionArgs(name, plan.command)) {
-      node_child_process.spawnSync("tmux", argv, { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env });
+      node_child_process.spawnSync("tmux", tmuxArgs(argv), { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env });
     }
     logger.info(`[WEB TERMINAL] auto-restored ${plan.terminalId} in ${plan.cwd}`);
     return true;
@@ -10866,14 +10881,14 @@ class WebTerminalManager {
     if (opts.attachOnly || opts.resub) {
       const alive = isTmuxAvailable() && node_child_process.spawnSync(
         "tmux",
-        ["has-session", "-t", `=vh-${id}:`],
+        tmuxArgs(["has-session", "-t", `=vh-${id}:`]),
         { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env: ptyEnv() }
       ).status === 0;
       if (!alive) throw new Error("terminal-gone");
     } else if (this.tombstones[id]) {
       const alive = isTmuxAvailable() && node_child_process.spawnSync(
         "tmux",
-        ["has-session", "-t", `=vh-${id}:`],
+        tmuxArgs(["has-session", "-t", `=vh-${id}:`]),
         { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env: ptyEnv() }
       ).status === 0;
       if (!alive) {
@@ -10902,7 +10917,7 @@ class WebTerminalManager {
         try {
           const created = node_child_process.spawnSync(
             "tmux",
-            tmuxNewSessionArgs(tmuxSession, cols, rows, cwd, envFlags, defaultShell()),
+            tmuxArgs(tmuxNewSessionArgs(tmuxSession, cols, rows, cwd, envFlags, defaultShell())),
             { stdio: "ignore", timeout: TMUX_CREATE_TIMEOUT_MS, env }
           );
           createdNew = created.status === 0;
@@ -10934,7 +10949,7 @@ class WebTerminalManager {
       ];
       for (const a of optArgs) {
         try {
-          node_child_process.spawnSync("tmux", a, { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env });
+          node_child_process.spawnSync("tmux", tmuxArgs(a), { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env });
         } catch {
         }
       }
@@ -10943,7 +10958,7 @@ class WebTerminalManager {
         if (startup) {
           try {
             for (const a of startupInjectionArgs(tmuxSession, startup)) {
-              node_child_process.spawnSync("tmux", a, { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env });
+              node_child_process.spawnSync("tmux", tmuxArgs(a), { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env });
             }
             logger.debug(`[WEB TERMINAL] injected startup command into new session ${tmuxSession}`);
           } catch {
@@ -10953,13 +10968,13 @@ class WebTerminalManager {
       if (!attachOnly && !createdNew) {
         const alive = node_child_process.spawnSync(
           "tmux",
-          ["has-session", "-t", `=${tmuxSession}:`],
+          tmuxArgs(["has-session", "-t", `=${tmuxSession}:`]),
           { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env }
         ).status === 0;
         if (shouldUseDirectPtyFallback(attachOnly, createdNew, alive)) {
           const retry = node_child_process.spawnSync(
             "tmux",
-            tmuxNewSessionArgs(tmuxSession, cols, rows, cwd, envFlags, defaultShell()),
+            tmuxArgs(tmuxNewSessionArgs(tmuxSession, cols, rows, cwd, envFlags, defaultShell())),
             { stdio: "ignore", timeout: TMUX_CREATE_TIMEOUT_MS, env }
           );
           createdNew = retry.status === 0;
@@ -10968,7 +10983,7 @@ class WebTerminalManager {
             if (startup) {
               for (const a of startupInjectionArgs(tmuxSession, startup)) {
                 try {
-                  node_child_process.spawnSync("tmux", a, { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env });
+                  node_child_process.spawnSync("tmux", tmuxArgs(a), { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env });
                 } catch {
                 }
               }
@@ -10979,7 +10994,7 @@ class WebTerminalManager {
       if (!attachOnly && !createdNew) {
         const alive = node_child_process.spawnSync(
           "tmux",
-          ["has-session", "-t", `=${tmuxSession}:`],
+          tmuxArgs(["has-session", "-t", `=${tmuxSession}:`]),
           { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env }
         ).status === 0;
         if (!alive) {
@@ -11306,8 +11321,8 @@ class WebTerminalManager {
   killSession(terminalId) {
     const info = this.lastSeenInfo.get(terminalId) ?? this.listSessions().find((t) => t.id === terminalId);
     const target = `=vh-${terminalId}:`;
-    const killed = node_child_process.spawnSync("tmux", ["kill-session", "-t", target], { stdio: "ignore", env: ptyEnv() });
-    const verified = node_child_process.spawnSync("tmux", ["has-session", "-t", target], { stdio: "ignore", env: ptyEnv() });
+    const killed = node_child_process.spawnSync("tmux", tmuxArgs(["kill-session", "-t", target]), { stdio: "ignore", env: ptyEnv() });
+    const verified = node_child_process.spawnSync("tmux", tmuxArgs(["has-session", "-t", target]), { stdio: "ignore", env: ptyEnv() });
     if (!tmuxKillVerified(killed, verified)) {
       logger.debug(`[WEB TERMINAL] failed to verify tmux session removal ${target}`);
       return false;
@@ -11368,7 +11383,7 @@ class WebTerminalManager {
       const env = ptyEnv();
       const r = node_child_process.spawnSync(
         "tmux",
-        ["list-sessions", "-F", LIST_SESSIONS_FORMAT],
+        tmuxArgs(["list-sessions", "-F", LIST_SESSIONS_FORMAT]),
         { encoding: "utf8", env }
       );
       if (r.status !== 0 || !r.stdout) return [];
@@ -11384,7 +11399,7 @@ class WebTerminalManager {
           try {
             const w = node_child_process.spawnSync(
               "tmux",
-              ["set-option", "-t", `=${s.name}:`, "@vh_title", auto],
+              tmuxArgs(["set-option", "-t", `=${s.name}:`, "@vh_title", auto]),
               { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env }
             );
             if (w.status === 0) title = auto;
@@ -11435,13 +11450,13 @@ class WebTerminalManager {
     try {
       const cmd = node_child_process.spawnSync(
         "tmux",
-        ["display-message", "-p", "-t", sessionName, "#{pane_current_command}"],
+        tmuxArgs(["display-message", "-p", "-t", sessionName, "#{pane_current_command}"]),
         { encoding: "utf8", timeout: TMUX_PROBE_TIMEOUT_MS, env: ptyEnv() }
       );
       if (cmd.status !== 0 || typeof cmd.stdout !== "string") return void 0;
       const cap = node_child_process.spawnSync(
         "tmux",
-        ["capture-pane", "-p", "-t", sessionName, "-S", "-40"],
+        tmuxArgs(["capture-pane", "-p", "-t", sessionName, "-S", "-40"]),
         { encoding: "utf8", timeout: TMUX_PROBE_TIMEOUT_MS, env: ptyEnv() }
       );
       if (cap.status !== 0 || typeof cap.stdout !== "string") return void 0;
@@ -11468,7 +11483,7 @@ class WebTerminalManager {
     try {
       const probe = node_child_process.spawnSync(
         "tmux",
-        ["display-message", "-p", "-t", name, "#{pane_in_mode}	#{alternate_on}	#{mouse_any_flag}	#{pane_width}	#{pane_height}	#{pane_current_command}"],
+        tmuxArgs(["display-message", "-p", "-t", name, "#{pane_in_mode}	#{alternate_on}	#{mouse_any_flag}	#{pane_width}	#{pane_height}	#{pane_current_command}"]),
         { encoding: "utf8", timeout: TMUX_PROBE_TIMEOUT_MS, env: ptyEnv() }
       );
       if (probe.status !== 0 || typeof probe.stdout !== "string") return;
@@ -11486,7 +11501,7 @@ class WebTerminalManager {
         const hex = sgrWheelHexBytes(action.dir, action.count, Number(paneW) || 80, Number(paneH) || 24);
         node_child_process.spawnSync(
           "tmux",
-          ["send-keys", "-t", name, "-H", ...hex],
+          tmuxArgs(["send-keys", "-t", name, "-H", ...hex]),
           { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env: ptyEnv() }
         );
         return;
@@ -11494,7 +11509,7 @@ class WebTerminalManager {
       if (action.kind === "page-keys") {
         node_child_process.spawnSync(
           "tmux",
-          ["send-keys", "-t", name, "-N", String(action.count), action.key],
+          tmuxArgs(["send-keys", "-t", name, "-N", String(action.count), action.key]),
           { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env: ptyEnv() }
         );
         return;
@@ -11502,19 +11517,19 @@ class WebTerminalManager {
       if (action.kind === "keys") {
         node_child_process.spawnSync(
           "tmux",
-          ["send-keys", "-t", name, "-N", String(action.count), action.key],
+          tmuxArgs(["send-keys", "-t", name, "-N", String(action.count), action.key]),
           { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env: ptyEnv() }
         );
         return;
       }
       node_child_process.spawnSync(
         "tmux",
-        ["copy-mode", "-e", "-t", name],
+        tmuxArgs(["copy-mode", "-e", "-t", name]),
         { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env: ptyEnv() }
       );
       node_child_process.spawnSync(
         "tmux",
-        [
+        tmuxArgs([
           "send-keys",
           "-X",
           "-t",
@@ -11522,7 +11537,7 @@ class WebTerminalManager {
           "-N",
           String(action.count),
           action.dir === "up" ? "scroll-up" : "scroll-down"
-        ],
+        ]),
         { stdio: "ignore", timeout: TMUX_PROBE_TIMEOUT_MS, env: ptyEnv() }
       );
     } catch {
@@ -11556,14 +11571,14 @@ class WebTerminalManager {
     const name = `vh-${terminalId}`;
     try {
       if (ifAbsent) {
-        const cur = node_child_process.spawnSync("tmux", ["show-options", "-t", name, "-v", "@vh_title"], { encoding: "utf8", env: ptyEnv() });
+        const cur = node_child_process.spawnSync("tmux", tmuxArgs(["show-options", "-t", name, "-v", "@vh_title"]), { encoding: "utf8", env: ptyEnv() });
         if (cur.status === 0 && cur.stdout && cur.stdout.trim()) return true;
       }
-      const r = node_child_process.spawnSync("tmux", ["set-option", "-t", name, "@vh_title", title], { stdio: "ignore", env: ptyEnv() });
+      const r = node_child_process.spawnSync("tmux", tmuxArgs(["set-option", "-t", name, "@vh_title", title]), { stdio: "ignore", env: ptyEnv() });
       if (r.status !== 0) return false;
       if (!ifAbsent) {
         try {
-          node_child_process.spawnSync("tmux", ["set-option", "-t", name, "@vh_title_manual", "1"], { stdio: "ignore", env: ptyEnv() });
+          node_child_process.spawnSync("tmux", tmuxArgs(["set-option", "-t", name, "@vh_title_manual", "1"]), { stdio: "ignore", env: ptyEnv() });
         } catch {
         }
       }
@@ -11581,7 +11596,7 @@ class WebTerminalManager {
     if (!valid) return false;
     const name = `vh-${terminalId}`;
     try {
-      const r = node_child_process.spawnSync("tmux", ["set-option", "-t", name, "@vh_tags", JSON.stringify(valid)], {
+      const r = node_child_process.spawnSync("tmux", tmuxArgs(["set-option", "-t", name, "@vh_tags", JSON.stringify(valid)]), {
         stdio: "ignore",
         env: ptyEnv()
       });
@@ -11613,10 +11628,11 @@ function parseVhTerminals(stdout, hostname = os.hostname()) {
 }
 function runTmux(args, input) {
   try {
-    const r = node_child_process.spawnSync("tmux", args, {
+    const r = node_child_process.spawnSync("tmux", tmuxArgs(args), {
       encoding: "utf8",
       timeout: TMUX_TIMEOUT_MS,
-      input
+      input,
+      env: scrubTmuxClientEnv({ ...process.env })
     });
     if (r.error) return { ok: false, stdout: "", error: r.error.message };
     if (r.status !== 0) return { ok: false, stdout: r.stdout ?? "", error: (r.stderr || `tmux exited with ${r.status}`).trim() };
@@ -15236,9 +15252,11 @@ exports.readSettings = readSettings;
 exports.readVhTerminal = readVhTerminal;
 exports.releaseDaemonLock = releaseDaemonLock;
 exports.resolveCliUpdateCheckInterval = resolveCliUpdateCheckInterval;
+exports.scrubTmuxClientEnv = scrubTmuxClientEnv;
 exports.sendToVhTerminal = sendToVhTerminal;
 exports.startOfflineReconnection = startOfflineReconnection;
 exports.summarizeSpawnSessionForLog = summarizeSpawnSessionForLog;
+exports.tmuxArgs = tmuxArgs;
 exports.updateSettings = updateSettings;
 exports.wrapCommand = wrapCommand;
 exports.writeCredentialsDataKey = writeCredentialsDataKey;