v2026.10.19-1

Breaking Changes

• rename the default permission mode to ask
• start sessions in the auto permission mode

Added

• autocomplete /duet strategy, provider and models
• pass DRAHT_PERMISSION_MODE on to the sessions it starts
• cycle the permission mode with alt+m
• start workflows and duet batches unasked in auto mode
• take a workflow's budget and time limit from the prompt
• count command-run usage in the session totals

Changed

• drop the escaped-quote changelog entry
• drop the scan-budget claim, note the escaped-quote fix
• bring the changelog in line with the permission changes

Fixed

• match deny rules and the danger filter on what the shell runs
• reserve the permission-mode key, finish the ask rename
• keep main's deny-scan budget and allow matching exactly
• ask when a code runner reads a descriptor in auto mode
• bound the run checks' reader, read heredoc bodies whole
• give the run checks their own reader, keep main's splitChain
• close the lexer gaps and keep main's scan budget
• keep a daemon's yolo out of the sessions it starts unless declared
• switch alt+m between auto and ask, once per press
• read executed code the way the shell does, and keep the scan budget
• ask before auto mode runs code the danger filter cannot read
• judge the file a tool will open in the permission gate
• ask the parent session instead of blocking subagent tool calls
• pass the session's permission mode to polyphase children