v1.23.12

• agents add works in containers without ps (PHNX-4227). Before replacing an install, the CLI checks whether any process runs from it. On Linux it listed processes with ps, which node:*-slim images (every Rush pod) lack, and a failed scan counts as "in use", so agents add refused with "account home main is in use" on an idle install. On Linux it now reads /proc/<pid>/cmdline; macOS keeps ps, Windows keeps its CIM query, and an unreadable process table still refuses. Source: cli/src/lib/installations/active-check.ts.

• A permission preset that names a missing group fails, and ask: rules sync into harnesses that can prompt on a rule (PHNX-4227). buildPermissionsFromGroups used to skip a group whose file was not there, and preset sync dropped missing includes before that function ran, so a dangling name such as 16-mcp disappeared. A named group with no permissions/groups/<name>.yaml now throws, and the error names the active preset and the group. 00-local stays the one optional per-machine group and is skipped when its file is absent. An ask: section is kept beside allow and deny. It is written to the native prompt list where one exists: Claude permissions.ask, OpenCode permission.bash value ask, Codex agents-ask.rules (decision = "prompt"), Grok action = "ask", Kimi decision = "ask", Droid permissionRules decision ask (not commandDenylist), and Antigravity permissions.ask. Cursor, Copilot, OpenClaw, and Hermes have no per-rule ask list. Allow and deny still sync, and the ask rules are skipped with the reason recorded on PERMISSION_TARGETS. Source: cli/src/lib/permissions.ts, cli/src/lib/permissions-registry.ts, cli/src/lib/installations/versions.ts.