Local agent.
Explicit
context.

0.6.2 uses Pi's retained-frame renderer: first render materializes every row, ordinary updates repaint only the exact changed range, and changes above the viewport clear saved lines before one complete replay. Terminal-owned resume eagerly materializes the complete active branch; resizing reflows it at the new width and replays it once. The interactive composer's hardware cursor remains visible across the default retained-frame renderer, application-owned viewport, panel transitions, resize/replay, renderer resume, and narrow-width fallback.

The startup card reports permissions: full access by default, with full access bold and red. Run ygg --safe-mode to show permissions: safe mode, with safe mode bold and accent-colored (blue in the default theme), and require approval for each bash call and workspace mutation.

Keys

Enter

submit the current prompt

Shift+Enter

insert a newline with enhanced key events

Ctrl+O

toggle reasoning and retained tool evidence

Ctrl+C

clear a draft or abort active work

Ctrl+D

close Ygg and settle child cleanup

PageUp / PageDown

navigate transcript history

Tab

complete filesystem paths

@

fuzzy-complete workspace file mentions

Slash commands

Ygg keeps one conversation model across OpenAI Chat Completions, OpenAI Responses, and Anthropic Messages.

ygg --model provider/model
/model

ygg --reasoning high
/thinking

ygg --model gpt-5.6-sol \
  --reasoning ultra

core workspace tools

The default model-visible surface also includes search_skills, load_skill, and read_skill_resource. Activated skills can add more tools. Ygg defaults to full host access: authoritatively classified effects use the current user's authority after the tool and capability gates pass. Use --safe-mode for ControlledBashApproval: workspace mutations and every bash call require approval, other ambient host effects stay denied, and external paths are forced off. Unknown effects still fail closed; --no-* flags and remote-read opt-ins remain enforced. Ygg is not an operating-system sandbox. --safe remains a hidden alias; the former --yolo flag and configuration/environment forms are removed.

ygg --tools read,search \
  --no-context-files --offline

ygg --no-edit

ygg --no-process

ygg --safe-mode

ygg --tools read,edit,bash
ygg --exclude-tools write

Default Bash timeout is 120 seconds and captured tool output is bounded to 1 MiB by default. Unresolved mutating calls after a crash are marked indeterminate and are never replayed automatically.

Conversations are bounded append-only JSONL, namespaced by workspace. Checkout moves the durable head without deleting ancestry.

ygg --continue
ygg --resume
ygg --resume <id>
ygg --fork <id>
ygg --fork

ygg sessions list --query review
ygg sessions inspect <id>
ygg sessions tag <id> rust local-model

ygg sessions export <id>
ygg sessions repair <id>
ygg sessions delete <id>

Export validates and redacts by default. Delete moves files to recoverable trash. Repair only removes an interrupted final append after a private backup. The 0.6.2 release retains durable session goals, isolated child sessions with private delegation provenance, deferred tool-schema loading, and fork/clone branching.

Resolution is global, trusted project, then explicit paths. Later definitions win. Files must be regular and non-symlink. One broken resource becomes a diagnostic instead of blocking startup.

Theme customization is disabled in v0.6.2: terminal and graphical Serve always use the compiled default. Legacy theme options are ignored or fall back, and the schema is reserved for a later release.

ygg extension install ygg-web-search
ygg extension list

Project config can tighten user authority and resource limits, never relax them. It cannot grant executable extension trust.

model = "custom/local/Qwen/Qwen3-Coder-Next"
reasoning = "high"
cache_retention = "short"
color = "auto"
mouse = "auto"
bash_timeout_secs = 120
# Full host access is the default. Use --safe-mode for approvals.
max_output_bytes = 1048576
context_files = true
offline = false

[compaction]
mode = "local"
threshold_fraction = 0.85
keep_recent_tokens = 20000