Access modes

The access mode sets what the agent may do without asking you first. Pick it per thread from the composer’s status row. Access modes apply to Codex threads and remote Claude threads, where Cone has a live channel to deliver approval prompts.

Mode	Behavior
Auto	Starts read-only and asks before protected actions.
Accept edits	Applies workspace edits, still asks for other protected actions.
Bypass	Runs without approval prompts.

Each mode maps to the provider’s native permission system. For remote Claude that is the CLI’s permission modes. For Codex it is the sandbox and approval policy pair, from read-only with on-request approvals up to full access with no prompts.

Plan mode

Plan mode outranks whatever access mode is selected. A planning turn stays read-only regardless of provider, so you can ask for a plan in a Bypass thread without risking edits.

Permission prompts

When a turn hits a protected action in Auto or Accept edits, a permission card appears above the composer describing the action. Approve it once, always, or deny it. On remote Claude threads the answer travels over the live SSH channel without interrupting the turn.

Local Claude

Local Claude turns use the CLI’s one-shot path, which has no channel for mid-turn prompts. Build turns therefore run with permissions skipped, and plan mode remains the read-only option. Use a remote thread or Codex when you want prompt-level control.