Enum PermissionMode 

pub enum PermissionMode {
    Default,
    AcceptEdits,
    BypassPermissions,
    DontAsk,
    Plan {
        pre_plan_mode: Box<PermissionMode>,
        bypass_available: bool,
    },
    Auto,
}

The session-wide permission mode, determining runtime behaviour for tool dispatch.

This is separate from the per-tool allow/deny/interactive lists in the layered config — the mode acts as a top-level policy on top of those static rules.

Serde

This enum supports both the new camelCase names and the old snake_case names for backward compatibility:

New	Old aliases
default	allow
acceptEdits	—
bypassPermissions	—
dontAsk	deny, interactive
plan (string)	plan

The plan variant also accepts an object form: {"prePlanMode": "default", "bypassAvailable": false}.

Variants

Default

Normal mode: follow static allow/deny rules, defer to Passthrough for unknown tools.

AcceptEdits

Auto-allow write tools within the workspace.

BypassPermissions

Skip all rule checks; every tool is allowed.

DontAsk

Deny any tool that is in the interactive list.

Plan

Plan mode: blocks write tools (except exit_plan_mode). pre_plan_mode stores the mode to restore on exit. bypass_available allows writes to bypass plan-mode blocking when the agent was in BypassPermissions before entering plan.

Fields

pre_plan_mode: Box<PermissionMode>

The mode that was active before entering plan mode.

bypass_available: bool

Whether write tools are allowed during plan mode (only true when pre-plan mode was BypassPermissions).

Auto

Auto mode: delegate every tool-call decision to an LLM classifier.

The classifier receives the tool name, argument summary, and recent conversation context and returns {"block": true|false, "reason": "..."}. A denial tracker prevents runaway loops (3 consecutive / 10 total denials → all subsequent calls denied).

Trait Implementations

impl Clone for PermissionMode

fn clone(&self) -> PermissionMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PermissionMode

fn default() -> PermissionMode

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for PermissionMode

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PermissionMode

impl PartialEq for PermissionMode

fn eq(&self, other: &PermissionMode) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for PermissionMode

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PermissionMode