Enum PermissionMode 

pub enum PermissionMode {
    Default,
    AcceptEdits,
    BypassPermissions,
    DontAsk,
    Plan {
        pre_plan_mode: Box<PermissionMode>,
        bypass_available: bool,
    },
    Auto,
    Strict,
}

The session-wide permission mode, determining runtime behaviour for tool dispatch.

This is separate from the per-tool allow/deny/interactive lists in the layered config — the mode acts as a top-level policy on top of those static rules.

Serde

This enum supports both the new camelCase names and the old snake_case names for backward compatibility:

New	Old aliases
default	allow
acceptEdits	—
bypassPermissions	—
dontAsk	deny, interactive
plan (string)	plan

The plan variant also accepts an object form: {"prePlanMode": "default", "bypassAvailable": false}.

Variants

Default

Normal mode: follow static allow/deny rules, defer to Passthrough for unknown tools.

AcceptEdits

Auto-allow write tools within the workspace.

BypassPermissions

Skip all rule checks; every tool is allowed.

DontAsk

Deny any tool that is in the interactive list.

Plan

Plan mode: blocks write tools (except exit_plan_mode). pre_plan_mode stores the mode to restore on exit. bypass_available allows writes to bypass plan-mode blocking when the agent was in BypassPermissions before entering plan.

Fields

pre_plan_mode: Box<PermissionMode>

The mode that was active before entering plan mode.

bypass_available: bool

Whether write tools are allowed during plan mode (only true when pre-plan mode was BypassPermissions).

Auto

Auto mode: delegate every tool-call decision to an LLM classifier.

The classifier receives the tool name, argument summary, and recent conversation context and returns {"block": true|false, "reason": "..."}. A denial tracker prevents runaway loops (3 consecutive / 10 total denials → all subsequent calls denied).

Strict

Strict mode: treat Permission::Unknown as Denied.

Any tool that does not have an explicit allow rule is blocked. This is the safest default for untrusted or audited environments. Use bypassPermissions to skip all checks, or default to restore the lenient “unknown = allowed” semantics.

Trait Implementations

impl Clone for PermissionMode

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PermissionMode

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for PermissionMode

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PermissionMode

impl PartialEq for PermissionMode

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for PermissionMode

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PermissionMode