Modes and permissions

The mode picker under the input decides what the model may do on its own and which actions must ask you first.

​

Common modes (Claude)

​

Permission dialog choices

When the model asks a multiple-choice question, it uses the AskUserQuestion dialog. You can turn on system notifications in Settings.

​

Plan mode and the Plan panel

Plan mode first produces a read-only plan. The app also has a Plan panel that lists the execution steps so you can see how far it has gone.

​

Directory Grant

If Claude Read / Bash fails because the path is outside the allowed working directory, an inline Directory Grant card may appear:

• Approve writes a session-level grant. The next launch injects --add-dir
• Deny leaves the failure closed

This is a different layer of safety from the mode picker.

​

Codex sandbox and collaboration mode

Codex has separate sandbox / collaboration mode settings. You can combine them with chat permission modes: one side controls “ask you or not,” the other controls which directories and network the command can actually touch.