Permissions
Every tool has a default. Anything outside the project forces a question, and yolo turns all of it off.
Answering a prompt
- y
- Allow this once.
- n
- Deny. The model sees the refusal and can change approach.
- a
- Always, for this tool and resource, for the rest of the session.
Anything else, including Enter, denies. Denying is always safe.
Outside-project guard
Any resource outside the project root, whether an absolute path, .. or ~, forces an ask even for tools that default to allow, unless already granted for the session.
Yolo
/permissions then yolo auto-approves every tool call with no dialogs, including outside-project paths. A red YOLO badge shows on the chrome line above the composer. The choice persists to the global config as permissionMode, and a project lugent.json overrides it while present.
Yolo never modifies the per-session a grants. /permissions then normal turns it off.
An agent's permissions override replaces the tool default, but a session always-grant still wins, and the outside-project guard still forces an ask.