Skip to content
Get Brompter

Agents

Permissions

Plan, ask, accept edits, or bypass. The mode is per CLI, and bypass asks before it is saved.

Modes

  • Plan keeps the agent from editing. Cursor omits --force in this mode.
  • Prompt each pauses before a tool runs. Claude, Codex, and Gemini show an Allow or Deny card in the chat. Cursor opens its CLI in a terminal pane so you approve there.
  • Accept edits is the usual default. Codex maps it to a workspace-write sandbox.
  • Bypass runs with the CLI’s unsandboxed or force flag. Saving it asks you to confirm.

The Allow card belongs to that turn. Closing it, or stopping the chat, denies anything still waiting. Settings → Agent stores the mode with the other harness options: instructions, model, and the auto-namer.

Instructions

Claude receives instruction text as an appended system prompt. Codex and Cursor prepend the same text to the turn. You edit it in Settings → Agent. The chat does not let the browser invent its own hidden prefix.