Full access or Ask before edits
Read this before your first thread. Every thread runs in one of two modes, shown on the composer (the box you type in) and changed by clicking it.
- Full access (the default): the agent edits files and runs commands without asking. It can do anything your Mac user account can do, in any folder, including deleting files. This is how Threadbear is meant to be used day to day, and it's fine for a folder you trust it with.
- Ask before edits: the agent stops for your OK before it edits a file or runs a command. A card shows in the thread with Allow, Always allow and Deny. Always allow only lasts for that thread. A Codex thread in this mode can read files but not change them unless you agree.
The mode belongs to one thread. A new thread starts on Full access again unless you pick otherwise, so if you're unsure about a task, switch it to Ask before edits before you send. Deleting a thread is one thing an agent always has to ask about, whatever the mode.