Permissions

Shellarium gives you fine-grained control over what AI agents are allowed to do. Every tool call — file writes, command execution, web requests — can be approved or denied.

Permission Modes

Each workspace can operate in one of three modes:

Normal Mode

Every tool call requires your explicit approval. You’ll see a permission prompt in the output with:

• The tool name (e.g., “Write file”, “Run command”)
• The tool arguments (file path, command, etc.)
• Allow once, Allow for session, and Deny buttons

This is the safest mode and is recommended when you want full visibility.

Auto Mode

Auto mode behavior depends on provider:

• Claude provider: tool calls are auto-approved, except interactive planning prompts (AskUserQuestion, ExitPlanMode), which still require approval.
• ACP providers: mode flags do not auto-approve tool calls; only tools explicitly allowed for the current session are auto-approved.

Brave Mode

For the Claude provider, all tool calls are automatically approved. The agent works autonomously without interruption.

Use brave mode when you trust the agent and want maximum speed. The agent can still be cancelled at any time.

Permission Prompts

When a tool call requires approval, you’ll see an inline prompt showing exactly what the agent wants to do. You can:

• Allow once — approve this specific action
• Deny — reject this action (the agent will try an alternative)
• Allow for session — approve this tool for the rest of the current session