plan

What's the difference between default, acceptEdits, plan, auto, dontAsk, and bypassPermissions?

Six permission modes, picked by how much you trust the tool call to be reversible. default prompts everything new; acceptEdits skips Edit prompts; plan blocks edits entirely; auto adds a classifier; dontAsk auto-denies anything not pre-approved; bypassPermissions skips every prompt (with a circuit-breaker for rm -rf against critical paths).