In VS Code sessions, unsafe default permission modes from settings are refused and fall back to normal.
tengu_harbor_willow Off in both readingsThe flag server returned off for the account this site reads and for the anonymous baseline. A reading of off cannot rule out a rollout these two readings sit outside of.
This account: off · anonymous baseline: off · compiled default in v2.1.225: on
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
Read once, for one account on one subscription tier, against v2.1.225. It isn't a statement about your account. What a flag value here can and cannot tell you
What's wrong with this entry?
For sessions owned by the VS Code extension, permissions.defaultMode is read only from policy, flag and user settings, and unsafe values from settings are refused.
bypassPermissionsfrom settings is ignored unless the user has consented; a warning is printed to stderr and the mode falls back to default.autois ignored while the auto-mode circuit breaker is active.- The
autoread additionally requirestengu_harbor_willow(fallback!1) or ameadow_lanternconfig value.
tengu_settings_bypass_unconsented_noninteractive_ignored
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.232
IDE hosts can drive the auto-mode default nudge
Both mention default mode
-
v2.1.238
Carrying and reporting your local permission mode in remote sessions is gated off
Both mention default mode
-
v2.1.234
Bypass permissions mode is now disabled only by settings
Both mention mode bypass