Running with --cloud now tells you which local CLI options were ignored or refused, and why.
What's wrong with this entry?
When a run targets a cloud-hosted session (the agent runs in a cloud container rather than on your machine), each CLI option is now either forwarded, ignored with a visible notice, or refused with a reason. Refusals are grouped as bypass, tool_restriction, sdk_mcp, then unsupported. This applies on the --cloud path with no separate flag.
- Refused as bypass:
--dangerously-skip-permissions,--permission-mode bypassPermissions, or a settings file whose defaultMode is bypassPermissions. - Refused as tool restrictions:
--disallowed-tools,--tools(unless it resolves to just "default"),--disable-slash-commands,--safe-mode,--strict-mcp-config, and--settings/--managed-settingscarrying deny or ask rules. - Refused as sdk_mcp: in-process SDK MCP servers declared in
--mcp-config. Refused as unsupported:--json-schemaand--bare. --settings,--managed-settingsand--mcp-configthat only express preferences are ignored, with a notice telling you so.
bypassPermissions is not available in a cloud-hosted session
Strings lifted out of the shipped bundle, so the claim above can be checked against them.