Self-denying away-from-keyboard prompts sit behind CLAUDE_CODE_TICKLISH_WHISPER with a timeout override, off unless set.
When auto mode hits its classifier denial limits (3 consecutive or 20 total), it can now show a permission prompt that auto-denies after a timeout instead of simply reverting to prompting. The reply tells the model you are likely away from keyboard and not to retry variations meanwhile. It is off unless tengu_ticklish_whisper is enabled server-side or CLAUDE_CODE_TICKLISH_WHISPER is set, and needs a dialog requester. The delay defaults to 120000 ms, overridable via CLAUDE_CODE_TICKLISH_WHISPER_TIMEOUT_MS.
- The timed prompt is shown once per session; a flag on denial tracking stops it repeating. Denial tracking itself moved into app state with a local override path.
- Timing out records the decision as a reject from config with the reason
Denial-limit dialog timed out, and firestengu_auto_mode_denial_dialog_auto_denied(tool name, whether it is an MCP tool, timeout in ms) plus a fallback event withautoDeniedtrue. Answering in time logs the same fallback event withautoDeniedfalse. - The existing
tengu_auto_mode_denial_limit_exceededevent now reports which shape ran: timed, blocking or legacy. - Headless is unchanged and still aborts with
Agent aborted: too many classifier denials in headless mode.
Denial-limit dialog timed out, Agent aborted: too many classifier denials in headless mode, tengu_auto_mode_denial_dialog_auto_denied, the user is likely away from keyboard and cannot approve requests right now, tengu_auto_mode_denial_limit_exceeded
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
tengu_ticklish_whisper Off in both readingsThe flag server returned off for the account this site reads and for the anonymous baseline. A reading of off cannot rule out a rollout these two readings sit outside of.
This account: off · anonymous baseline: off · compiled default in v2.1.246: off
Read once, for one account on one subscription tier, against v2.1.246. It isn't a statement about your account. What a flag value here can and cannot tell you
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
New in this build: tengu_ticklish_whisper