Permission modes
Control how much memcode does on its own before asking you.
memcode asks before it does anything risky. How often it asks is up to you. There are three modes.
Ask
The default. memcode runs safe reads freely, but asks before writing files, installing, or running risky commands. You don't pass anything to get it:
memcode agent "review the open PR and suggest fixes"Auto
memcode also runs medium-risk actions on its own, and still asks before
dangerous ones. Turn it on with --auto:
memcode agent --auto "update the changelog for the last 5 commits"Allow-all
memcode runs everything except the destructive commands below, which always ask.
Turn it on with --allow-all:
memcode agent --allow-all "run the migration and reseed the dev database"Switch mode in a session
Use /mode to change mode while you work. Type it on its own to cycle through
the three, or name one, like /mode auto. Your choice sticks for the project.
What always asks first
A few things are destructive enough that memcode always asks first, even in
allow-all and /yolo:
- Wiping disks or files:
mkfs,dd,shred,rm -rf - Rewriting git history:
git push --force,git reset --hard - Dropping a database, storage bucket, or namespace
- Publishing a website
You can't turn this off.
Background jobs
A job you send to the background can't stop to ask you anything, so it runs in auto mode. It still won't run the destructive commands above on its own.