Automode Config

automode-config

Write target is .claude/settings.local.json. The user file (~/.claude/settings.json) and the shared file (.claude/settings.json) are read for adoption candidates, never written without an explicit opt-in flag plus a re-confirmation.

Three files

Four sections

autoMode has exactly four array fields, all holding prose rules, not Tool(specifier) patterns. There is no ask bucket and no plain deny bucket; those belong to permissions.

• environment: trust signals (repos, buckets, domains, services).
• allow: exceptions overriding soft_deny for the same target.
• soft_deny: destructive actions, overridable by allow or stated user intent.
• hard_deny: unconditional. Not lifted by allow, by stated intent, or by --dangerously-skip-permissions.

Each section accepts the literal "$defaults" to splice Anthropic's curated baseline in at that position. Omitting it replaces that section's baseline end-to-end, per section, independently. The skill preserves the sentinel verbatim and never expands it; it warns on every write that drops it.

Procedure

# 1. See what the three files currently say, and what the project implies.
uv run scripts/inspect_automode.py
uv run scripts/scan_project.py --json

# 2. Build a proposal (see below), then dry-run it for the canonical hash.
uv run scripts/apply_automode.py --proposal proposal.json --mode auto --dry-run

# 3. Commit with that hash as the gate predicate.
uv run scripts/apply_automode.py --proposal proposal.json --mode auto \
    --approved-canonical-hash <sha256>

Step 3 runs claude auto-mode critique, archives its output to .claude/.automode-history/, and refuses to write when the critique is missing or says nothing. Mode auto picks fresh or migrate from whether the local file already holds an autoMode block.

Building the proposal

Before the dry-run, read CLAUDE.md, AGENTS.md, and .claude/CLAUDE.md (skip any that are absent) and translate what they say into prose rules. Emit one JSON file covering all four sections:

Trap: allow overrides soft_deny unconditionally for the same target, so any soft_deny condition on a target an allow rule already opens is never enforced. Example: "allow": ["Deploying to release/* is allowed"] next to "soft_deny": ["Never deploy to release/* without a passing test suite"]: the test-suite condition never fires. Move the condition to hard_deny, or narrow the allow rule so it does not cover that case.

{
  "autoMode": {
    "environment": ["$defaults", "Source control: github.com/acme-corp and all repos under it"],
    "allow": ["$defaults", "Deploying to the staging namespace is allowed: it is isolated and resets nightly"],
    "soft_deny": ["$defaults", "Never run database migrations outside the migrations CLI"],
    "hard_deny": ["$defaults", "Never force-push to main or release/* branches"]
  }
}

The deterministic guards apply regardless of what the agent proposes, and regardless of whether the vendor critique is reachable: schema validation, a semantic lint over rule content (misses a bare-noun allow/soft_deny overlap; see references/cli.md for --lint-strict / --no-lint and its other known limits), version-band probe, critique gate, hash gate, atomic write under flock.

Invariants

• Never write autoMode into the shared file silently: it needs --write-shared, a confirmed prompt, and the classifier-ignores warning reprinted at write time.
• Never expand "$defaults"; preserve it verbatim at its position.
• Never treat a zero exit from the critique as approval on its own.
• Never let a proposal carry any top-level key besides autoMode; hooks, env, permissions, and everything else fail validation, since a proposal is agent-authored and a pass-through key would install itself straight into your settings.

Slash command

/automode-edit <query> (commands/automode-edit.md) edits the local block in plain language and drives the same pipeline. It never touches the shared or user files unless the query asks and the user reconfirms.

References

Load on demand, not upfront.

Docs (verified 2026-05-10): auto mode, permissions, permission modes, settings.