[{"data":1,"prerenderedAt":586},["ShallowReactive",2],{"navigation":3,"\u002Fdocs\u002Fguide\u002Fpermission-modes":128,"\u002Fdocs\u002Fguide\u002Fpermission-modes-surround":581},[4],{"title":5,"path":6,"stem":7,"children":8,"page":32},"Docs","\u002Fdocs","docs",[9,33,78,108],{"title":10,"path":11,"stem":12,"children":13,"icon":32},"入门","\u002Fdocs\u002Fgetting-started","docs\u002F1.getting-started\u002F1.index",[14,17,22,27],{"title":15,"path":11,"stem":12,"icon":16},"介绍","i-lucide-house",{"title":18,"path":19,"stem":20,"icon":21},"安装与更新","\u002Fdocs\u002Fgetting-started\u002Finstallation","docs\u002F1.getting-started\u002F2.installation","i-lucide-download",{"title":23,"path":24,"stem":25,"icon":26},"快速上手","\u002Fdocs\u002Fgetting-started\u002Fusage","docs\u002F1.getting-started\u002F3.usage","i-lucide-rocket",{"title":28,"path":29,"stem":30,"icon":31},"界面导览","\u002Fdocs\u002Fgetting-started\u002Finterface","docs\u002F1.getting-started\u002F4.interface","i-lucide-layout-dashboard",false,{"title":34,"icon":32,"path":35,"stem":36,"children":37,"page":32},"使用指南","\u002Fdocs\u002Fguide","docs\u002F2.guide",[38,43,48,53,58,63,68,73],{"title":39,"path":40,"stem":41,"icon":42},"任务与并行","\u002Fdocs\u002Fguide\u002Ftasks","docs\u002F2.guide\u002F1.tasks","i-lucide-list-checks",{"title":44,"path":45,"stem":46,"icon":47},"模型与用量","\u002Fdocs\u002Fguide\u002Fmodels","docs\u002F2.guide\u002F2.models","i-lucide-brain",{"title":49,"path":50,"stem":51,"icon":52},"权限模式","\u002Fdocs\u002Fguide\u002Fpermission-modes","docs\u002F2.guide\u002F3.permission-modes","i-lucide-shield",{"title":54,"path":55,"stem":56,"icon":57},"审查、预览与终端","\u002Fdocs\u002Fguide\u002Freview-preview","docs\u002F2.guide\u002F4.review-preview","i-lucide-eye",{"title":59,"path":60,"stem":61,"icon":62},"斜杠命令与提及","\u002Fdocs\u002Fguide\u002Fcommands","docs\u002F2.guide\u002F5.commands","i-lucide-square-chevron-right",{"title":64,"path":65,"stem":66,"icon":67},"长任务 Goal","\u002Fdocs\u002Fguide\u002Fgoal","docs\u002F2.guide\u002F6.goal","i-lucide-target",{"title":69,"path":70,"stem":71,"icon":72},"工作树与环境","\u002Fdocs\u002Fguide\u002Fworktrees","docs\u002F2.guide\u002F7.worktrees","i-lucide-git-branch",{"title":74,"path":75,"stem":76,"icon":77},"会话接力","\u002Fdocs\u002Fguide\u002Fsession-continuity","docs\u002F2.guide\u002F8.session-continuity","i-lucide-import",{"title":79,"icon":32,"path":80,"stem":81,"children":82,"page":32},"进阶","\u002Fdocs\u002Fadvanced","docs\u002F3.advanced",[83,88,93,98,103],{"title":84,"path":85,"stem":86,"icon":87},"技能 Skills","\u002Fdocs\u002Fadvanced\u002Fskills","docs\u002F3.advanced\u002F1.skills","i-lucide-sparkles",{"title":89,"path":90,"stem":91,"icon":92},"MCP 工具","\u002Fdocs\u002Fadvanced\u002Fmcp","docs\u002F3.advanced\u002F2.mcp","i-lucide-server",{"title":94,"path":95,"stem":96,"icon":97},"插件市场","\u002Fdocs\u002Fadvanced\u002Fplugins","docs\u002F3.advanced\u002F3.plugins","i-lucide-puzzle",{"title":99,"path":100,"stem":101,"icon":102},"记忆与项目指令","\u002Fdocs\u002Fadvanced\u002Fmemory","docs\u002F3.advanced\u002F4.memory","i-lucide-brain-circuit",{"title":104,"path":105,"stem":106,"icon":107},"联网搜索","\u002Fdocs\u002Fadvanced\u002Fweb-search","docs\u002F3.advanced\u002F5.web-search","i-lucide-globe",{"title":109,"icon":32,"path":110,"stem":111,"children":112,"page":32},"参考","\u002Fdocs\u002Freference","docs\u002F4.reference",[113,118,123],{"title":114,"path":115,"stem":116,"icon":117},"快捷键速查","\u002Fdocs\u002Freference\u002Fshortcuts","docs\u002F4.reference\u002F1.shortcuts","i-lucide-keyboard",{"title":119,"path":120,"stem":121,"icon":122},"数据与隐私","\u002Fdocs\u002Freference\u002Fprivacy","docs\u002F4.reference\u002F2.privacy","i-lucide-shield-check",{"title":124,"path":125,"stem":126,"icon":127},"常见问题","\u002Fdocs\u002Freference\u002Ffaq","docs\u002F4.reference\u002F3.faq","i-lucide-circle-help",{"id":129,"title":49,"body":130,"description":574,"extension":575,"links":576,"meta":577,"navigation":578,"path":50,"seo":579,"stem":51,"__hash__":580},"docs\u002Fdocs\u002F2.guide\u002F3.permission-modes.md",{"type":131,"value":132,"toc":555},"minimark",[133,154,158,165,170,270,273,280,287,289,324,366,384,387,404,408,411,413,423,426,433,443,445,452,456,474,494,501,505,512,524,528,535,540,543],[134,135,136,137,140,141,144,145,149,150,153],"p",{},"助手动手之前要不要先问你，由",[138,139,49],"strong",{},"决定。它是",[138,142,143],{},"每个任务单独","的设置：在输入框旁的选择器里选，或用 ",[146,147,148],"code",{},"⌘ + Shift + M","（Windows 为 ",[146,151,152],{},"Ctrl + Shift + M","）在四档之间循环。",[155,156,157],"h2",{"id":157},"四档梯子",[134,159,160,161,164],{},"四档按",[138,162,163],{},"授权由紧到松","排列，每一档恰好比上一档多放行一类东西（快捷键也按这个顺序循环）：",[134,166,167],{},[138,168,169],{},"计划模式 → 变更前确认 → 自动编辑（默认）→ 完全访问",[171,172,173,189],"table",{},[174,175,176],"thead",{},[177,178,179,183,186],"tr",{},[180,181,182],"th",{},"模式",[180,184,185],{},"无需询问即可运行",[180,187,188],{},"仍会询问",[190,191,192,210,237,251],"tbody",{},[177,193,194,200,203],{},[195,196,197],"td",{},[138,198,199],{},"计划模式",[195,201,202],{},"只读探索工具",[195,204,205,206,209],{},"一切写类工具被",[138,207,208],{},"直接拒绝","，不弹审批",[177,211,212,217,234],{},[195,213,214],{},[138,215,216],{},"变更前确认",[195,218,219,220,223,224,223,227,223,230,233],{},"只读工具、白名单内的只读命令（",[146,221,222],{},"cat"," \u002F ",[146,225,226],{},"ls",[146,228,229],{},"head",[146,231,232],{},"grep"," 等）",[195,235,236],{},"一切文件改动、其余命令、网络请求、MCP 工具",[177,238,239,245,248],{},[195,240,241,244],{},[138,242,243],{},"自动编辑","（默认）",[195,246,247],{},"工作区内的文件编辑、只读命令、网络请求",[195,249,250],{},"危险命令、写到工作区外、敏感文件、MCP 与未识别的工具",[177,252,253,258,261],{},[195,254,255],{},[138,256,257],{},"完全访问",[195,259,260],{},"几乎全部",[195,262,263,264,269],{},"灾难性删除命令（见",[265,266,268],"a",{"href":267},"#%E5%B7%B2%E7%9F%A5%E8%BE%B9%E7%95%8C","已知边界","）",[271,272,199],"h3",{"id":199},[134,274,275,276,279],{},"只读探索，先给出方案。这一档里写类工具是",[138,277,278],{},"硬拦","：不会弹审批让你放行，助手直接拿到拒绝结果；MCP 工具同样整类不可用。所以「本机工作区不会被修改」在这一档是一句承诺，而不是默认行为。",[134,281,282,283,286],{},"看完方案想让它动手，点",[138,284,285],{},"开始执行","回到原来的档位，或者手动切档。",[271,288,216],{"id":216},[134,290,291,292,295,296,298,299,298,301,298,304,298,306,298,309,298,312,298,315,298,318,298,321,323],{},"改动落地前问你一句。放行的只有只读工具，以及一张",[138,293,294],{},"很短的只读命令白名单"," —— ",[146,297,222],{},"、",[146,300,226],{},[146,302,303],{},"pwd",[146,305,229],{},[146,307,308],{},"tail",[146,310,311],{},"wc",[146,313,314],{},"echo",[146,316,317],{},"which",[146,319,320],{},"type",[146,322,232],{},"。名单之外一律询问，包括：",[325,326,327,338,347],"ul",{},[328,329,330,333,334,337],"li",{},[146,331,332],{},"git","（哪怕是 ",[146,335,336],{},"git status","，首版不做子命令细分）；",[328,339,340,298,343,346],{},[146,341,342],{},"rg",[146,344,345],{},"find","；",[328,348,349,350,298,353,298,356,298,359,298,362,365],{},"任何带 ",[146,351,352],{},">",[146,354,355],{},"|",[146,357,358],{},"&&",[146,360,361],{},";",[146,363,364],{},"$(...)"," 的复合命令。",[367,368,369],"note",{},[134,370,371,298,373,375,376,379,380,383],{},[146,372,342],{},[146,374,345],{}," 看着是纯查询，实际都自带执行任意程序的入口（",[146,377,378],{},"rg --pre=..."," 会对每个输入文件跑一遍指定命令，",[146,381,382],{},"find -execdir ..."," 同理），所以不进白名单。要在这一档搜索代码，用助手自带的搜索工具，它们本来就放行。",[134,385,386],{},"这一档还有两条配套约束：",[325,388,389,398],{},[328,390,391,397],{},[138,392,393,396],{},[265,394,395],{"href":65},"长任务（Goal）模式","的自动批准白名单在这一档不生效"," —— 你选了逐个确认，就以逐个确认为准。",[328,399,400,403],{},[138,401,402],{},"审批条上没有「本任务始终允许」","；切进这一档时，之前在别的档位建立的任务级放行也会被清空。",[271,405,407],{"id":406},"自动编辑默认","自动编辑（默认）",[134,409,410],{},"工作区内的文件编辑不再打断你，其余照问：危险命令、写到工作区外的路径、敏感文件（密钥、证书等）、MCP 与未识别的工具都会弹审批。",[271,412,257],{"id":257},[134,414,415,416,419,420,422],{},"日常操作不再逐个确认。唯一仍会弹窗的是",[138,417,418],{},"灾难性删除命令","——那是防模型参数幻觉的断路器，不是一道完整的安全边界，它的覆盖面见下方",[265,421,268],{"href":267},"。",[155,424,425],{"id":425},"切换时机",[134,427,428,429,432],{},"切档",[138,430,431],{},"从下一次工具调用开始生效","。已经批准或正在执行的操作，会按切换前的档位跑完。",[434,435,436],"warning",{},[134,437,438,439,442],{},"要立刻停下来，请用",[138,440,441],{},"停止","，不是切档。切到更严的档位不会中止已在执行的操作。",[155,444,268],{"id":268},[134,446,447,448,451],{},"这一节讲的是这套机制",[138,449,450],{},"做不到","的事。",[271,453,455],{"id":454},"断路器覆盖不到-mcp-与任意代码执行","断路器覆盖不到 MCP 与任意代码执行",[134,457,458,459,462,463,298,466,469,470,473],{},"「完全访问」档下唯一仍会弹审批的是",[138,460,461],{},"灾难性删除","（",[146,464,465],{},"rm -rf ~",[146,467,468],{},"rm -rf \u002F"," 及其包装器与复合命令写法）。它匹配的是 ",[138,471,472],{},"shell 删除命令的字面形态","，因此覆盖不到：",[325,475,476,481],{},[328,477,478,480],{},[138,479,89],{},"：例如某个文件系统 MCP server 的「删除目录」工具，参数指向主目录 —— 没有任何东西会拦。",[328,482,483,486,487,298,490,493],{},[138,484,485],{},"任意代码执行","：",[146,488,489],{},"python -c \"shutil.rmtree(...)\"",[146,491,492],{},"node -e ..."," 或一个脚本文件，效果等价但形态完全不同。",[134,495,496,497,500],{},"所以",[138,498,499],{},"不要","把它读成「只有删除主目录才会问你」。",[271,502,504],{"id":503},"完全访问不提供针对提示注入的保护","「完全访问」不提供针对提示注入的保护",[134,506,507,508,511],{},"这一档会自动应答",[138,509,510],{},"一切","审批请求，包括模型被外部内容（网页、仓库里的文件、第三方工具的返回值）诱导而发起的操作。需要更强隔离时：",[325,513,514,521],{},[328,515,516,517,520],{},"在 ",[138,518,519],{},"设置 → MCP"," 里按 server 声明信任范围（默认不信任，可逐个工具放行）；",[328,522,523],{},"不要在来源不明的工作区里用「完全访问」。",[271,525,527],{"id":526},"装回旧版本客户端会让变更前确认扩权一级","装回旧版本客户端会让「变更前确认」扩权一级",[134,529,530,531,534],{},"权限档由客户端强制执行。「变更前确认」是较新版本引入的档位，",[138,532,533],{},"旧版本客户端","打开同一份本地数据时不认识这个取值，会回落到默认档（自动编辑）—— 原本每次都问的工作区内编辑，于是变成不再询问。",[434,536,537],{},[134,538,539],{},"降级安装旧版本后，请重新确认各任务的权限模式。",[155,541,542],{"id":542},"相关",[325,544,545,550],{},[328,546,547,548,422],{},"文件访问范围、数据存放位置与联网时机，见 ",[265,549,119],{"href":120},[328,551,552,553,422],{},"MCP server 的接入与信任配置，见 ",[265,554,89],{"href":90},{"title":556,"searchDepth":557,"depth":558,"links":559},"",1,2,[560,567,568,573],{"id":157,"depth":558,"text":157,"children":561},[562,564,565,566],{"id":199,"depth":563,"text":199},3,{"id":216,"depth":563,"text":216},{"id":406,"depth":563,"text":407},{"id":257,"depth":563,"text":257},{"id":425,"depth":558,"text":425},{"id":268,"depth":558,"text":268,"children":569},[570,571,572],{"id":454,"depth":563,"text":455},{"id":503,"depth":563,"text":504},{"id":526,"depth":563,"text":527},{"id":542,"depth":558,"text":542},"计划模式、变更前确认、自动编辑、完全访问四档权限，逐档说明放行范围、切换时机与已知边界。","md",null,{},{"icon":52},{"title":49,"description":574},"NX0fmYeyLkfQ79SVRHrrrCzETSAdY8FZs8u2qaydfcs",[582,584],{"title":44,"path":45,"stem":46,"description":583,"icon":47,"children":-1},"四种模型接入方式、任务内切换、思考强度，以及套餐与用量的查看。",{"title":54,"path":55,"stem":56,"description":585,"icon":57,"children":-1},"用 diff 审查改动、提交推送，在内嵌浏览器里看运行效果，直接编辑文件，开内置终端。",1786009888713]