docs/core concepts/Permission modes

permission modes:
decide when it asks.

One control sets how much tonee changes in your set without checking with you first. It's a dial you turn, not a rule the model interprets. tonee never decides for itself that something is safe enough to skip the prompt.

01 /The four modes

Each mode is a line drawn through the same ladder the Undo Guard uses. Everything below the line runs silently; everything above it stops and asks. New chats start in Auto.

ASK

Confirm every change

Nothing is written to your set without a prompt: not a fader move, not a device add. Slow on purpose. Good for a set you can't afford to disturb.

AUTO

Confirm deletes

The default. Parameter changes and anything tonee creates run straight through. Undo covers them. Every deletion asks first.

FLOW

Confirm only risky deletes

Also runs the deletions tonee can put back (MIDI notes, MIDI clips) without asking. Still stops for anything it can't reconstruct.

FULL AUTO

No prompts

Nothing pauses, including track and device deletion. Off until you enable it in Settings, and it can only be chosen for one chat at a time.

Read that as a table and it's easier to see where the lines fall. ⚠ stops and asks; · runs without a prompt.

Ask

Auto

Flow

Full Auto

Set a parameter, level, send or tempo

⚠

Create a track, clip, device or notes

⚠

Remove MIDI notes

⚠

Delete a MIDI clip

⚠

Delete an audio clip

⚠

Delete a locator / marker

⚠

Delete a track, device or instrument

⚠

Why markers stop in Flow: a locator is reversible, so undo can put it back. But deleting one silently moves the furniture in a set you're navigating by ear, so the gate treats it as risky even though the Undo Guard treats it as reversible.

02 /What a confirmation looks like

You get one prompt per change tonee makes, not one per parameter. A single card lists every write in that change, in plain language, with the real target names already resolved. Deletions are flagged, and anything that can't be undone says so on its own line.

Make these changes?

⚠Delete track "VOX BGS" (can't be undone)

⚠Delete audio effect "Glue Compressor" on "DRUM BUS" (can't be undone)

·Remove notes on "ACID LN" (scene 2)

CancelConfirm

Confirm

Everything on the card runs, as one commit. It gets a [#N] like any other change, so undo still works on it afterwards.

Cancel

Nothing runs. This is different from undo: there is nothing to reverse, because no write ever reached your set.

Changed your mind

There is no edit-the-list option. Cancel and tell tonee what you actually wanted; it re-plans from there.

Left alone

After two minutes the card cancels itself and nothing runs. There is no countdown on screen, because a ticking clock only encourages rubber-stamping.

New message

Sending a new message while the card is up cancels the whole turn, card included. Nothing runs.

The card never shows you code. What it shows is the list of things that are about to happen to your set, which is the part you can actually judge.

03 /Switching mode

For this chat

The ⋯ menu beside the message box → Mode. Takes effect on your next message and stays with that chat.

For every new chat

Settings → Behavior → "New chats start in". Ask, Auto or Flow. Existing chats keep whatever they are on.

Full Auto is deliberately harder to reach than the other three. It doesn't appear in the menu until you tick Enable Full Auto in Settings → Behavior, and even then it can't be set as your default. You choose it for one chat, and the next chat you open is back on your normal default.

Full Auto deletes tracks without asking, including the ones tonee can't rebuild. The identity check on every delete still runs, so it won't delete the wrong track. It will delete the right one, immediately, and your only way back is ⌘Z in Live.

04 /What never prompts

The gate only sits in front of writes. Anything that reads your set runs at full speed in every mode, Ask included. Otherwise the assistant couldn't answer a question without a dialog first.

Reading your set

Track lists, device chains, parameter values, MIDI notes and scene layout never prompt, in any mode.

Transport

Play, stop and locate are not writes to your set and are not gated.

Listening

Audio capture has its own consent step (you press Stop yourself), so it does not also go through the gate.

The safety backstop

The per-delete identity check runs underneath all four modes and cannot be switched off, Full Auto included.

The mode is read by the app, not by the model. Asking tonee to "stop confirming things" won't change it. That's the point. Use the ⋯ menu.

← The Undo Guard Next · Safe deletes →

permission modes:decide when it asks.

on this page

01 /The four modes

02 /What a confirmation looks like

03 /Switching mode

04 /What never prompts

permission modes:
decide when it asks.