xal v0.0.1
gpt-5.6-sol
~/Projects/xal
/safety

Nothing runs without your say

A permission engine sits between the agent and your machine — allow / ask / deny per tool. When a rule says ask, it stops.

*bash rm -rf node_modulesdenied x
>read .envblocked x
*edit src/index.tsplan mode x

In plan mode it can only read. It investigates, writes the plan, and hands the decision back to you:

?Plan review· Question 1 of 1●
Review the implementation plan above. What should Xal do?
❯ ○Approve and build
Restore the previous writable mode, or normal mode, and begin implementing.
○Request changes
Keep plan mode active so the proposal can be revised.
←→ questions · ↑↓ choose · 1-3 select · Enter save · Esc decline
  • custom modes — ship your own docs-only or ci mode; yolo exists for when you mean it
  • secret redaction — keys scrubbed from what the model sees, what is stored, and what is on screen
  • undo — /undo rewinds the conversation and the files; worktree isolation when you want distance
  • workspace trust — an untrusted folder cannot load project config or plugins