[Feature]: Read Only mode

[zaun]

Before submitting

• I searched existing issues and did not find a duplicate.
• I am describing a concrete problem or use case, not just a vague idea.

Area

apps/web

Problem or use case

Right now there is "Full access", "Auto-accept edits" and "Supervised".

My use case is having a conversation with the AI and allowing it to have read-only access to local files and to things like Search tools. Right now, if the AI tries to modify a file it can unless Im in "Supervised" mode. But in "Supervised" mode it as to ask for searching and reading files.

Proposed solution

I would like a middle ground with a "Read only" mode, where is can have read only access to everything. So reading and tool calls work, without the worry of files being edited.

Why this matters

It's a safety feature. It lasts the AI have access to the project without prompting and still has the security of knowing files wont be modified.

Smallest useful scope

Add a new "Read only" mode.

• auto-decline commands and tools that can modify files.
• verify after a tool call that no file was modified.

Alternatives considered

No response

Risks or tradeoffs

No response

Examples or references

No response

Contribution

• I would be open to helping implement this.

[TheGP]

What about Plan mode? Codex today rejected editing files in this mode, not sure if all models follow it though

[zaun]

For me, its not really for planning as much about having a conversation about a project, before the planning.