feat: YOLO Mode - Skip All Permission Prompts (CLI + Desktop) by mguttmann · Pull Request #9073 · anomalyco/opencode

mguttmann · 2026-01-17T11:30:23Z

Summary

Comprehensive implementation of YOLO mode that allows users to skip all permission prompts. This addresses multiple community requests (#8463, #7928, #1813) with a complete solution for both CLI and Desktop.

Closes #9070

Features

CLI Support

Method	Usage
Flag	`opencode --yolo` or `opencode --dangerously-skip-permissions`
Environment Variable	`OPENCODE_YOLO=true opencode`
Commands	`opencode yolo status` / `enable` / `disable`

# Check current status
$ opencode yolo status
YOLO mode: ENABLED (saved in config)
Config: /Users/.../.config/opencode/config.json

# Enable permanently
$ opencode yolo enable
YOLO mode ENABLED - saved to config
Warning: All permission prompts will be skipped!

# Disable
$ opencode yolo disable
YOLO mode disabled - removed from config

Desktop App Support

New Settings → Danger Zone tab with:

This Session Only - Toggle for current session (resets on restart)
Always Enabled - Persists to ~/.config/opencode/config.json
Clear visual indicators showing active state
Live switching without app restart
Warning messaging about the risks

Config File Support

{
  "yolo": true
}

Works in both project-level opencode.json and global ~/.config/opencode/config.json.

Technical Implementation

Yolo Module (packages/opencode/src/yolo/index.ts): Centralized state management
Permission Bypass (permission/next.ts): Auto-approves in PermissionNext.ask() when YOLO enabled
API Endpoints: GET/POST /config/yolo for runtime control
Safety: Explicit deny rules are still respected even in YOLO mode

Files Changed

File	Changes
`packages/opencode/src/yolo/index.ts`	New module for YOLO state management
`packages/opencode/src/cli/cmd/yolo.ts`	New CLI commands
`packages/opencode/src/permission/next.ts`	Auto-approve logic
`packages/opencode/src/server/routes/config.ts`	YOLO API endpoints
`packages/opencode/src/flag/flag.ts`	OPENCODE_YOLO env var
`packages/opencode/src/config/config.ts`	Config schema
`packages/opencode/src/index.ts`	CLI flag + command registration
`packages/app/src/components/dialog-settings.tsx`	Desktop UI (Danger Zone tab)

Testing

Manually tested:

CLI --yolo flag
CLI opencode yolo commands
Environment variable
Desktop UI YOLO toggles
Config persistence
Live toggle without restart
Permission prompts appear when disabled
Permission prompts skipped when enabled
Switching between session-only and permanent modes

Related Issues

This PR provides a comprehensive solution that addresses:

[FEATURE]: Add --dangerously-skip-permissions (aka YOLO mode) #8463: --dangerously-skip-permissions flag ✅
[Feature]: Runtime Permission Mode Toggle (like Claude Code's Shift+Tab) #7928: Runtime permission toggle ✅
Feature Request: Yolo and non-Yolo mode (auto-accept) #1813: YOLO mode / auto-accept ✅

github-actions · 2026-01-17T11:32:32Z

The following comment was made by an LLM, it may be inaccurate:

Based on my search, I found one potential duplicate:

PR #7137: feat: add --dangerously-skip-permissions flag
#7137

This PR appears to be directly related as it implements a --dangerously-skip-permissions flag, which is one of the methods mentioned in PR #9073 for skipping permission prompts. The current PR #9073 consolidates this feature under the broader "YOLO mode" umbrella with additional functionality for Desktop UI and runtime configuration.

Note: PR #6968 mentions "Autonomous Mode" in the documentation context but appears less directly related to the implementation.

mguttmann · 2026-01-17T11:35:40Z

Thanks for flagging PR #7137!

Comparison of the two implementations:

Feature	PR #7137 (surma)	PR #9073 (this PR)
CLI `--dangerously-skip-permissions`	✅	✅ (+ `--yolo` alias)
Environment variable	✅	✅
TUI warning indicator	✅	✅ (Desktop "ACTIVE" badge)
CLI commands (`yolo status/enable/disable`)	❌	✅
Desktop UI (Settings → Danger Zone)	❌	✅
Config file support (`"yolo": true`)	❌	✅
Runtime API (`GET/POST /config/yolo`)	❌	✅
Session vs Permanent modes	❌	✅
Live toggle without restart	❌	✅

Summary:

PR feat: add --dangerously-skip-permissions flag #7137 is a focused CLI-only implementation
This PR (feat: YOLO Mode - Skip All Permission Prompts (CLI + Desktop) #9073) is a comprehensive implementation covering CLI + Desktop + Config + API

If PR #7137's simpler approach is preferred, the maintainers could merge that instead. However, this PR provides a more complete solution that addresses all related feature requests (#8463, #7928, #1813) with full parity between CLI and Desktop.

Happy to consolidate or adjust based on maintainer feedback!

freak4pc · 2026-01-17T11:55:32Z

This is such a needed addition IMO, thanks for pushing it!

mguttmann · 2026-01-17T18:22:14Z

~~Added ability to delete individual OAuth accounts~~

Update: This feature has been moved to PR #9069 (Multi-Account OAuth) where it logically belongs. See my comment below for details.

iljod · 2026-01-18T17:00:54Z

Added ability to delete individual OAuth accounts:
* **CLI**: `opencode auth logout` now shows account selection for multi-account providers

* **Desktop**: Delete button (X) with confirmation for each account in Provider settings

* **API**: `DELETE /auth/account` endpoint
This was a missing feature - you could add multiple accounts but couldn't remove them individually.

imo not the scope of this pr, should be a different one

mguttmann · 2026-01-18T17:08:41Z

Good catch @iljod! You're absolutely right - the delete account functionality doesn't belong in this PR.

I've moved it to PR #9069 (Multi-Account OAuth) where it logically belongs. The delete feature is needed for managing multiple OAuth accounts, not for YOLO mode.

Changes made:

Removed the delete account commit from this PR
Cherry-picked it to PR feat: Multi-Account OAuth Rotation with Settings UI and CLI Enhancements #9069
Updated both PR descriptions

This PR now focuses purely on YOLO mode functionality.

Non-network errors seen in logs: - AI_APICallError (402 deactivated_workspace) - AI_APICallError (500 server_error) - AI_LoadAPIKeyError / OpenAI API key is missing - ProviderInitError - ConfigInvalidError - ProviderAuthOauthCallbackFailed - NotFoundError - EditBuffer is destroyed

- Add getUsage() to fetch OAuth account status and health - Add fetchAnthropicUsage() to fetch Claude Max rate limits from Anthropic API - Add GET /auth/usage endpoint to expose usage data

- Add DialogAuthUsage component with rate limit visualization - Display Anthropic 5-hour and 7-day limits with progress bars - Show OAuth account status, cooldown state, and request counts - Add button in sidebar to open the dialog

- Add AuthUsageCommand to display rate limit info in terminal - Show account status, cooldown state, and request counts - Display Anthropic rate limits when available

The AI SDK's convertToModelMessages() does not accept 'step-start' as a valid UIMessagePart type. This caused AI_InvalidPromptError during session compaction. - Remove step-start from being added to UIMessage parts - Simplify the filter since step-start is no longer included - Fixes compaction breaking sessions with context overflow

Implements comprehensive multi-account OAuth support with automatic rate limit rotation, manual account switching, and a new Settings menu for the desktop app. - Add `Auth.OAuthPool.setActive()` to manually switch active OAuth account - Add `Auth.OAuthPool.snapshot()` returns `activeID` for credential selection - Update `rotating-fetch.ts` to prefer `activeID` while keeping auto-rotation - Update `fetchAnthropicUsage()` to respect `provider.active[namespace]` - Update `getAccounts()` to correctly identify active account - Add `POST /auth/active` endpoint to switch active OAuth account - Returns updated `anthropicUsage` for immediate UI updates - New `DialogSettings` component with tabbed interface - **Providers Tab**: View connected providers, add new providers with search - **Provider Detail View**: Account list, usage stats, switch functionality - **About Tab**: GitHub, docs, Discord links, keyboard shortcuts - Inline provider search without leaving settings context - Add Anthropic Rate Limits section in session context panel - Shows 5-hour, weekly (all models), weekly (sonnet) usage bars - Account switch buttons when multiple accounts configured - Only visible when current session uses Anthropic provider - `opencode auth usage`: Shows individual usage per OAuth account - `opencode auth switch`: Interactive command to switch active account - `opencode auth list`: Shows account count per provider - All provider lists now sorted alphabetically - `packages/opencode/src/auth/index.ts`: Core OAuth pool functions - `packages/opencode/src/auth/rotating-fetch.ts`: Credential selection - `packages/opencode/src/server/server.ts`: API endpoint - `packages/opencode/src/cli/cmd/auth.ts`: CLI commands - `packages/app/src/components/dialog-settings.tsx`: New settings UI - `packages/app/src/components/session/session-context-tab.tsx`: Context panel - `packages/app/src/pages/layout.tsx`: Settings button integration 1. Request uses `activeID` (manually selected or first available) 2. On 429 rate limit → account gets cooldown, moved to back 3. Next request automatically uses next available account 4. Manual switch via UI/CLI updates `provider.active[namespace]` Currently only Anthropic provides OAuth usage statistics. Other providers show multi-account switching but no usage bars. Contributions welcome for additional provider support.

- Add Auth.OAuthPool.removeRecord() to remove individual OAuth accounts - Add DELETE /auth/account API endpoint for Desktop app - Update CLI 'opencode auth logout' to select specific accounts - Add delete button with confirmation in Desktop Provider settings

- Move auth endpoints to provider routes - Add delete account functionality to dialog-auth-usage - Fix duplicate imports in layout.tsx - Fix message-v2.ts convertToModelMessages call - Regenerate SDK types

mguttmann · 2026-01-21T21:48:47Z

Rebased to latest dev

This PR has been rebased to build on top of PR #9069 (Multi-Account OAuth) and adapted to the latest upstream changes.

Changes in this update:

Rebased onto feat/multi-account-oauth-rotation-and-settings
Integrated YOLO mode with new modular permission system
Added API endpoints in config routes (/config/yolo)
Added CLI support (--yolo flag and opencode yolo subcommand)

Features:

--yolo CLI flag for single session
OPENCODE_YOLO=true environment variable
yolo: true in config.json for permanent setting
opencode yolo status/enable/disable commands
Desktop UI integration via API endpoints
Respects explicit deny rules in permission config

Depends on:

PR feat: Multi-Account OAuth Rotation with Settings UI and CLI Enhancements #9069 (Multi-Account OAuth)

Ready for review!

YOLO mode allows users to skip all permission prompts for tools and file edits. This is useful for automated workflows or when users fully trust the AI's actions. Features: - --yolo CLI flag for one session - OPENCODE_YOLO=true env var - 'yolo' config option for permanent setting - 'opencode yolo' subcommand for managing YOLO mode - API endpoints: GET/POST /config/yolo - Respects explicit 'deny' rules in permission config Warning: YOLO mode is dangerous and should be used with caution.

mguttmann · 2026-01-21T21:59:40Z

Update: Rebased onto latest dev (v1.1.30+)

Branch has been rebased onto the updated #9069 (Multi-Account OAuth).

Structure:

origin/dev
    └── #9069 Multi-Account OAuth
            └── #9073 YOLO Mode (this PR)

Features:

Skip all permission prompts with --yolo flag or OPENCODE_YOLO=1
Config option yolo: true in global config
CLI command: opencode yolo [on|off|status]
API endpoints: GET/POST /config/yolo

Files:

packages/opencode/src/yolo/index.ts - YOLO state management
packages/opencode/src/cli/cmd/yolo.ts - CLI commands
packages/opencode/src/permission/next.ts - Auto-approve integration
packages/opencode/src/server/routes/config.ts - API endpoints

Typecheck passes ✅ | Build passes ✅

Depends on #9069 being merged first.

- Add YOLO Mode section with Session Only and Always Enabled options - Use original working config.ts approach (separate config.json, no Instance.disposeAll) - Buttons are mutually exclusive as expected - Warning box and CLI usage info included

mguttmann · 2026-01-22T07:28:04Z

Closing in favor of combined PR with all features (Multi-Account, YOLO Mode, Auto-Relogin)

dlukt · 2026-01-26T12:22:35Z

Closing in favor of combined PR with all features (Multi-Account, YOLO Mode, Auto-Relogin)

Which PR?

mguttmann · 2026-01-26T22:07:47Z

@dlukt PR #9972 👉 #9972

Has all the features combined: Multi-Account OAuth, YOLO Mode, and Auto-Relogin.

mguttmann requested a review from adamdotdevin as a code owner January 17, 2026 11:30

mguttmann force-pushed the feat/yolo-mode branch from 000d521 to 96e2bab Compare January 18, 2026 17:07

mguttmann force-pushed the feat/yolo-mode branch from 96e2bab to 8a79f4f Compare January 18, 2026 17:24

gwizz and others added 15 commits January 21, 2026 22:36

feat(auth): oauth multi-account failover

dbe1884

Add OAuth credential failover with toasts

4586e63

fix(auth): improve oauth failover notifications

2036a37

Increase failover toast duration

e846fd4

Improve OAuth rotation resiliency

238066e

Add OAuth retry edge case tests

b63d520

Relax auth store updates under lock contention

103ca9f

feat(auth): add usage API endpoint with Anthropic rate limits

77e30a4

- Add getUsage() to fetch OAuth account status and health - Add fetchAnthropicUsage() to fetch Claude Max rate limits from Anthropic API - Add GET /auth/usage endpoint to expose usage data

feat(app): add auth usage dashboard dialog

7c932ab

- Add DialogAuthUsage component with rate limit visualization - Display Anthropic 5-hour and 7-day limits with progress bars - Show OAuth account status, cooldown state, and request counts - Add button in sidebar to open the dialog

feat(cli): add 'auth usage' command

11cc3b9

- Add AuthUsageCommand to display rate limit info in terminal - Show account status, cooldown state, and request counts - Display Anthropic rate limits when available

fix: adapt multi-account features to new modular settings structure

3c1140f

- Move auth endpoints to provider routes - Add delete account functionality to dialog-auth-usage - Fix duplicate imports in layout.tsx - Fix message-v2.ts convertToModelMessages call - Regenerate SDK types

mguttmann force-pushed the feat/yolo-mode branch from 229b338 to 3d4cedf Compare January 21, 2026 21:48

mguttmann mentioned this pull request Jan 21, 2026

feat(auth): Auto-Relogin via Persistent Browser Sessions #9455

Closed

Claude Agent added 3 commits January 21, 2026 22:57

fix: add missing /auth/usage endpoint for usage dashboard

39dca67

chore: regenerate SDK

9830977

mguttmann force-pushed the feat/yolo-mode branch from 3d4cedf to 835a373 Compare January 21, 2026 21:58

mguttmann mentioned this pull request Jan 21, 2026

feat: Multi-Account OAuth Rotation with Settings UI and CLI Enhancements #9069

Closed

8 tasks

This was referenced Jan 21, 2026

feat: Multi-Account OAuth Rotation with Settings UI #9068

Closed

feat: Auto-Relogin for Anthropic OAuth via Persistent Browser Sessions #9360

Closed

mguttmann closed this Jan 22, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: YOLO Mode - Skip All Permission Prompts (CLI + Desktop)#9073

feat: YOLO Mode - Skip All Permission Prompts (CLI + Desktop)#9073
mguttmann wants to merge 19 commits intoanomalyco:devfrom
mguttmann:feat/yolo-mode

mguttmann commented Jan 17, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Jan 17, 2026

Uh oh!

mguttmann commented Jan 17, 2026

Uh oh!

freak4pc commented Jan 17, 2026

Uh oh!

mguttmann commented Jan 17, 2026 •

edited

Loading

Uh oh!

iljod commented Jan 18, 2026

Uh oh!

mguttmann commented Jan 18, 2026

Uh oh!

mguttmann commented Jan 21, 2026

Uh oh!

mguttmann commented Jan 21, 2026

Uh oh!

mguttmann commented Jan 22, 2026

Uh oh!

dlukt commented Jan 26, 2026

Uh oh!

mguttmann commented Jan 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

mguttmann commented Jan 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Features

CLI Support

Desktop App Support

Config File Support

Technical Implementation

Files Changed

Testing

Related Issues

Uh oh!

github-actions bot commented Jan 17, 2026

Uh oh!

mguttmann commented Jan 17, 2026

Uh oh!

freak4pc commented Jan 17, 2026

Uh oh!

mguttmann commented Jan 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

iljod commented Jan 18, 2026

Uh oh!

mguttmann commented Jan 18, 2026

Uh oh!

mguttmann commented Jan 21, 2026

Rebased to latest dev

Changes in this update:

Features:

Depends on:

Uh oh!

mguttmann commented Jan 21, 2026

Update: Rebased onto latest dev (v1.1.30+)

Structure:

Features:

Files:

Uh oh!

mguttmann commented Jan 22, 2026

Uh oh!

dlukt commented Jan 26, 2026

Uh oh!

mguttmann commented Jan 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

mguttmann commented Jan 17, 2026 •

edited

Loading

mguttmann commented Jan 17, 2026 •

edited

Loading