Files & permissions

Axom can read, write, and run things in your project, and it asks first.

Defaults

Tool	By default
Read, Glob, Grep	Free inside the project; asks outside it
Write	Asks, and shows you the file
Edit	Asks, and shows you the diff
Bash	Read-only commands run; everything else asks, keyed by command (git commit, npm test…)

When Axom asks, answer:

• y: allow once
• a: always, for this project
• n: deny

Your "always" answers are saved per project in <project>/.axom/permissions.json. A permission request left unanswered for five minutes is a deny, never a silent allow.

Per-tool settings

Each tool can be set per project to default, allow (never ask), ask (ask every time), or off (refused, and Axom is told it's off).

Auto mode

/auto (or axom --auto) stops asking for the rest of the session; /ask turns asking back on. Even in auto mode, destructive commands such as rm -rf / are never run. They're never offered for approval at all.