Skip to main content

​
The Problem

Each agentic CLI has its own safety controls with different defaults. Without coordination, some providers work out of the box while others block on preconditions that users don’t expect:
ProviderAutonomous FlagNon-Git DirectoryOut of Box?
Claude Codeyolo=trueWorksYes
CodexfullAuto=trueBlocked by skipGitCheckNo
Gemini CLIyolo=trueWorksYes
A user switching from Claude to Codex hits a wall on the simplest task — “create a file” — with no obvious fix.

​
AgentClientMode

AgentClientMode is a portable enum that controls default permissiveness across all providers: 
public enum AgentClientMode {
    LOOSE,   // Works out of the box in any directory
    STRICT   // Requires explicit opt-in to risky operations
}
Default: LOOSE — optimized for evaluation and development, where friction during onboarding is the primary failure mode.

​
What Each Mode Does

Permissive defaults that minimize preconditions:
ProviderEffect
CodexskipGitCheck=true — works in any directory
ClaudeNo change (already permissive)
GeminiNo change (already permissive)

​
Configuration

Set the mode via Spring properties: 
agent-client:
  codex:
    mode: strict  # or loose (default)

​
Precedence Rules

Options are resolved in this order (first wins):
  1. Explicit goal options — passed at call time via AgentClient.run(goal, options)
  2. Builder defaults — set on AgentClient.builder().defaultOptions()
  3. Spring properties — provider-specific values in application.yml
  4. Mode-derived defaults — LOOSE or STRICT baseline
  5. Hardcoded defaults — built into each provider’s options class

​
STRICT Is a Baseline, Not a Lock

Explicit property overrides always take precedence over mode-derived defaults: 
agent-client:
  codex:
    mode: strict
    skip-git-check: true  # This wins — overrides STRICT's default
In this configuration, Codex gets STRICT defaults for everything except the git check, which the user explicitly enabled. This is intentional — if you set a property explicitly, you made a conscious choice.
If you set mode: strict expecting it to enforce all safety controls, audit your explicit property overrides. Any property set directly will pierce the mode.

​
SDK Layer Stays Neutral

The mode system operates at the agent-models layer, not the SDK layer. Provider SDKs (codex-cli-sdk, claude-agent-sdk, gemini-cli-sdk) always reflect their CLI’s native defaults. Direct SDK consumers are never affected by AgentClientMode. This means:
  • ExecuteOptions.builder().build() → skipGitCheck=false (Codex CLI native default)
  • CodexAgentProperties with mode=LOOSE → isSkipGitCheck() returns true (mode-derived)

​
Migration from Pre-0.14.0

Before 0.14.0, Codex defaulted to skipGitCheck=false. If you relied on this: 
# Restore pre-0.14.0 Codex behavior
agent-client:
  codex:
    mode: strict
Or override the specific property: 
agent-client:
  codex:
    skip-git-check: false