Settings Reference

Open Settings with ⌘,. It has four tabs — LLM, Terminal, Security, and Privacy — plus a footer with Reset to Defaults and Apply.

Apply vs. immediate: most LLM and Terminal changes take effect when you press Apply. A few controls apply immediately because they change the live safety gate or session behavior: host profiles, policy packs, the "restore last session" toggle, and the cloud-context picker. Each section below notes which is which.

LLM tab

Controls your active AI connection and model. See AI Providers and Models for full per-provider setup.

• AI Provider — a grid of connection tiles (managed local, native cloud, OpenAI-compatible, custom, CLI subscriptions). Selecting a Pro provider while Free prompts an upgrade.
• Set Up AI… — re-runs the guided setup wizard.
• New custom server… — adds your own OpenAI-compatible endpoint (URL + key).
• System Prompt — a multi-line editor with Reset to Default.
• Server status — for remote/custom providers: Health (with Refresh) and the Endpoint URL.

Per-provider configuration appears inline for the selected provider:

• Local AI Engine panel for Ollama — Health (with Refresh), Endpoint (with Copy), Version, Models path (with Reveal in Finder), and Reinstall Engine… (keeps your installed models).
• Azure OpenAI — Name, Resource, Deployment, API version (default 2024-10-21), API key, and a Save that stays disabled until resource, deployment, and key are filled.
• Amazon Bedrock — Name, Region, a Credentials picker ("Use an AWS profile" / "Paste access keys"), the matching credential fields, and a Model / profile id field.
• Managed MLX — current Model plus Choose model….
• Claude Code / Codex CLI — nothing to configure; a Sign in / switch account action opens a tab and runs the CLI's own login.
• OpenAI / Anthropic / OpenAI-compatible — API key, an optional preset and base URL, Save key & load models, and a Model picker.

Apply-gated LLM changes take effect on Apply. Provider setup sheets save immediately through their own Save button.

Terminal tab

• Default Shell — /bin/zsh, /bin/bash, /bin/sh, or /bin/fish.
• Theme — Dark, Light, Solarized Dark, Solarized Light, or Ocean.
• Font Size — a slider from 8 to 24 pt. This also responds live to the ⌘+ / ⌘− / ⌘0 View shortcuts.
• Restore last session on launch — reopen your tabs, splits, and directories next time. Applies immediately.
• Software Update — shows the current version, an Automatically install updates toggle (off by default: you get a gentle "Update ready" badge instead), and Check for Updates…. See Updating and Uninstalling.

Security tab

Controls the gate and its tightening layers. See Safety and Security and Remote Commands.

• Enforce Security Restrictions — the master switch for command checks.
• Start in Dry Run Mode — commands are shown but not executed by default.
• Confirm High-Risk Commands — require confirmation for high-risk commands (needs Enforce on).
• Allow Critical Commands (with confirmation) — allow the most severe Dangerous commands only after explicit confirmation (needs Enforce and Confirm High-Risk on). The help text labels this "EXTREMELY DANGEROUS" for good reason.
• Per-host SSH profiles (Pro) — map a host pattern (e.g. prod-*) to a safety floor, a pane tint, and a label. Includes an Add prod-* template button. Free users can view and delete profiles but not author them.
• Policy pack (import free · author Pro) — Import a pack… to add a floor, host rules, and deny/ask patterns; authoring, adding rules, and exporting are Pro. Deleting a pack or a rule is always allowed.

The four toggles apply on Apply; host profiles and policy-pack edits apply immediately (they change the live gate).

Privacy tab

See Privacy and Data Handling.

• Where your data goes — three information rows: on-device by default, your keys stay in the Keychain, and a clear on-device-vs-cloud badge for every request.
• Redacted before any cloud request — the list of secret categories scrubbed before a cloud send.
• Session context sent to cloud models — a picker: Recent commands + output, Recent commands only (default), or Nothing. This caps only what a cloud model receives; local models always get full context. Applies immediately.

Footer

• Reset to Defaults — resets settings. If host profiles or a policy pack are active, it asks first (they're removed immediately; other fields still wait for Apply).
• Apply — saves the Apply-gated changes. A brief "Applied" confirmation appears.

Related pages: AI Providers and Models, Safety and Security, Privacy and Data Handling.