Driving Your Local Coding Agent From Lark

Around twenty slash commands cover changing directory, saving workspaces, status and reconnecting. The permission tiers map concretely: full becomes bypassPermissions or full access, workspace becomes accept-edits or workspace-write, read-only becomes plan or read-only mode. Two defaults to know: a new profile starts at full, and the working directory is not a sandbox — it is the agent's cwd, and what it can touch depends on the local process. Access control is private by default; messages from strangers are dropped silently.