Haruno Knowledge base

Advanced settings

The settings that only appear once the advanced view is on in the Windows app. The Advanced tab with the sandbox's state, Web Fetch and the starting permission mode, plus the extra controls in General and Connectors.

  • Mac appAvailableOnly in the advanced view.
  • Windows appAvailableOnly in the advanced view.

Some settings are hidden until you switch on the advanced view. Turn it on with Advanced view on the General tab. The extra settings are spread over three places. This page lists them all.

The Advanced tab appears next to Shortcuts once the advanced view is on.
The Settings tabs in the advanced view: General, Connectors, Shortcuts and Advanced, with a spanner icon on Advanced.The Settings tabs in the advanced view: General, Connectors, Shortcuts and Advanced, with a spanner icon on Advanced.
Turning it off hides settings, it does not undo them

Whatever you set in the advanced view keeps applying after you switch back to the normal view. The normal view only hides the controls. If you are on the Advanced tab when you switch the view off, Haruno returns you to General.

The Advanced tab

Sandbox

Secure engine sandbox shows the state of the isolated space Haruno works in, so a task cannot reach beyond the folders it was given. It is a status card. It has no switch, because the sandbox is always on.

  • The card says Always on. Every session runs in the protected sandbox.
  • Under it, Haruno says whether the sandbox can run on this PC, and that Generic network access is blocked.
  • If the sandbox cannot run on this PC, the row says why, for example that the sandbox runtime is not installed and Haruno should be reinstalled or updated.
  • The normal view runs in the same sandbox. It does not show this card, because it does not show the Advanced tab.
  • Older versions had a switch here. Someone who had turned it off sees a one-time note at the top of Settings. See The sandbox.

Allow Web Fetch without asking

When this is on, Haruno can open and read a specific public web page without showing an approval card first. Turn it off to be asked before Haruno fetches a site it does not already trust.

Default permission mode

This sets how Haruno handles actions that need your approval when a new chat starts. The choices are Default, Accept Edits, Plan, Auto and Bypass.

ModeWhat it means
DefaultHaruno asks before actions that need approval.
Accept EditsFile edits and simple file commands go ahead without asking. Other actions still ask.
PlanHaruno works out a plan before changing anything, and you approve, change or reject it.
AutoHaruno decides which actions are safe to run without asking.
BypassActions go ahead without asking, except tools you set to Confirm and a few safety checks.

The permission button above the message box in Chat changes the mode for that chat. Picking a mode there also changes this starting mode, so the mode you used last is the one the next chat starts in.

Bypass is for folders you trust

Use Bypass only in a folder you are happy for Haruno to change freely. Scheduled tasks never use it.

Extra controls in General

On the General tab, the advanced view adds Use memory. It lets Haruno remember lasting preferences and details across chats. Turn it off if you want every chat to start fresh. It is on by default, and the saved choice applies in both views.

Extra controls in Connectors

On the Connectors tab, the advanced view adds:

  • Tool policies. Open a connector and expand its tools to set each one to On, Off or Confirm. On means Haruno uses the tool without asking. Off means it is not available. Confirm means Haruno asks every time, even in Auto mode.
  • Rules. In a connector's Rules section, Add rule picks a hook and the event that starts it. The rules are set up here, and they keep running in the normal view.
  • What the browser may do in the Agent browser section: the same three choices for the browser's actions.
  • Custom MCP servers. A way to connect your own remote tool servers to give Haruno extra tools. The section is called Custom MCP servers and has an Add server button.
Custom tool servers and the sandbox

Custom MCP servers work in the sandbox. Haruno reaches each server for the session, and keeps its address, header and sign-in on the PC. A server that cannot be used says why on its row. See Adding your own connector.

What is not in a customer's Settings

A few controls exist only in test builds and never reach customers: typing in an API key by hand, choosing an update channel, and a Feature flags section for experiments. If someone describes seeing them, they are on a developer build.

What to tell a customer

  • Most finance users never need this. The normal view is the same assistant with fewer controls.
  • Both views always run in the isolated space. The normal view also always uses Auto. Whoever turns on the advanced view takes on the choice of how much Haruno may do without asking.

Last updated · PR #2944 · View this version on GitHub

History (1 version)
  1. Internal knowledge base for staff: site, reader keys, assistant, 197 pages and the PR rule (#2944)
    PR #2944Commit a2a7836The page at this version
    What changed
    @@ -0,0 +1,76 @@
+---
+title: Advanced settings
+summary: The settings that only appear once the advanced view is on in the Windows app. The Advanced tab with the sandbox's state, Web Fetch and the starting permission mode, plus the extra controls in General and Connectors.
+feature: settings-advanced
+covers:
+  - windows-client/haruno-webview/web/src/pages/SettingsPage.tsx
+  - windows-client/haruno-client/BuildConfiguration.cs
+---
+
+Some settings are hidden until you switch on the advanced view. Turn it on with **Advanced view** on the **General** tab. The extra settings are spread over three places. This page lists them all.
+
+<Shot src="/m/6f3d0eecda90-windows-app-view-tabs-advanced-light.png" dark="/m/1241b7919e7c-windows-app-view-tabs-advanced-dark.png" alt="The Settings tabs in the advanced view: General, Connectors, Shortcuts and Advanced, with a spanner icon on Advanced." caption="The Advanced tab appears next to Shortcuts once the advanced view is on." />
+
+<Callout variant="info" title="Turning it off hides settings, it does not undo them">
+Whatever you set in the advanced view keeps applying after you switch back to the normal view. The normal view only hides the controls. If you are on the **Advanced** tab when you switch the view off, Haruno returns you to **General**.
+</Callout>
+
+## The Advanced tab
+
+### Sandbox
+
+<Ui>Secure engine sandbox</Ui> shows the state of the isolated space Haruno works in, so a task cannot reach beyond the folders it was given. It is a status card. It has no switch, because the sandbox is always on.
+
+- The card says **Always on. Every session runs in the protected sandbox.**
+- Under it, Haruno says whether the sandbox can run on this PC, and that **Generic network access is blocked.**
+- If the sandbox cannot run on this PC, the row says why, for example that the sandbox runtime is not installed and Haruno should be reinstalled or updated.
+- The normal view runs in the same sandbox. It does not show this card, because it does not show the Advanced tab.
+- Older versions had a switch here. Someone who had turned it off sees a one-time note at the top of Settings. See [The sandbox](/windows/safety/sandbox/).
+
+### Allow Web Fetch without asking
+
+When this is on, Haruno can open and read a specific public web page without showing an approval card first. Turn it off to be asked before Haruno fetches a site it does not already trust.
+
+### Default permission mode
+
+This sets how Haruno handles actions that need your approval when a **new chat** starts. The choices are **Default**, **Accept Edits**, **Plan**, **Auto** and **Bypass**.
+
+| Mode | What it means |
+|---|---|
+| **Default** | Haruno asks before actions that need approval. |
+| **Accept Edits** | File edits and simple file commands go ahead without asking. Other actions still ask. |
+| **Plan** | Haruno works out a plan before changing anything, and you approve, change or reject it. |
+| **Auto** | Haruno decides which actions are safe to run without asking. |
+| **Bypass** | Actions go ahead without asking, except tools you set to **Confirm** and a few safety checks. |
+
+The permission button above the message box in Chat changes the mode for that chat. Picking a mode there also changes this starting mode, so the mode you used last is the one the next chat starts in.
+
+<Callout variant="warning" title="Bypass is for folders you trust">
+Use **Bypass** only in a folder you are happy for Haruno to change freely. Scheduled tasks never use it.
+</Callout>
+
+## Extra controls in General
+
+On the **General** tab, the advanced view adds **Use memory**. It lets Haruno remember lasting preferences and details across chats. Turn it off if you want every chat to start fresh. It is on by default, and the saved choice applies in both views.
+
+## Extra controls in Connectors
+
+On the **Connectors** tab, the advanced view adds:
+
+- **Tool policies.** Open a connector and expand its tools to set each one to **On**, **Off** or **Confirm**. **On** means Haruno uses the tool without asking. **Off** means it is not available. **Confirm** means Haruno asks every time, even in **Auto** mode.
+- **Rules.** In a connector's **Rules** section, **Add rule** picks a hook and the event that starts it. The rules are set up here, and they keep running in the normal view.
+- **What the browser may do** in the **Agent browser** section: the same three choices for the browser's actions.
+- **Custom MCP servers.** A way to connect your own remote tool servers to give Haruno extra tools. The section is called **Custom MCP servers** and has an **Add server** button.
+
+<Callout variant="info" title="Custom tool servers and the sandbox">
+Custom MCP servers work in the sandbox. Haruno reaches each server for the session, and keeps its address, header and sign-in on the PC. A server that cannot be used says why on its row. See [Adding your own connector](/windows/connectors/custom-connectors/).
+</Callout>
+
+## What is not in a customer's Settings
+
+A few controls exist only in test builds and never reach customers: typing in an API key by hand, choosing an update channel, and a **Feature flags** section for experiments. If someone describes seeing them, they are on a developer build.
+
+## What to tell a customer
+
+- Most finance users never need this. The normal view is the same assistant with fewer controls.
+- Both views always run in the isolated space. The normal view also always uses **Auto**. Whoever turns on the advanced view takes on the choice of how much Haruno may do without asking.