diff --git a/apps/buddy/electron/main/config/LexoraConfigStore.ts b/apps/buddy/electron/main/config/LexoraConfigStore.ts
index 0babe06d..4edddcaf 100644
--- a/apps/buddy/electron/main/config/LexoraConfigStore.ts
+++ b/apps/buddy/electron/main/config/LexoraConfigStore.ts
@@ -12,6 +12,7 @@ import { Emitter } from '../../../shared/events/Emitter'
 import { copyEventSnapshot } from '../../../shared/events/eventSnapshot'
 import { extensionAuthorSchema } from '../../../shared/extensions/extensionIdentity'
 import { DEFAULT_PROXY_SETTINGS, proxySettingsSchema } from '../../../shared/network/proxySettings'
+import { BUDDY_PERMISSION_MODES } from '../../../shared/permissions/permissionMode'
 import { DEFAULT_RUNTIME_PREFERENCES, runtimePreferencesSchema } from '../../../shared/runtime/runtimePreferences'
 import { keybindingsSchema } from '../../../shared/shortcuts/keybindingSchema'
 import { DEFAULT_DESKTOP_CHAT_PREFERENCES, DESKTOP_CHAT_OUTLINE_POSITIONS, DESKTOP_CHAT_WELCOME_VARIANT_IDS, DESKTOP_PROFILE_AVATAR_MAX_DATA_URL_LENGTH, DESKTOP_TASK_SIDEBAR_SECTIONS } from '../../shared/desktopApi'
@@ -43,6 +44,7 @@ const desktopConfigSchema = z.object({
   background_close_notice_shown: z.boolean().default(false),
   chat: z.object({
     outline_position: z.enum(DESKTOP_CHAT_OUTLINE_POSITIONS).default(DEFAULT_DESKTOP_CHAT_PREFERENCES.outlinePosition),
+    permission_mode: z.enum(BUDDY_PERMISSION_MODES).default(DEFAULT_DESKTOP_CHAT_PREFERENCES.permissionMode),
     welcome: z.enum(['none', 'random', ...DESKTOP_CHAT_WELCOME_VARIANT_IDS]).default(DEFAULT_DESKTOP_CHAT_PREFERENCES.welcome),
   }).passthrough().prefault({}),
   context_panel_mode: z.enum(['task', 'independent']).default('task'),
@@ -74,6 +76,7 @@ const desktopConfigSchema = z.object({
   plugin_author: '',
   chat: {
     outline_position: DEFAULT_DESKTOP_CHAT_PREFERENCES.outlinePosition,
+    permission_mode: DEFAULT_DESKTOP_CHAT_PREFERENCES.permissionMode,
     welcome: DEFAULT_DESKTOP_CHAT_PREFERENCES.welcome,
   },
   context_panel_mode: 'task',
@@ -288,6 +291,7 @@ function decodeConfig(value: unknown): LexoraConfig {
       pluginAuthor: config.desktop.plugin_author,
       chat: {
         outlinePosition: config.desktop.chat.outline_position,
+        permissionMode: config.desktop.chat.permission_mode,
         welcome: config.desktop.chat.welcome,
       },
       contextPanelMode: config.desktop.context_panel_mode,
@@ -337,6 +341,7 @@ function encodeConfig(config: LexoraConfig) {
       plugin_author: config.desktop.pluginAuthor,
       chat: {
         outline_position: config.desktop.chat.outlinePosition,
+        permission_mode: config.desktop.chat.permissionMode,
         welcome: config.desktop.chat.welcome,
       },
       context_panel_mode: config.desktop.contextPanelMode,
@@ -382,6 +387,9 @@ function mergeConfig(current: LexoraConfig, patch: LexoraConfigPatch): LexoraCon
       chat: {
         ...current.desktop.chat,
         ...patch.desktop?.chat,
+        permissionMode: z.enum(BUDDY_PERMISSION_MODES).parse(
+          patch.desktop?.chat?.permissionMode ?? current.desktop.chat.permissionMode,
+        ),
       },
       keybindings: keybindingsSchema.parse(patch.desktop?.keybindings ?? current.desktop.keybindings),
       taskSidebar: {
diff --git a/apps/buddy/electron/main/config/__tests__/LexoraConfigStore.spec.ts b/apps/buddy/electron/main/config/__tests__/LexoraConfigStore.spec.ts
index a5ee839b..558af4b4 100644
--- a/apps/buddy/electron/main/config/__tests__/LexoraConfigStore.spec.ts
+++ b/apps/buddy/electron/main/config/__tests__/LexoraConfigStore.spec.ts
@@ -39,19 +39,37 @@ describe('lexoraConfigStore', () => {
     await mkdir(dirname(configPath), { recursive: true })
     await writeFile(configPath, '[desktop]\ntheme = "dark"\nwelcome_variant = "writing"\n[custom]\nkeep = true\n')
     const original = await store.read()
-    expect(original.desktop.chat).toEqual({ outlinePosition: 'top-right', welcome: 'random' })
+    expect(original.desktop.chat).toEqual({ outlinePosition: 'top-right', permissionMode: 'policy_approval', welcome: 'random' })
     await store.update({ desktop: { chat: { welcome: 'none' } } })
     for (const outlinePosition of DESKTOP_CHAT_OUTLINE_POSITIONS) {
       await store.update({ desktop: { chat: { outlinePosition } } })
       const restored = await new LexoraConfigStore({ configPath }).read()
       expect(restored).toEqual({
         ...original,
-        desktop: { ...original.desktop, chat: { outlinePosition, welcome: 'none' } },
+        desktop: { ...original.desktop, chat: { outlinePosition, permissionMode: 'policy_approval', welcome: 'none' } },
       })
       expect(await readFile(configPath, 'utf8')).toContain('keep = true')
     }
   })
 
+  it('persists permission mode, defaults legacy profiles, and rejects invalid values without a partial write', async () => {
+    const { configPath, store } = await createConfigStore()
+    await mkdir(dirname(configPath), { recursive: true })
+    await writeFile(configPath, '[desktop.chat]\nwelcome = "random"\n')
+    expect((await store.read()).desktop.chat.permissionMode).toBe('policy_approval')
+
+    await store.update({ desktop: { chat: { permissionMode: 'full_access' } } })
+    expect(await readFile(configPath, 'utf8')).toContain('permission_mode = "full_access"')
+    expect((await new LexoraConfigStore({ configPath }).read()).desktop.chat.permissionMode).toBe('full_access')
+
+    const saved = await readFile(configPath, 'utf8')
+    await expect(store.update({ desktop: { chat: { permissionMode: 'invalid' as never } } })).rejects.toThrow()
+    expect(await readFile(configPath, 'utf8')).toBe(saved)
+
+    await writeFile(configPath, '[desktop.chat]\npermission_mode = "invalid"\n')
+    await expect(store.read()).rejects.toThrow()
+  })
+
   it('migrates browser preferences with defaults and preserves unrelated settings across updates', async () => {
     const { configPath, store } = await createConfigStore()
     await mkdir(dirname(configPath), { recursive: true })
@@ -139,7 +157,7 @@ describe('lexoraConfigStore', () => {
   it('updates only requested settings and writes a private TOML file atomically', async () => {
     const { configPath, store } = await createConfigStore()
     await expect(store.read()).resolves.toMatchObject({
-      desktop: { theme: 'system', chat: { outlinePosition: 'top-right', welcome: 'random' } },
+      desktop: { theme: 'system', chat: { outlinePosition: 'top-right', permissionMode: 'policy_approval', welcome: 'random' } },
       pet: { alwaysOnTop: true, enabled: true, rememberPosition: true },
     })
 
@@ -157,7 +175,7 @@ describe('lexoraConfigStore', () => {
       keybindings: {},
       backgroundCloseNoticeShown: false,
       pluginAuthor: '',
-      chat: { outlinePosition: 'top-right', welcome: 'writing' },
+      chat: { outlinePosition: 'top-right', permissionMode: 'policy_approval', welcome: 'writing' },
       taskSidebarPinnedItems: [],
       taskSidebar: {
         collapsed: false,
@@ -300,7 +318,7 @@ describe('lexoraConfigStore', () => {
     await writeFile(configPath, '[desktop.chat]\nwelcome = "none"\nfuture = true\n')
 
     await expect(store.read()).resolves.toMatchObject({
-      desktop: { chat: { outlinePosition: 'top-right', welcome: 'none' } },
+      desktop: { chat: { outlinePosition: 'top-right', permissionMode: 'policy_approval', welcome: 'none' } },
     })
 
     await store.update({ desktop: { theme: 'dark' } })
diff --git a/apps/buddy/electron/shared/__tests__/desktopApi.spec.ts b/apps/buddy/electron/shared/__tests__/desktopApi.spec.ts
index 48ac7c7e..860f1d04 100644
--- a/apps/buddy/electron/shared/__tests__/desktopApi.spec.ts
+++ b/apps/buddy/electron/shared/__tests__/desktopApi.spec.ts
@@ -5,8 +5,9 @@ import { feedbackIssueInputSchema, lexoraConfigPatchSchema, releasePageInputSche
 describe('desktop Preload API contract', () => {
   it('rejects unknown outline positions before updating the application configuration', () => {
     expect(() => lexoraConfigPatchSchema.parse({ desktop: { chat: { outlinePosition: 'center' } } })).toThrow()
-    expect(lexoraConfigPatchSchema.parse({ desktop: { chat: { outlinePosition: 'bottom-left', welcome: 'none' } } }))
-      .toEqual({ desktop: { chat: { outlinePosition: 'bottom-left', welcome: 'none' } } })
+    expect(lexoraConfigPatchSchema.parse({ desktop: { chat: { outlinePosition: 'bottom-left', permissionMode: 'full_access', welcome: 'none' } } }))
+      .toEqual({ desktop: { chat: { outlinePosition: 'bottom-left', permissionMode: 'full_access', welcome: 'none' } } })
+    expect(() => lexoraConfigPatchSchema.parse({ desktop: { chat: { permissionMode: 'invalid' } } })).toThrow()
   })
 
   it('accepts release pages from the canonical repository', () => {
diff --git a/apps/buddy/electron/shared/desktopApi.ts b/apps/buddy/electron/shared/desktopApi.ts
index 84cc6d27..fc5153e4 100644
--- a/apps/buddy/electron/shared/desktopApi.ts
+++ b/apps/buddy/electron/shared/desktopApi.ts
@@ -8,6 +8,7 @@ import type { BuddyCapabilities } from '../../shared/platform'
 import type { BuddyRuntimeProfile } from '../../shared/runtime/profile'
 import type { DesktopCommandId, DesktopPlatform } from './desktopCommands'
 import type { LocalChatApi } from './localChatApi'
+import { BUDDY_DEFAULT_PERMISSION_MODE } from '../../shared/permissions/permissionMode'
 
 export const DESKTOP_IPC_CHANNELS = {
   workbenchRead: 'lexora:workbench:read',
@@ -148,11 +149,13 @@ export type DesktopChatOutlinePosition = typeof DESKTOP_CHAT_OUTLINE_POSITIONS[n
 
 export interface DesktopChatPreferences {
   outlinePosition: DesktopChatOutlinePosition
+  permissionMode: import('../../shared/permissions/permissionMode').BuddyPermissionMode
   welcome: DesktopChatWelcomePreference
 }
 
 export const DEFAULT_DESKTOP_CHAT_PREFERENCES: Readonly<DesktopChatPreferences> = {
   outlinePosition: 'top-right',
+  permissionMode: BUDDY_DEFAULT_PERMISSION_MODE,
   welcome: 'random',
 }
 
diff --git a/apps/buddy/electron/shared/desktopApiSchemas.ts b/apps/buddy/electron/shared/desktopApiSchemas.ts
index 14bb8be9..25556ca8 100644
--- a/apps/buddy/electron/shared/desktopApiSchemas.ts
+++ b/apps/buddy/electron/shared/desktopApiSchemas.ts
@@ -3,6 +3,7 @@ import { z } from 'zod'
 import { browserPreferencesSchema } from '../../shared/browser/browserPreferences'
 import { extensionAuthorSchema } from '../../shared/extensions/extensionIdentity'
 import { proxySettingsSchema } from '../../shared/network/proxySettings'
+import { BUDDY_PERMISSION_MODES } from '../../shared/permissions/permissionMode'
 import { runtimePreferencesSchema } from '../../shared/runtime/runtimePreferences'
 import { keybindingsSchema } from '../../shared/shortcuts/keybindingSchema'
 import {
@@ -65,6 +66,7 @@ export const lexoraConfigPatchSchema: z.ZodType<LexoraConfigPatch> = z.object({
     backgroundCloseNoticeShown: z.boolean().optional(),
     chat: z.object({
       outlinePosition: z.enum(DESKTOP_CHAT_OUTLINE_POSITIONS).optional(),
+      permissionMode: z.enum(BUDDY_PERMISSION_MODES).optional(),
       welcome: z.enum(['none', 'random', ...DESKTOP_CHAT_WELCOME_VARIANT_IDS]).optional(),
     }).strict().optional(),
     contextPanelMode: z.enum(['task', 'independent']).optional(),
diff --git a/apps/buddy/shared/permissions/permissionMode.ts b/apps/buddy/shared/permissions/permissionMode.ts
index e5e958dc..732afeb4 100644
--- a/apps/buddy/shared/permissions/permissionMode.ts
+++ b/apps/buddy/shared/permissions/permissionMode.ts
@@ -10,6 +10,8 @@ export const BUDDY_PERMISSION_MODES = [
 
 export type BuddyPermissionMode = typeof BUDDY_PERMISSION_MODES[number]
 
+export const BUDDY_DEFAULT_PERMISSION_MODE: BuddyPermissionMode = 'policy_approval'
+
 export interface BuddyPermissionSettings {
   approvalPolicy: BuddyApprovalPolicy
   executionProfile: BuddyExecutionProfile
diff --git a/apps/buddy/src/i18n/locales/en-US/settings.ts b/apps/buddy/src/i18n/locales/en-US/settings.ts
index 2cdbcff8..16d547c0 100644
--- a/apps/buddy/src/i18n/locales/en-US/settings.ts
+++ b/apps/buddy/src/i18n/locales/en-US/settings.ts
@@ -2,7 +2,14 @@ import type zhCN from '../zh-CN/settings'
 
 export default {
   'desktop.settings.category.runtime': 'Runtime',
-  'desktop.settings.categoryDescription.runtime': 'Manage context and model request behavior.',
+  'desktop.settings.categoryDescription.runtime': 'Manage permissions for new tasks, context, and model request behavior.',
+  'desktop.settings.runtime.taskPermissions': 'Task permissions',
+  'desktop.settings.runtime.defaultPermissionMode': 'New task permissions',
+  'desktop.settings.runtime.defaultPermissionModeDescription': 'New tasks start with the selected permissions. Existing tasks, including unsent drafts, keep their current settings.',
+  'desktop.settings.runtime.fullAccessDefaultTitle': 'Use full access by default for new tasks?',
+  'desktop.settings.runtime.fullAccessDefaultDescription': 'New tasks will start with local access to your files, credentials, and network. The sandbox cannot restrict what arbitrary commands do; some sensitive operations will still ask for confirmation.',
+  'desktop.settings.runtime.fullAccessDefaultAcknowledgement': 'I understand that full access will apply to every new task by default',
+  'desktop.settings.runtime.fullAccessDefaultConfirm': 'Use as default',
   'desktop.settings.runtime.context': 'Context',
   'desktop.settings.runtime.cacheWarming': 'Cache warming',
   'desktop.settings.runtime.cacheWarmingDescription': 'Maintain prompt caches during active tasks when the model supports it and the expected benefit covers the cost. Additional usage is included in usage reports. Stops when the task ends.',
diff --git a/apps/buddy/src/i18n/locales/zh-CN/settings.ts b/apps/buddy/src/i18n/locales/zh-CN/settings.ts
index d2f3ac4b..3baeea11 100644
--- a/apps/buddy/src/i18n/locales/zh-CN/settings.ts
+++ b/apps/buddy/src/i18n/locales/zh-CN/settings.ts
@@ -1,6 +1,13 @@
 export default {
   'desktop.settings.category.runtime': '运行时',
-  'desktop.settings.categoryDescription.runtime': '管理上下文与模型调用策略。',
+  'desktop.settings.categoryDescription.runtime': '管理新任务权限、上下文与模型调用策略。',
+  'desktop.settings.runtime.taskPermissions': '任务权限',
+  'desktop.settings.runtime.defaultPermissionMode': '新任务权限',
+  'desktop.settings.runtime.defaultPermissionModeDescription': '新建任务时使用所选权限；已有任务（包括未发送的草稿）保持当前设置。',
+  'desktop.settings.runtime.fullAccessDefaultTitle': '将完全访问设为新任务默认权限？',
+  'desktop.settings.runtime.fullAccessDefaultDescription': '之后新建的任务将默认以你的本机权限访问文件、凭据和网络。任意命令的实际行为无法由沙盒限制；部分敏感操作仍会请求确认。',
+  'desktop.settings.runtime.fullAccessDefaultAcknowledgement': '我已了解完全访问会默认应用于每个新任务',
+  'desktop.settings.runtime.fullAccessDefaultConfirm': '设为默认权限',
   'desktop.settings.runtime.context': '上下文',
   'desktop.settings.runtime.cacheWarming': '缓存预热',
   'desktop.settings.runtime.cacheWarmingDescription': '任务执行期间按需维护模型的提示词缓存，仅在支持的模型上且预计有收益时执行。会产生额外用量，计入使用情况；任务结束后停止。',
diff --git a/apps/buddy/src/modules/prompt-input/components/DesktopFullAccessConfirmationDialog.vue b/apps/buddy/src/modules/prompt-input/components/DesktopFullAccessConfirmationDialog.vue
index a2a78553..2601fe78 100644
--- a/apps/buddy/src/modules/prompt-input/components/DesktopFullAccessConfirmationDialog.vue
+++ b/apps/buddy/src/modules/prompt-input/components/DesktopFullAccessConfirmationDialog.vue
@@ -1,63 +1,66 @@
 <script setup lang="ts">
-import type { BuddyLocale } from '@/i18n/buddyI18n'
 import { NButton, NCheckbox, NModal } from 'naive-ui'
 import { shallowRef, watch } from 'vue'
-import { useBuddyI18n } from '@/i18n/buddyI18n'
 
-const props = defineProps<{
-  language: BuddyLocale
-  show: boolean
-}>()
+interface FullAccessConfirmationText {
+  acknowledgement: string
+  cancelLabel: string
+  confirmLabel: string
+  description: string
+  title: string
+}
 
+defineProps<{
+  text: FullAccessConfirmationText
+}>()
 const emit = defineEmits<{
-  cancel: []
   confirm: []
 }>()
-
+const show = defineModel<boolean>('show', { required: true })
 const acknowledged = shallowRef(false)
-const { t } = useBuddyI18n(() => props.language)
 
-watch(() => props.show, (show) => {
-  if (show)
+watch(show, (open) => {
+  if (open)
     acknowledged.value = false
 })
 
 function cancel() {
-  emit('cancel')
+  show.value = false
 }
 
 function confirm() {
-  if (acknowledged.value)
-    emit('confirm')
+  if (!acknowledged.value)
+    return
+  show.value = false
+  emit('confirm')
 }
 </script>
 
 <template>
   <NModal
-    :show="show"
+    v-model:show="show"
     preset="dialog"
     type="error"
     class="desktop-full-access-confirmation"
     :style="{ width: 'min(25rem, calc(100vw - 2rem))' }"
     :closable="false"
     :mask-closable="false"
-    :title="t('desktop.chat.executionProfileFullConfirmTitle')"
-    @update:show="!$event && cancel()"
+    :title="text.title"
   >
     <p class="desktop-full-access-confirmation__description">
-      {{ t('desktop.chat.executionProfileFullConfirmDescription') }}
+      {{ text.description }}
     </p>
     <NCheckbox v-model:checked="acknowledged" class="desktop-full-access-confirmation__acknowledgement">
-      {{ t('desktop.chat.executionProfileFullConfirmAcknowledgement') }}
+      {{ text.acknowledgement }}
     </NCheckbox>
 
     <template #action>
       <div class="desktop-full-access-confirmation__actions">
         <NButton @click="cancel">
-          {{ t('common.cancel') }}
+          {{ text.cancelLabel }}
         </NButton>
         <NButton type="error" :disabled="!acknowledged" @click="confirm">
-          {{ t('desktop.chat.executionProfileAllowFull') }}
+          {{ text.confirmLabel }}
         </NButton>
       </div>
     </template>
diff --git a/apps/buddy/src/modules/prompt-input/components/DesktopPermissionModeSelector.vue b/apps/buddy/src/modules/prompt-input/components/DesktopPermissionModeSelector.vue
index c603644d..c7cb0b49 100644
--- a/apps/buddy/src/modules/prompt-input/components/DesktopPermissionModeSelector.vue
+++ b/apps/buddy/src/modules/prompt-input/components/DesktopPermissionModeSelector.vue
@@ -62,6 +62,13 @@ const permissionOptions = [
 ] as const
 
 const { t } = useBuddyI18n(() => props.language)
+const fullAccessConfirmationText = computed(() => ({
+  acknowledgement: t('desktop.chat.executionProfileFullConfirmAcknowledgement'),
+  cancelLabel: t('common.cancel'),
+  confirmLabel: t('desktop.chat.executionProfileAllowFull'),
+  description: t('desktop.chat.executionProfileFullConfirmDescription'),
+  title: t('desktop.chat.executionProfileFullConfirmTitle'),
+}))
 const isBackground = computed(() => props.sessionMode === 'automation_background')
 const availableOptions = computed(() => permissionOptions.filter(
   option => !isBackground.value || option.value !== 'manual_approval',
@@ -92,7 +99,6 @@ function selectMode(value: BuddyPermissionMode) {
 }
 
 function confirmFullAccess() {
-  confirmationOpen.value = false
   emit('updatePermissionMode', 'full_access')
 }
 
@@ -196,9 +202,8 @@ async function confirmSetup() {
   </NPopover>
 
   <DesktopFullAccessConfirmationDialog
-    :language="language"
-    :show="confirmationOpen"
-    @cancel="confirmationOpen = false"
+    v-model:show="confirmationOpen"
+    :text="fullAccessConfirmationText"
     @confirm="confirmFullAccess"
   />
 
diff --git a/apps/buddy/src/modules/prompt-input/ui.ts b/apps/buddy/src/modules/prompt-input/ui.ts
index c7296015..f00c8a7d 100644
--- a/apps/buddy/src/modules/prompt-input/ui.ts
+++ b/apps/buddy/src/modules/prompt-input/ui.ts
@@ -1,3 +1,4 @@
 export { default as DesktopChatComposerFrame } from './components/DesktopChatComposerFrame.vue'
+export { default as DesktopFullAccessConfirmationDialog } from './components/DesktopFullAccessConfirmationDialog.vue'
 export { default as DesktopPermissionModeSelector } from './components/DesktopPermissionModeSelector.vue'
 export { ChatComposerDocument, ChatComposerPromptDirective, ChatComposerResourceClipboard, ChatComposerResourceReference, insertChatComposerResources, insertResolvedChatComposerResource, moveChatComposerResourceSelection, removeChatComposerPanelResource, removeChatComposerResource, setChatComposerPanelResources } from './editor/chatComposerResourceEditing'
diff --git a/apps/buddy/src/modules/settings/widgets/runtime/DesktopRuntimeSettings.vue b/apps/buddy/src/modules/settings/widgets/runtime/DesktopRuntimeSettings.vue
index 05b6454f..cc42a4f3 100644
--- a/apps/buddy/src/modules/settings/widgets/runtime/DesktopRuntimeSettings.vue
+++ b/apps/buddy/src/modules/settings/widgets/runtime/DesktopRuntimeSettings.vue
@@ -1,65 +1,141 @@
 <script setup lang="ts">
+import type { LexoraConfigPatch } from '@buddy-electron/shared/desktopApi'
+import type { BuddyPermissionMode } from '@buddy-shared/permissions/permissionMode'
 import type { RuntimePreferences } from '@buddy-shared/runtime/runtimePreferences'
 import type { ApplicationSettingsProps } from '../app/typing'
+import { BUDDY_PERMISSION_MODES } from '@buddy-shared/permissions/permissionMode'
 import { NSelect, useMessage } from 'naive-ui'
 import { computed, shallowRef, useId } from 'vue'
 import { useBuddyI18n } from '@/i18n/buddyI18n'
+import { DesktopFullAccessConfirmationDialog } from '@/modules/prompt-input/ui'
+
+type RuntimeSettingField = 'cacheWarming' | 'defaultPermissionMode'
 
 const props = defineProps<ApplicationSettingsProps>()
 const { t } = useBuddyI18n(() => props.language)
+const fullAccessConfirmationText = computed(() => ({
+  acknowledgement: t('desktop.settings.runtime.fullAccessDefaultAcknowledgement'),
+  cancelLabel: t('common.cancel'),
+  confirmLabel: t('desktop.settings.runtime.fullAccessDefaultConfirm'),
+  description: t('desktop.settings.runtime.fullAccessDefaultDescription'),
+  title: t('desktop.settings.runtime.fullAccessDefaultTitle'),
+}))
 const message = useMessage()
-const labelId = useId()
-const descriptionId = useId()
-const pending = shallowRef(false)
-const modes = computed(() => [
+const cacheWarmingLabelId = useId()
+const cacheWarmingDescriptionId = useId()
+const defaultPermissionLabelId = useId()
+const defaultPermissionDescriptionId = useId()
+const pendingFields = shallowRef<ReadonlySet<RuntimeSettingField>>(new Set())
+const fullAccessConfirmationOpen = shallowRef(false)
+const cacheWarmingModes = computed(() => [
   { label: t('desktop.settings.runtime.cacheWarmingOff'), value: 'off' },
   { label: t('desktop.settings.runtime.cacheWarmingStreaming'), value: 'streaming' },
 ])
+const permissionModeLabelKeys: Record<BuddyPermissionMode, 'desktop.chat.executionProfileReadOnly' | 'desktop.chat.permissionModeManual' | 'desktop.chat.permissionModePolicy' | 'desktop.chat.executionProfileFull'> = {
+  full_access: 'desktop.chat.executionProfileFull',
+  manual_approval: 'desktop.chat.permissionModeManual',
+  policy_approval: 'desktop.chat.permissionModePolicy',
+  read_only: 'desktop.chat.executionProfileReadOnly',
+}
+const permissionModes = computed(() => BUDDY_PERMISSION_MODES.map(value => ({
+  label: t(permissionModeLabelKeys[value]),
+  value,
+})))
 
-async function updateCacheWarming(cacheWarming: RuntimePreferences['cacheWarming']) {
-  if (pending.value)
+async function save(field: RuntimeSettingField, patch: LexoraConfigPatch) {
+  if (pendingFields.value.has(field))
     return
-  pending.value = true
+  pendingFields.value = new Set([...pendingFields.value, field])
   try {
-    if (!await props.updateSettings({ runtime: { cacheWarming } }))
+    if (!await props.updateSettings(patch))
       message.error(t('desktop.settings.saveFailed'))
   }
   finally {
-    pending.value = false
+    pendingFields.value = new Set([...pendingFields.value].filter(item => item !== field))
+  }
+}
+
+function selectDefaultPermissionMode(permissionMode: BuddyPermissionMode) {
+  if (permissionMode === props.config?.desktop.chat.permissionMode)
+    return
+  if (permissionMode === 'full_access') {
+    fullAccessConfirmationOpen.value = true
+    return
   }
+  void save('defaultPermissionMode', { desktop: { chat: { permissionMode } } })
+}
+
+function confirmFullAccess() {
+  void save('defaultPermissionMode', { desktop: { chat: { permissionMode: 'full_access' } } })
+}
+
+function updateCacheWarming(cacheWarming: RuntimePreferences['cacheWarming']) {
+  void save('cacheWarming', { runtime: { cacheWarming } })
 }
 </script>
 
 <template>
   <section v-if="config" class="runtime-settings">
-    <h2>{{ t('desktop.settings.runtime.context') }}</h2>
-    <div class="runtime-settings__row" data-testid="cache-warming-setting">
-      <div class="runtime-settings__copy">
-        <strong :id="labelId">{{ t('desktop.settings.runtime.cacheWarming') }}</strong>
-        <small :id="descriptionId">{{ t('desktop.settings.runtime.cacheWarmingDescription') }}</small>
+    <section class="runtime-settings__section">
+      <h2>{{ t('desktop.settings.runtime.taskPermissions') }}</h2>
+      <div class="runtime-settings__row" data-testid="default-permission-mode-setting">
+        <div class="runtime-settings__copy">
+          <strong :id="defaultPermissionLabelId">{{ t('desktop.settings.runtime.defaultPermissionMode') }}</strong>
+          <small :id="defaultPermissionDescriptionId">{{ t('desktop.settings.runtime.defaultPermissionModeDescription') }}</small>
+        </div>
+        <div class="runtime-settings__control">
+          <NSelect
+            :aria-labelledby="defaultPermissionLabelId"
+            :aria-describedby="defaultPermissionDescriptionId"
+            :value="config.desktop.chat.permissionMode"
+            :options="permissionModes"
+            :loading="pendingFields.has('defaultPermissionMode')"
+            :disabled="pendingFields.has('defaultPermissionMode')"
+            @update:value="selectDefaultPermissionMode"
+          />
+        </div>
       </div>
-      <div class="runtime-settings__control">
-        <NSelect
-          :aria-labelledby="labelId"
-          :aria-describedby="descriptionId"
-          :value="config.runtime.cacheWarming"
-          :options="modes"
-          :loading="pending"
-          :disabled="pending"
-          @update:value="updateCacheWarming"
-        />
+    </section>
+    <section class="runtime-settings__section">
+      <h2>{{ t('desktop.settings.runtime.context') }}</h2>
+      <div class="runtime-settings__row" data-testid="cache-warming-setting">
+        <div class="runtime-settings__copy">
+          <strong :id="cacheWarmingLabelId">{{ t('desktop.settings.runtime.cacheWarming') }}</strong>
+          <small :id="cacheWarmingDescriptionId">{{ t('desktop.settings.runtime.cacheWarmingDescription') }}</small>
+        </div>
+        <div class="runtime-settings__control">
+          <NSelect
+            :aria-labelledby="cacheWarmingLabelId"
+            :aria-describedby="cacheWarmingDescriptionId"
+            :value="config.runtime.cacheWarming"
+            :options="cacheWarmingModes"
+            :loading="pendingFields.has('cacheWarming')"
+            :disabled="pendingFields.has('cacheWarming')"
+            @update:value="updateCacheWarming"
+          />
+        </div>
       </div>
-    </div>
+    </section>
+    <DesktopFullAccessConfirmationDialog
+      v-model:show="fullAccessConfirmationOpen"
+      :text="fullAccessConfirmationText"
+      @confirm="confirmFullAccess"
+    />
   </section>
 </template>
 
 <style scoped>
 .runtime-settings {
   display: grid;
-  gap: 0.8rem;
+  gap: 1.8rem;
   container-type: inline-size;
 }
 
+.runtime-settings__section {
+  display: grid;
+  gap: 0.8rem;
+}
+
 .runtime-settings h2 {
   margin: 0;
   font-size: 0.92rem;
diff --git a/apps/buddy/src/modules/tasks/state/drafts/__tests__/useChatDrafts.spec.ts b/apps/buddy/src/modules/tasks/state/drafts/__tests__/useChatDrafts.spec.ts
index 1a196492..70a0299e 100644
--- a/apps/buddy/src/modules/tasks/state/drafts/__tests__/useChatDrafts.spec.ts
+++ b/apps/buddy/src/modules/tasks/state/drafts/__tests__/useChatDrafts.spec.ts
@@ -1,4 +1,5 @@
 import type { LocalComposerDraft } from '@buddy-shared/conversation/composerApi'
+import type { BuddyPermissionMode } from '@buddy-shared/permissions/permissionMode'
 
 import { describe, expect, it, vi } from 'vitest'
 import { computed, ref } from 'vue'
@@ -7,6 +8,23 @@ import { createBuddyUserContent } from '../../../../../../shared/conversation/bu
 import { useChatDrafts } from '../useChatDrafts'
 
 describe('useChatDrafts', () => {
+  it('uses the configured permission mode for newly created scopes but leaves existing drafts unchanged', () => {
+    const targetKey = ref('global')
+    const defaultPermissionMode = ref<BuddyPermissionMode>('policy_approval')
+    const drafts = useChatDrafts({
+      defaultPermissionMode: computed(() => defaultPermissionMode.value),
+      onChange: vi.fn(),
+      targetKey: computed(() => targetKey.value),
+    })
+    expect(drafts.executionProfile.value).toBe('workspace_write')
+
+    defaultPermissionMode.value = 'full_access'
+    expect(drafts.executionProfile.value).toBe('workspace_write')
+    targetKey.value = 'space:space-1'
+    expect(drafts.executionProfile.value).toBe('full_access')
+    expect(drafts.approvalPolicy.value).toBe('policy')
+  })
+
   it('owns a complete editor value per strict Draft scope', () => {
     const { drafts, targetKey } = createFixture()
     const globalId = drafts.draftId.value
diff --git a/apps/buddy/src/modules/tasks/state/drafts/useChatDrafts.ts b/apps/buddy/src/modules/tasks/state/drafts/useChatDrafts.ts
index 3274cf10..1ee9bb10 100644
--- a/apps/buddy/src/modules/tasks/state/drafts/useChatDrafts.ts
+++ b/apps/buddy/src/modules/tasks/state/drafts/useChatDrafts.ts
@@ -1,13 +1,12 @@
 import type { BuddyUserContentV1 } from '@buddy-shared/conversation/buddyUserContent'
 import type { LocalComposerDraft } from '@buddy-shared/conversation/composerApi'
 
-import type { BuddyPermissionSettings } from '@buddy-shared/permissions/permissionMode'
+import type { BuddyPermissionMode, BuddyPermissionSettings } from '@buddy-shared/permissions/permissionMode'
 import type { JSONContent } from '@tiptap/core'
 import type { ComputedRef } from 'vue'
 import type { ChatDrafts, ChatDraftSnapshot, ChatDraftState, ComposerDraftReceipt } from './typing'
 import { buddyUserContentToText, createBuddyUserContent } from '@buddy-shared/conversation/buddyUserContent'
-import { BUDDY_DEFAULT_APPROVAL_POLICY } from '@buddy-shared/permissions/approvalPolicy'
-import { BUDDY_DEFAULT_EXECUTION_PROFILE } from '@buddy-shared/permissions/executionProfile'
+import { BUDDY_DEFAULT_PERMISSION_MODE, resolveBuddyPermissionSettings } from '@buddy-shared/permissions/permissionMode'
 import { computed, shallowReactive, shallowRef, watch } from 'vue'
 import {
   chatComposerDocumentToUserContent,
@@ -19,6 +18,7 @@ import {
 import { createDraftValueFingerprint } from '../../model/drafts/draftValueFingerprint'
 
 interface UseChatDraftsOptions {
+  defaultPermissionMode?: ComputedRef<BuddyPermissionMode>
   onChange: () => void
   targetKey: ComputedRef<string>
 }
@@ -36,7 +36,7 @@ export function useChatDrafts(options: UseChatDraftsOptions): ChatDrafts {
     () => [activeTargetKey.value, draftsByScope.has(activeTargetKey.value)] as const,
     ([key, exists]) => {
       if (!exists)
-        draftsByScope.set(key, emptyDraft(key))
+        draftsByScope.set(key, emptyDraft(key, options.defaultPermissionMode?.value))
     },
     { flush: 'sync', immediate: true },
   )
@@ -71,7 +71,7 @@ export function useChatDrafts(options: UseChatDraftsOptions): ChatDrafts {
     const existing = draftsByScope.get(key)
     if (existing)
       return existing
-    const value = emptyDraft(key)
+    const value = emptyDraft(key, options.defaultPermissionMode?.value)
     draftsByScope.set(key, value)
     return value
   }
@@ -180,7 +180,7 @@ export function useChatDrafts(options: UseChatDraftsOptions): ChatDrafts {
     resumeIsolated(targetKey: string) {
       if (!draftsByScope.has(targetKey)) {
         const current = currentDraft.value
-        draftsByScope.set(targetKey, { ...emptyDraft(), approvalPolicy: current.approvalPolicy, executionProfile: current.executionProfile, modelSelection: current.modelSelection })
+        draftsByScope.set(targetKey, { ...emptyDraft('', options.defaultPermissionMode?.value), approvalPolicy: current.approvalPolicy, executionProfile: current.executionProfile, modelSelection: current.modelSelection })
       }
       isolatedDraft.value = { sourceKey: options.targetKey.value, targetKey }
       options.onChange()
@@ -322,15 +322,16 @@ export function useChatDrafts(options: UseChatDraftsOptions): ChatDrafts {
   }
 }
 
-function emptyDraft(targetKey = ''): ChatDraftState {
+function emptyDraft(targetKey = '', mode: BuddyPermissionMode = BUDDY_DEFAULT_PERMISSION_MODE): ChatDraftState {
+  const defaultSettings = resolveBuddyPermissionSettings(mode)
   return {
-    approvalPolicy: BUDDY_DEFAULT_APPROVAL_POLICY,
+    approvalPolicy: defaultSettings.approvalPolicy,
     confirmedSnapshot: null,
     content: createBuddyUserContent(),
     draftId: targetKey.startsWith('draft:') ? targetKey.slice(6) : crypto.randomUUID(),
     editorSessionId: crypto.randomUUID(),
     editVersion: 0,
-    executionProfile: BUDDY_DEFAULT_EXECUTION_PROFILE,
+    executionProfile: defaultSettings.executionProfile,
     modelSelection: null,
     revision: null,
   }
diff --git a/apps/buddy/src/modules/tasks/state/useTaskCapability.ts b/apps/buddy/src/modules/tasks/state/useTaskCapability.ts
index 8b32b1e0..efe52131 100644
--- a/apps/buddy/src/modules/tasks/state/useTaskCapability.ts
+++ b/apps/buddy/src/modules/tasks/state/useTaskCapability.ts
@@ -7,6 +7,7 @@ import type { ModelProvidersStore } from '@/modules/models'
 import type { ApplicationSettings } from '@/modules/settings'
 import type { ChatBlockerKind } from '@/modules/tasks/model/status/typing'
 import type { RuntimeSupervisorStore } from '@/platform/runtime/useRuntimeSupervisorStore'
+import { BUDDY_DEFAULT_PERMISSION_MODE } from '@buddy-shared/permissions/permissionMode'
 import { until } from '@vueuse/core'
 import { computed, readonly, shallowRef, watch } from 'vue'
 import { useBuddyI18n } from '@/i18n/buddyI18n'
@@ -127,7 +128,11 @@ export function useTaskCapability(options: UseTaskCapabilityOptions): TaskCapabi
     spaceId: spaceId.value,
   }))
   let persistDraftChanges = () => {}
+  const defaultPermissionMode = computed(() => (
+    applicationSettings.config.value?.desktop.chat.permissionMode ?? BUDDY_DEFAULT_PERMISSION_MODE
+  ))
   const drafts = useChatDrafts({
+    defaultPermissionMode,
     onChange: () => persistDraftChanges(),
     targetKey: draftScopeKey,
   })
diff --git a/apps/buddy/src/modules/tasks/widgets/transcript/__tests__/BuddyChatActivities.spec.ts b/apps/buddy/src/modules/tasks/widgets/transcript/__tests__/BuddyChatActivities.spec.ts
index be3e96f0..e02461b1 100644
--- a/apps/buddy/src/modules/tasks/widgets/transcript/__tests__/BuddyChatActivities.spec.ts
+++ b/apps/buddy/src/modules/tasks/widgets/transcript/__tests__/BuddyChatActivities.spec.ts
@@ -412,7 +412,7 @@ function mountTurn(nodes: ChatAgentTurnNode[], status: ChatAgentTurn['status'] =
         language: shallowRef('zh-CN'),
         isDark: shallowRef(false),
         appSidebarCollapsed: shallowRef(false),
-        chat: shallowRef({ outlinePosition: 'top-right', welcome: 'random' }),
+        chat: shallowRef({ outlinePosition: 'top-right', permissionMode: 'policy_approval', welcome: 'random' }),
       })
       useProvideChatContent({ canPreviewFile: () => false, previewFile: () => {}, writeClipboardText: async () => {} })
       const navigation = useChatActivityNavigation()
diff --git a/apps/buddy/src/modules/tasks/widgets/transcript/__tests__/BuddyChatMessageContent.spec.ts b/apps/buddy/src/modules/tasks/widgets/transcript/__tests__/BuddyChatMessageContent.spec.ts
index 84ed6a91..21b56063 100644
--- a/apps/buddy/src/modules/tasks/widgets/transcript/__tests__/BuddyChatMessageContent.spec.ts
+++ b/apps/buddy/src/modules/tasks/widgets/transcript/__tests__/BuddyChatMessageContent.spec.ts
@@ -85,7 +85,7 @@ describe('buddyChatMessageContent', () => {
           language: shallowRef('zh-CN'),
           isDark: shallowRef(false),
           appSidebarCollapsed: shallowRef(false),
-          chat: shallowRef({ outlinePosition: 'top-right', welcome: 'random' }),
+          chat: shallowRef({ outlinePosition: 'top-right', permissionMode: 'policy_approval', welcome: 'random' }),
         })
         useProvideChatContent({
           canPreviewFile,
@@ -224,7 +224,7 @@ function renderContent(message: LocalMessage, isDark = false) {
         language: shallowRef('zh-CN'),
         isDark: shallowRef(isDark),
         appSidebarCollapsed: shallowRef(false),
-        chat: shallowRef({ outlinePosition: 'top-right', welcome: 'random' }),
+        chat: shallowRef({ outlinePosition: 'top-right', permissionMode: 'policy_approval', welcome: 'random' }),
       })
       return () => h(BuddyChatMessageContent, {
         language: 'zh-CN',
diff --git a/apps/buddy/src/modules/tasks/widgets/transcript/__tests__/DesktopChatTranscript.spec.ts b/apps/buddy/src/modules/tasks/widgets/transcript/__tests__/DesktopChatTranscript.spec.ts
index 45790258..53a9a36f 100644
--- a/apps/buddy/src/modules/tasks/widgets/transcript/__tests__/DesktopChatTranscript.spec.ts
+++ b/apps/buddy/src/modules/tasks/widgets/transcript/__tests__/DesktopChatTranscript.spec.ts
@@ -96,7 +96,7 @@ function mountTranscript(loadOutlineMessages: () => Promise<readonly LocalMessag
         language: shallowRef('zh-CN'),
         isDark: shallowRef(false),
         appSidebarCollapsed: shallowRef(false),
-        chat: shallowRef({ outlinePosition: 'top-right', welcome: 'random' }),
+        chat: shallowRef({ outlinePosition: 'top-right', permissionMode: 'policy_approval', welcome: 'random' }),
       })
       return () => h(DesktopChatTranscript, props.value)
     },