Deniz hosts a Claude Code session and approves its risky steps. Then Deniz hands the controls to Sam, who sets approvals to Auto. Ada watches. No account needed to look.
This is a replay, not a live agent. It plays back a scripted demo session that we wrote by hand, in the record format the Claude Code hooks send. No agent runs, and nothing you click reaches anyone. In a real shared session, this screen follows the host’s computer live.
Each Edit, Write and Bash call waits until the controller approves it (these are the default tools that wait). Later Sam switches the session to Auto, and Covo approves at once. These are the two approval modes of a shared session.
Deniz passes the controls to Sam. One person controls the agent at a time. Everyone else watches the same thread, plan and diffs.
The cat .env.test output held a database password, an API key and a token. The masking rules in redaction.v1.json replaced them (provider-and-github-keys, jwt, url-password). The SDK applies the same rules on the host’s computer, before anything leaves it.