[Feature Request] Ultraplan syncs repository files to cloud without explicit consent, bypassing PreToolUse hooks

Resolved 💬 5 comments Opened Apr 8, 2026 by kedazo Closed May 22, 2026

Bug Description

I tried ultraplan mode out of curiosity. It failed because my project references other Go modules in sibling directories. After the failure, I realized my files had already been synced to a cloud instance without being asked for permission.

This is concerning because:

  1. No way to disable automatic repo syncing — There is currently no setting to prevent Claude Code from uploading my entire repository to the cloud. This should be an opt-in feature with a clear setting to

disable it entirely (e.g., "ultraplan": false or "allowCloudSync": false in settings).

  1. Inconsistent permission model — I have PreToolUse hooks configured to deny reading/accessing certain files locally. Ultraplan completely bypasses these hooks and uploads the entire repository without any filtering.
  2. No opt-in confirmation — There was no clear consent step before my files left my machine. Locally, Claude Code asks permission to read individual files, but ultraplan uploads everything silently.

Request:

  • A setting to completely disable automatic repository syncing to the cloud
  • Ultraplan should respect existing PreToolUse hooks and require explicit confirmation before syncing any files
  • At minimum, a clear and prominent consent dialog listing exactly what will be uploaded before any file transfer occurs

View original on GitHub ↗

This issue has 5 comments on GitHub. Read the full discussion on GitHub ↗