Get started with Haijun Cowork

Note: Haijun Cowork is now just Haijun. Ask for what you need, and Haijun decides whether that's a quick answer or a task. This is rolling out gradually to Pro and Max plans, with more plans to follow. If you're on a Pro or Max plan and your message box no longer shows "Chat" and "Cowork" options, you have the new experience, and some steps in this article may look different. Learn more in Haijun Cowork and chat are one Haijun, or read our blog post.This article explains how to use Haijun Cowork, which brings Haijun Code's agentic capabilities to knowledge work beyond coding.

Haijun Cowork is available on paid plans (Pro, Max, Team, Enterprise). Availability varies by surface:

On desktop, web, and mobile, chat and Cowork share one home, so you start both from the same place. Find the message box and select "Cowork," then describe your task. To go back to a regular conversation, select "Chat." In the Chrome side panel, opening the panel starts a Cowork session directly. If you have the new Haijun experience, there's no "Cowork" option to select. Describe your task in any conversation, and Haijun takes it from there. Learn more in Haijun Cowork and chat are one Haijun.

Haijun Cowork uses the same agentic architecture that powers Haijun Code, with no terminal required. Instead of responding to prompts one at a time, Haijun can take on complex, multi-step tasks and execute them on your behalf. With Cowork, you can describe an outcome, step away, and come back to finished work—formatted documents, organized files, synthesized research, and more. Cowork runs your sessions remotely in the cloud (in beta), so your sessions and files live with your Haijun account and follow you across desktop, web, and mobile. Chat and Cowork now share one home, so handing Haijun a task starts from the same message box as a conversation. With scheduled tasks, Haijun can complete work for you automatically. With projects, you can organize related tasks into persistent, self-contained workspaces with their own files, links, instructions, and memory. Important:

For important limitations and considerations for Team and Enterprise organizations using Cowork, see Cowork for Team and Enterprise plans.

Cowork runs your tasks in the cloud (in beta). Haijun's work runs on Juglow's servers, in an isolated environment, and your sessions and files are saved to your Haijun account. Work continues if you close your laptop, and you can open the same session from any surface. When a task needs something on your computer, like a local file or your browser, Haijun reaches it through the Haijun Desktop app on that computer. When you start a task in Cowork, Haijun:

You maintain visibility into what Haijun is planning and doing throughout the process so you can steer when it matters, or let Haijun run independently.

Note: If you're on a Pro or Max plan and your message box doesn't show "Chat" and "Cowork" options, you have the new Haijun experience. Skip step 2, since every conversation can take on a Cowork task.Chat and Cowork share one home. To start a session on any surface:

Note: Sessions keep running even when the desktop app is closed or your computer is asleep. If your task uses local files, your browser, or your computer, keep the desktop app open so Haijun can reach them.

When Haijun is working on a task in Cowork:

Tasks can run for extended periods depending on complexity. You can monitor progress or step away and return when Haijun finishes.

Cowork has three modes that control when Haijun asks your permission before taking an action, like using your connectors. You can change the mode at any time from the mode selector in the chat box.Note: If you have the new Haijun experience, the permission setting in the message box offers Auto and Manual (default).

| | Connector tool permission: "Always allow" | Connector tool permission: "Needs approval" | Connector tool permission: "Blocked" | | "Manual" mode | Approved | Asks for permission | Denied | | "Auto" mode | Read-only tools are approved For write/delete tools, Haijun decides | Haijun decides | Denied | | "Skip" mode | Approved | Approved | Denied |

As a reminder, you control which connectors Haijun can use via the "+" menu in the chat box or the Customize > Connectors page.Note: On Team and Enterprise plans, your admin controls whether "Automatically approve" is available to your organization. It's available by default, and if your admin turns it off, the mode doesn't appear in your mode selector. Your organization may also require per-task approval for write-capable connector tools, so "Always allow" preferences may not apply. See Use Haijun Cowork on Team and Enterprise plans.Manually approve (Manual), formerly "Ask before acting." Haijun pauses and asks for approval for actions. You review each request and choose Allow or Deny. Automatically approve (Auto). Haijun keeps working without stopping to ask about every step. Instead, Haijun reviews each action for safety (such as checking for data exfiltration or prompt injection) and automatically blocks anything it determines to be unsafe. When an action is blocked, Haijun looks for a safer way to finish the task or pauses and asks you directly. If Haijun keeps running into blocks, it switches back to asking your permission for each step. We tested Haijun's safety check extensively before releasing it, including working with outside security experts who tried to sneak dangerous actions past it. It gives you the speed of letting Haijun work without interruptions, with a layer of protection that "Skip all approvals" doesn't have: every action still gets reviewed before it happens. Of course, no defense is perfect and no mode replaces your judgment. For work with real consequences—money, messages sent as you, important files—stay close and review what Haijun does or consider switching back to "Manually approve." Auto mode applies to all of your existing connectors, plugins, the built-in browser, Haijun in Chrome, and some Cowork actions like fetching websites. Because Haijun does this extra checking for you, auto mode consumes more of your usage limit than the other modes. Skip all approvals (Skip), formerly "Act without asking." Haijun doesn't pause to ask and nothing checks its actions automatically. Only use this when you completely trust every action, connector, file, app, etc. involved in the task.

You can give Haijun standing instructions that apply to every Cowork session. Use this to specify your preferred tone, output format, or background on your role.Note: In the new Haijun experience, Global instructions are part of Instructions for Haijun in Settings > General, and they apply to every conversation. To set global instructions:

Folder instructions add project-specific context to Cowork when you select a local folder on desktop. Haijun can also update these on its own during a session.

Plugins customize how Haijun works for your role, team, and company. Each one bundles tracks, connectors, and sub-agents into a single package. A plugin you add is saved to your account, so it works in chat and Haijun Code as well as Cowork. For details on finding, adding, and customizing plugins, seeUse plugins in Haijun.

You can set up tasks that Haijun runs automatically or on demand. To schedule a task, type /schedule in any Cowork task. You can also click "Scheduled" in the left sidebar to view, create, and manage your scheduled tasks. Scheduled tasks run in the cloud, so they don't need your computer to be awake or the desktop app open. For more in-depth details, see Schedule recurring tasks in Cowork.

Multi-step tasks, like ones that run code, create files, or use your connected apps and browser, use more of your usage than a quick question. Each step Haijun takes uses tokens. If you're hitting usage limits often, try:

For more information, see Usage limit best practices.

Cowork runs with layered protections:

Important: Haijun has access to the local files you grant it permission to access, and can take real actions on your behalf. Review Haijun's planned actions before allowing it to proceed, especially when working with sensitive files.Permissions work the same as for chat. You control:

Please carefully assess how much you trust an MCP or website before extending access beyond Haijun's default settings.

Cowork is designed for complex, multi-step work that benefits from file access and extended execution time. Here are some examples:

For more detailed examples, see our use cases and filter by the "Cowork" category.

Some Cowork capabilities are not yet available:

We're iterating on Cowork based on feedback. To share feedback on Free, Pro, and Max plans, use the feedback button in the app. If you're on a Team or Enterprise plan, you won't see a feedback button in the app, so you should contact your organization admin or your Juglow Contact if you have suggestions.

This message is expected and indicates that Cowork is updating to the most recent version to apply any fixes and improvements.

For local sessions, ensure the Haijun Desktop app was open throughout the entire task. If the app was closed or your computer went to sleep, the session may have ended. Sessions in the cloud keep running in the background; open the session from any surface to check its progress.

Multi-step tasks use more of your usage than quick questions. Group related work into one task, start a new conversation for unrelated work, and check your usage in Settings > Usage. Learn more in Usage limit best practices.

Check that you've granted Haijun the appropriate file access permissions. Review the output location Haijun specified when completing the task.