fix(cli): add --accept-permissions flag to ag run and ag create (#3336, #3337)

Tasks requiring file writes stall at the permission gate because neither
ag run nor ag create passes permissionMode to the session. Sessions sit
idle waiting for approval that never comes.

New flag: --accept-permissions / -y
- Sets permissionMode: 'bypassPermissions' on session creation
- ag run: completes autonomously instead of timing out
- ag create: no longer stalls on permission-gated operations

Fixes: #3336, #3337

Author: OneStepAt4time

src/cli.ts

@@ -120,6 +120,8 @@ async function handleCreate(args: string[], io: CliIO): Promise<number> {
     }
   }
 
+  const acceptPerms = args.includes('--accept-permissions') || args.includes('-y');
+
   if (!brief) {
     writeLine(io.stderr, '  ❌ Missing brief. Usage: ag create "Build a login page"');
     return 1;
@@ -156,7 +158,7 @@ async function handleCreate(args: string[], io: CliIO): Promise<number> {
     const res = await fetch(`${baseUrl}/v1/sessions`, {
       method: 'POST',
       headers,
-      body: JSON.stringify({ workDir: cwd, name: sessionName }),
+      body: JSON.stringify({ workDir: cwd, name: sessionName, ...(acceptPerms ? { permissionMode: 'bypassPermissions' } : {}) }),
     });
 
     if (!res.ok) {

src/commands/run.ts

@@ -261,6 +261,7 @@ export async function handleRun(args: string[], io: CliIO): Promise<number> {
   const portOverride = portIdx !== -1 ? parseIntSafe(args[portIdx + 1], 9100) : null;
 
   const noStream = args.includes('--no-stream');
+  const acceptPerms = args.includes('--accept-permissions') || args.includes('-y');
 
   writeLine(io.stdout, `  🚀 ag run: ${brief.slice(0, 60)}${brief.length > 60 ? '...' : ''}`);
 
@@ -366,6 +367,7 @@ export async function handleRun(args: string[], io: CliIO): Promise<number> {
         workDir: cwd,
         prompt: brief,
         name: `run-${brief.slice(0, 20).replace(/[^a-zA-Z0-9-]/g, '-').toLowerCase()}`,
+        ...(acceptPerms ? { permissionMode: 'bypassPermissions' } : {}),
       }),
     });