#79 Expose an "approve everything" toggle in the UI, not just config.json

[Anonymous]

Originally created by: sosidudku1

Summary

agent.approvalRequired already exists in config.json and turns off the approval gate, but it is not discoverable: users hit repeated approval prompts and assume there is no way around it.

User feedback (Discord)

"please add always yes"

Screenshot showed the approval prompt: tool: os.shell.run, reason: no shell guard rule matched; approval required.

Proposal

Surface the setting where the prompt appears:

• An explicit option in the approval prompt itself, along the lines of "always allow this session" and "always allow this command shape".
• A visible setting in the TUI rather than a config key users have to find out about.

Safety notes

Worth stating clearly in the UI: hardline guards in src/tools/os/shell-command-guard/rules-hardline.ts still block the genuinely destructive commands (rm -rf /, rm -rf ~, mkfs, dd to a raw block device, fork bombs) regardless of the approval setting. A blanket "yes" should say this, so users understand what they are and are not turning off.

Session-scoped approval is probably a safer default than a permanent global toggle.

[Anonymous]

Ticket changed by: sosidudku1

• status: open --> closed