story-219: add Always Allow button to web UI permission dialog

Cherry-pick from feature branch — code was never squash-merged
despite story being accepted (bug 226).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

frontend/src/api/client.ts

@@ -11,6 +11,7 @@ export type WsRequest =
 			type: "permission_response";
 			request_id: string;
 			approved: boolean;
+			always_allow: boolean;
 	  }
 	| { type: "ping" };
 
@@ -469,8 +470,17 @@ export class ChatWebSocket {
 		this.send({ type: "cancel" });
 	}
 
-	sendPermissionResponse(requestId: string, approved: boolean) {
-		this.send({ type: "permission_response", request_id: requestId, approved });
+	sendPermissionResponse(
+		requestId: string,
+		approved: boolean,
+		alwaysAllow = false,
+	) {
+		this.send({
+			type: "permission_response",
+			request_id: requestId,
+			approved,
+			always_allow: alwaysAllow,
+		});
 	}
 
 	close() {

frontend/src/components/Chat.tsx

@@ -578,10 +578,14 @@ export function Chat({ projectPath, onCloseProject }: ChatProps) {
 		}
 	};
 
-	const handlePermissionResponse = (approved: boolean) => {
+	const handlePermissionResponse = (approved: boolean, alwaysAllow = false) => {
 		const current = permissionQueue[0];
 		if (!current) return;
-		wsRef.current?.sendPermissionResponse(current.requestId, approved);
+		wsRef.current?.sendPermissionResponse(
+			current.requestId,
+			approved,
+			alwaysAllow,
+		);
 		setPermissionQueue((prev) => prev.slice(1));
 	};
 
@@ -1095,6 +1099,21 @@ export function Chat({ projectPath, onCloseProject }: ChatProps) {
 							>
 								Approve
 							</button>
+							<button
+								type="button"
+								onClick={() => handlePermissionResponse(true, true)}
+								style={{
+									padding: "10px 20px",
+									borderRadius: "8px",
+									border: "none",
+									backgroundColor: "#4caf50",
+									color: "#fff",
+									cursor: "pointer",
+									fontSize: "0.9em",
+								}}
+							>
+								Always Allow
+							</button>
 						</div>
 					</div>
 				</div>

frontend/src/types.ts

@@ -53,6 +53,7 @@ export type WsRequest =
 			type: "permission_response";
 			request_id: string;
 			approved: boolean;
+			always_allow: boolean;
 	  };
 
 export type WsResponse =