fix: add permission mode to Claude Code adapter

Default to bypassPermissions for automated non-interactive workflows.
Without this, Claude Code in -p mode cannot edit files and produces
no code changes.

Add CLAUDE_CODE_PERMISSION_MODE env var with options: default,
acceptEdits, bypassPermissions, dontAsk, plan.

Author: zhangweijian97

.env.example

@@ -31,6 +31,13 @@ AGENT_BACKEND=claude-code
 # Claude Code max conversation turns (0 = unlimited)
 # CLAUDE_CODE_MAX_TURNS=50
 
+# Claude Code permission mode: default, acceptEdits, bypassPermissions, dontAsk, plan
+# bypassPermissions is recommended for automated workflows
+# CLAUDE_CODE_PERMISSION_MODE=bypassPermissions
+
+# Claude Code allowed tools (comma-separated, leave empty for all)
+# CLAUDE_CODE_ALLOWED_TOOLS=Read,Write,Bash
+
 # Codex-specific
 CODEX_MODEL=
 CODEX_MODEL_PLAN=

src/core/config.ts

@@ -125,6 +125,7 @@ function buildEnvBase(cwd: string): ProjectRuntimeConfig {
 			model: normalizeOptionalValue(env.CLAUDE_CODE_MODEL),
 			maxTurns: parseOptionalPositiveInt(env.CLAUDE_CODE_MAX_TURNS),
 			allowedTools: parseCommaList(env.CLAUDE_CODE_ALLOWED_TOOLS),
+			permissionMode: normalizePermissionMode(env.CLAUDE_CODE_PERMISSION_MODE),
 		},
 		dryRun: env.PIV_DRY_RUN === "1",
 	};
@@ -834,3 +835,30 @@ function normalizeAgentBackend(
 		`Invalid AGENT_BACKEND value: '${value}'. Must be 'codex' or 'claude-code'.`,
 	);
 }
+
+type ClaudePermissionMode = NonNullable<
+	NonNullable<ResolvedProjectConfig["agent"]>["permissionMode"]
+>;
+
+const VALID_PERMISSION_MODES: readonly ClaudePermissionMode[] = [
+	"default",
+	"acceptEdits",
+	"bypassPermissions",
+	"dontAsk",
+	"plan",
+];
+
+function normalizePermissionMode(
+	value: string | undefined,
+): ClaudePermissionMode | undefined {
+	if (!value) {
+		return undefined;
+	}
+	const normalized = value.trim();
+	if ((VALID_PERMISSION_MODES as readonly string[]).includes(normalized)) {
+		return normalized as ClaudePermissionMode;
+	}
+	throw new Error(
+		`Invalid CLAUDE_CODE_PERMISSION_MODE value: '${value}'. Must be one of: ${VALID_PERMISSION_MODES.join(", ")}.`,
+	);
+}

src/core/types.ts

@@ -87,6 +87,12 @@ export interface ProjectRuntimeConfig {
 		model?: string;
 		maxTurns?: number;
 		allowedTools?: string[];
+		permissionMode?:
+			| "default"
+			| "acceptEdits"
+			| "bypassPermissions"
+			| "dontAsk"
+			| "plan";
 	};
 	skills: {
 		root: string;

src/services/claude-code-adapter.ts

@@ -42,9 +42,13 @@ export class ClaudeCodeAdapter implements AgentAdapter {
 	}
 
 	private buildCommonArgs(): string[] {
+		const permissionMode =
+			this.config.agent?.permissionMode ?? "bypassPermissions";
 		return [
 			"--output-format",
 			"json",
+			"--permission-mode",
+			permissionMode,
 			...this.buildModelArgs(),
 			...this.buildMaxTurnsArgs(),
 			...this.buildAllowedToolsArgs(),