fix(app): pending permissions are not auto-accepted after page refresh #20998

Bug Description

When the browser page is refreshed or reopened while an AI task is running, pending permission requests that were issued before the refresh are never auto-accepted, even when auto-accept is enabled. The task remains stuck waiting for a response that never comes, and no permission dialog is shown to the user.

Reproduction Steps

1. Start a conversation with OpenCode in the web UI
2. Send a message that triggers a permission request (e.g., git commit)
3. Before the permission dialog appears, close or refresh the browser page
4. Reopen the page (auto-accept setting is restored from localStorage)
5. Observe that:
   • The auto-accept toggle shows as "enabled"
   • The AI task is still running but appears stuck
   • No permission dialog is visible
   • The permission request is never auto-accepted

Expected Behavior

After page refresh, the app should:

1. Query for any pending permission requests from the backend
2. If auto-accept is enabled for that session/directory, automatically respond to pending permissions
3. If auto-accept is disabled, show the permission dialog for pending requests

Actual Behavior

The pending permission requests are never processed because:

1. SSE only delivers real-time events, not historical ones
2. The permission.asked event was sent before the page reconnected
3. The auto-accept logic only triggers when receiving new permission.asked events
4. No code queries for pending permissions on page initialization

Root Cause Analysis

Looking at the code:

// packages/app/src/context/permission.tsx
const unsubscribe = globalSDK.event.listen((e) => {
  const event = e.details
  if (!e.name.startsWith("permission.")) return
  const perm = event.properties
  if (!shouldAutoRespond(perm, e.name)) return
  respondOnce(perm, e.name)
})

The auto-accept only works when the frontend receives a permission.asked event via SSE. However, SSE is a real-time stream - when the page disconnects and reconnects, previously sent events are not replayed.

The enable() function does query for pending permissions:

function enable(sessionID: string, directory: string) {
  setStore(...)
  globalSDK.client.permission
    .list({ directory })
    .then((x) => {
      for (const perm of x.data ?? []) {
        if (shouldAutoRespond(perm, directory)) {
          respondOnce(perm, directory)
        }
      }
    })
}

But this is only called when the user manually toggles auto-accept. There's no equivalent logic on page initialization.

Proposed Fix

On page initialization (in permission.tsx), after the store is ready, query for pending permissions and process them according to the current auto-accept settings:

// In permission.tsx, after persisted store is ready
createEffect(() => {
  if (!ready()) return
  const directory = decode64(params.dir)
  if (!directory) return
  
  // Query and process pending permissions
  globalSDK.client.permission
    .list({ directory })
    .then((x) => {
      for (const perm of x.data ?? []) {
        if (shouldAutoRespond(perm, directory)) {
          respondOnce(perm, directory)
        }
      }
    })
})

Environment

• OpenCode version: Latest dev branch
• Browser: Any (Chrome, Safari, Firefox)
• OS: Any (macOS, Linux, Windows)
• UI: Web interface (packages/app)