fix(agents): stop permission prompts for agent workers

AGENTS.md

@@ -46,9 +46,13 @@
 - **Runtime config drift**: `antigravity:check` and `codex:check` gate
   `mise run apply`. Live `~/.gemini/antigravity-cli/settings.json` and
   `~/.codex/config.toml` are plain files because the apps write private runtime
-  state into them. On failure, copy intentional setting changes into the repo
-  (never workspace paths or auth state), then run `mise run antigravity:resolve`
-  or `mise run codex:resolve` (or `mise run apply --force`).
+  state into them. `antigravity:check` compares only keys present in
+  `antigravity/settings.json`, and `antigravity:resolve` merges those keys into
+  the live file, so machine state such as `trustedWorkspaces` never needs to be
+  committed. `codex:check` compares the whole file. On failure, copy
+  intentional setting changes into the repo (never workspace paths or auth
+  state), then run `mise run antigravity:resolve` or `mise run codex:resolve`
+  (or `mise run apply --force`).
 - **Overwritten dotfile symlinks**: If an app replaces a `[dotfiles]` symlink
   with a plain file, copy wanted changes into the repo before running
   `mise bootstrap --force-dotfiles`.

antigravity/settings.json

@@ -1,12 +1,14 @@
 {
   "allowNonWorkspaceAccess": true,
   "altScreenMode": "always",
+  "artifactReviewPolicy": "always-proceed",
   "gcp": {
     "project": "way-platform-ai",
     "location": "eu"
   },
   "model": "Gemini 4 Argon (Medium)",
   "notifications": true,
   "showFeedbackSurvey": false,
+  "toolPermission": "always-proceed",
   "verbosity": "high"
 }

claude/settings.json

@@ -48,6 +48,9 @@
   "effortLevel": "high",
   "outputStyle": "Concise",
   "autoMemoryEnabled": false,
+  "permissions": {
+    "defaultMode": "bypassPermissions"
+  },
   "skipDangerousModePermissionPrompt": true,
   "theme": "dark"
 }

mise/conf.d/antigravity.toml

@@ -2,19 +2,27 @@
 "~/.gemini/config/hooks.json" = "../../antigravity/hooks.json"
 
 [tasks."antigravity:check"]
-description = "Check antigravity config drift (fails until resolved)"
+description = "Check antigravity config drift on repo-managed keys (fails until resolved)"
 run = """
-if ! diff -u "$HOME/.gemini/antigravity-cli/settings.json" "$REPO_DIR/antigravity/settings.json"; then
+repo_view=$(mktemp)
+live_view=$(mktemp)
+trap 'rm -f "$repo_view" "$live_view"' EXIT
+jq -S . "$REPO_DIR/antigravity/settings.json" >"$repo_view"
+jq -S --slurpfile ref "$REPO_DIR/antigravity/settings.json" \
+  'with_entries(select(.key as $k | $ref[0] | has($k)))' \
+  "$HOME/.gemini/antigravity-cli/settings.json" >"$live_view"
+if ! diff -u "$repo_view" "$live_view"; then
   echo "[antigravity] Resolve with: mise run antigravity:resolve"
   exit 1
 fi
 """
 
 [tasks."antigravity:resolve"]
-description = "Resolve antigravity config drift by overwriting the live config"
+description = "Resolve antigravity config drift by merging repo keys into the live config"
 run = """
-if ! diff -u "$HOME/.gemini/antigravity-cli/settings.json" "$REPO_DIR/antigravity/settings.json"; then
-  echo "[antigravity] Applying repo config over live config"
-fi
-install -m 600 "$REPO_DIR/antigravity/settings.json" "$HOME/.gemini/antigravity-cli/settings.json"
+merged=$(mktemp)
+trap 'rm -f "$merged"' EXIT
+jq -S -s '.[0] * .[1]' "$HOME/.gemini/antigravity-cli/settings.json" "$REPO_DIR/antigravity/settings.json" >"$merged"
+echo "[antigravity] Applying repo keys over live config"
+install -m 600 "$merged" "$HOME/.gemini/antigravity-cli/settings.json"
 """

tasks/apply.sh

@@ -17,9 +17,10 @@ while [ $# -gt 0 ]; do
     echo "Apply every current version and config in the repo: full convergence."
     echo
     echo "Options:"
-    echo "  -f, --force  Overwrite the live codex and antigravity configs with"
-    echo "               the repo copies before convergence. This drops private"
-    echo "               runtime state; the apps re-prompt for it."
+    echo "  -f, --force  Merge the antigravity repo keys into the live config and"
+    echo "               overwrite the live codex config before convergence. The"
+    echo "               codex overwrite drops private runtime state; the app"
+    echo "               re-prompts for it."
     echo "  -h, --help   Show this help message"
     exit 0
     ;;