v0.5.9 — ACP permission control

ACP permission control

cleetus acp --fuckit now skips ordinary tool permission prompts instead of silently ignoring the flag. In JetBrains Air or another ACP client's agent configuration, use:

"args": ["acp", "--fuckit"]

The explicit launch flag also permits file writes outside the session's project directory. Explicit permission denials, Plan mode, secret-path and control-metadata guards, and sandbox restrictions remain enforced. Workflow authorization and client-managed job consent can still prompt. ACP does not inherit permissions_disabled from configuration.

Includes full-process regression coverage for Bash execution, outside-project writes, session reload, permission denials, Plan mode, and protected metadata.

Command editing and broader approval scopes are being explored in #16.

Implemented in #17.