[Bug]: Allow/deny permissions

[tatticoder]

Description

The Openwork agent tries to run desctructive commands such as deleting a file but there is no option to allow or deny it.

Steps to Reproduce

1. Ask agent to remove a file from workspace.
2. The agent will get stuck on this stage.

Expected Behavior

Get a prompt in UI asking for permissions.

Actual Behavior

Agent stuck in this state.

Environment

• OS: macOS on M4 chip
• openwork version: openwork@0.1.2
• Node.js version: v24.11.0
• Installation method: npx (11.6.1)

Model & Provider (if applicable)

• Provider: Google
• Model: gemini-3-pro

Screenshots / Logs

[Agent] Received invoke request: {
  threadId: 'd61ec366-7a4d-4538-a9e6-e241a49bf2d1',
  message: 'you need to start with the technical refractor. du'
}
[Runtime] Creating agent runtime...
[Runtime] Workspace path: /Users/addmin/Documents/git_codes/sicarius
[Runtime] Using model: gemini-3-pro-preview
[Runtime] Google API key present: true
[Runtime] Model instance created: object
[Runtime] Checkpointer ready
[Runtime] Deep agent created with LocalSandbox at: /Users/addmin/Documents/git_codes/sicarius
[WorkspaceWatcher] rename: content/_index.md in thread d61ec366-7a4d-4538-a9e6-e241a49bf2d1
[Agent] Received invoke request: {
  threadId: 'd61ec366-7a4d-4538-a9e6-e241a49bf2d1',
  message: 'why is this stuck for a command? how can I approve'
}
[Runtime] Creating agent runtime...
[Runtime] Workspace path: /Users/addmin/Documents/git_codes/sicarius
[Runtime] Using model: gemini-3-pro-preview
[Runtime] Google API key present: true
[Runtime] Model instance created: object
[Runtime] Checkpointer ready
[Runtime] Deep agent created with LocalSandbox at: /Users/addmin/Documents/git_codes/sicarius

[Dinesh431786]

Yeah right