Approval mode of automations in the list; Telegram switch per chat

- Automations: the approval mode is a selection in the list; PATCH /jobs/{id}
  writes permission_mode into the job file's frontmatter (rest of the file
  unchanged, invalid modes rejected). "Allow everything" lets nightly runs work
  without waiting for approvals via Telegram until the timeout.
- Session.telegram_quiet: approvals and questions of a chat (and its subagents)
  are not sent to Telegram; the chat open in Telegram always reports. Toggle in
  the chat's ⋯ menu when a bot is paired. New chats from the web UI and
  automation runs start quiet; chats started from Telegram and existing chats
  keep reporting.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

server/src/api.rs

@@ -620,6 +620,8 @@ async fn create_session(Extension(user): Extension<User>, State(app): State<AppS
         archived: false,
         folder: None,
         instructions: String::new(),
+        // New chats keep their approvals and questions out of Telegram (⋯ menu turns it on).
+        telegram_quiet: true,
     };
     let s = app.save_session(s)?;
     Ok(Json(json!(s)))
@@ -831,6 +833,8 @@ struct UpdateSession {
     folder: Option<String>,
     /// Instructions for this chat ("" clears them).
     instructions: Option<String>,
+    /// Approvals and questions of this chat are not sent to Telegram.
+    telegram_quiet: Option<bool>,
 }
 
 async fn update_session(Extension(user): Extension<User>, State(app): State<AppState>, Path(id): Path<String>, Json(body): Json<UpdateSession>) -> ApiResult {
@@ -879,6 +883,9 @@ async fn update_session(Extension(user): Extension<User>, State(app): State<AppS
         if let Some(i) = body.instructions {
             s.instructions = i.trim().to_string();
         }
+        if let Some(q) = body.telegram_quiet {
+            s.telegram_quiet = q;
+        }
     })?;
     Ok(Json(json!(s)))
 }
@@ -1654,10 +1661,16 @@ async fn create_job(Extension(user): Extension<User>, State(app): State<AppState
 #[derive(Deserialize)]
 struct UpdateJob {
     enabled: Option<bool>,
+    /// Written into the job file's frontmatter.
+    permission_mode: Option<String>,
 }
 
 async fn update_job(Extension(user): Extension<User>, State(app): State<AppState>, Path(id): Path<String>, Json(b): Json<UpdateJob>) -> ApiResult {
     let job = own_job(&app, &user, &id)?;
+    if let Some(m) = b.permission_mode.as_deref() {
+        crate::jobs::set_permission_mode(std::path::Path::new(&job.path), m).map_err(|e| ApiError(StatusCode::BAD_REQUEST, format!("{e:#}")))?;
+        app.audit(Some(&user), "job.permission_mode", &job.path, m);
+    }
     if let Some(e) = b.enabled {
         app.store.job_set_enabled(&job.id, e)?;
     }

server/src/jobs.rs

@@ -165,6 +165,8 @@ pub async fn run_with(app: &Arc<App>, job: &Job, trigger: &str, payload: Option<
         archived: false,
         folder: None,
         instructions: String::new(),
+        // New chats keep their approvals and questions out of Telegram (⋯ menu turns it on).
+        telegram_quiet: true,
     };
     let session = app.save_session(session)?;
     app.store.job_started(&job.id, &session.id, now)?;
@@ -284,6 +286,49 @@ pub fn write_file(path: &Path, j: &NewJob) -> Result<JobSpec> {
     }
 }
 
+/// Set `permission_mode` in the frontmatter of a job file (replaces the line or adds it
+/// before the closing `---`); the rest of the file stays as it is.
+pub fn set_permission_mode(path: &Path, mode: &str) -> Result<JobSpec> {
+    if !crate::permission::MODES.contains(&mode) {
+        bail!("invalid permission_mode '{mode}'");
+    }
+    let text = std::fs::read_to_string(path).with_context(|| format!("cannot read {}", path.display()))?;
+    let updated = set_frontmatter_key(&text, "permission_mode", mode).ok_or_else(|| anyhow!("{} has no frontmatter", path.display()))?;
+    std::fs::write(path, &updated)?;
+    match parse(path) {
+        Ok(spec) => Ok(spec),
+        Err(e) => {
+            let _ = std::fs::write(path, &text);
+            Err(e)
+        }
+    }
+}
+
+fn set_frontmatter_key(text: &str, key: &str, value: &str) -> Option<String> {
+    let bom = if text.starts_with('\u{feff}') { "\u{feff}" } else { "" };
+    let t = &text[bom.len()..];
+    let rest = t.strip_prefix("---")?;
+    let end = rest.find("\n---")?;
+    let (head, tail) = (&rest[..end], &rest[end..]);
+    let prefix = format!("{key}:");
+    let mut found = false;
+    let mut lines: Vec<String> = head
+        .split('\n')
+        .map(|l| {
+            if !found && l.trim_start().starts_with(&prefix) {
+                found = true;
+                format!("{key}: {value}")
+            } else {
+                l.to_string()
+            }
+        })
+        .collect();
+    if !found {
+        lines.push(format!("{key}: {value}"));
+    }
+    Some(format!("{bom}---{}{tail}", lines.join("\n")))
+}
+
 /// Free file name for a new job in `<project>/.codecraft/jobs/`.
 pub fn new_job_path(project: &Path, name: &str) -> PathBuf {
     let dir = project.join(".codecraft/jobs");
@@ -446,6 +491,12 @@ mod tests {
         let s = parse(&p).unwrap();
         assert_eq!((s.name.as_str(), s.schedule.as_str(), s.agent.as_str(), s.permission_mode.as_str()), ("Nightly", "0 3 * * *", "build", "auto"));
         assert_eq!(job_cwd(&p, &s), dir);
+        // Added when missing, replaced when present; comments and the prompt stay.
+        assert_eq!(set_permission_mode(&p, "bypass").unwrap().permission_mode, "bypass");
+        std::fs::write(&p, "---\nname: N\npermission_mode: auto   # comment\nschedule: \"0 3 * * *\"\n---\nPrompt\n---\nmore\n").unwrap();
+        assert_eq!(set_permission_mode(&p, "accept_edits").unwrap().permission_mode, "accept_edits");
+        assert_eq!(std::fs::read_to_string(&p).unwrap(), "---\nname: N\npermission_mode: accept_edits\nschedule: \"0 3 * * *\"\n---\nPrompt\n---\nmore\n");
+        assert!(set_permission_mode(&p, "yolo").is_err());
         std::fs::remove_dir_all(&dir).unwrap();
     }
 }

server/src/runner.rs

@@ -705,6 +705,7 @@ fn create_child(app: &Arc<App>, ctx: &ToolCtx, agent_name: &str, description: &s
         archived: false,
         folder: None,
         instructions: String::new(),
+        telegram_quiet: false,
     };
     let child = app.save_session(child)?;
     let msg = Message::new(Role::User, vec![Part::Text { text: prompt }]);

server/src/telegram.rs

@@ -538,6 +538,8 @@ async fn new_session(app: &Arc<App>, u: &User, bot: &Bot, chat: i64, arg: &str,
         archived: false,
         folder: None,
         instructions: String::new(),
+        // Started from Telegram: keeps reporting there after switching to another chat.
+        telegram_quiet: false,
     })?;
     update(app, &u.id, |st| st.session = Some(s.id.clone()));
     bot.send(chat, &format!("{} <b>{}</b> · {} · {}", tr(de, "Neue Sitzung", "New session"), esc(&s.cwd), esc(&s.agent), esc(&s.model)), None).await?;
@@ -869,6 +871,17 @@ async fn listen(app: Arc<App>) {
         let Some(chat) = st.chat_id else { continue };
         let de = german(&app, &owner);
         let is_current = st.session.as_deref() == Some(session_id.as_str());
+        // Chats with "not to Telegram": their approvals and questions stay in the web UI
+        // (subagents follow their top-level chat; the chat open in Telegram always reports).
+        if !is_current && matches!(ev, Event::PermissionRequest { .. } | Event::QuestionRequest { .. }) {
+            let root = app.root_session_id(&session_id);
+            let quiet = if st.session.as_deref() == Some(root.as_str()) {
+                false
+            } else if root == session_id { session.telegram_quiet } else { app.store.get_session(&root).ok().flatten().is_some_and(|r| r.telegram_quiet) };
+            if quiet {
+                continue;
+            }
+        }
         if let Err(e) = on_event(&app, &bot, chat, de, &session, is_current, &ev, &mut progress).await {
             tracing::debug!("telegram send: {e:#}");
         }