feat: add auto permission mode to claude-code module

[maschwenk]

Summary

• Add auto as a valid permission_mode for the claude-code module, passing --enable-auto-mode to the CLI when selected
• Fix bypass permissions TOS prompt appearing interactively by pre-seeding bypassPermissionsModeAccepted in ~/.claude.json during install (workaround for [BUG] --dangerously-skip-permissions flag should bypass the permissions mode dialog without requiring persisted setting anthropics/claude-code#25503)
• Bump version 4.8.2 → 4.9.0

Test plan

• All 19 terraform tests pass (terraform test -verbose)
• Added test_claude_code_auto_permission_mode tftest
• Added claude-auto-permission-mode TypeScript test verifying both --permission-mode auto and --enable-auto-mode are passed
• Container test with auto mode (requires Linux/Colima)
• Verify bypass permissions TOS prompt no longer appears on task startup

🤖 Generated with Claude Code using Claude Opus 4.6

[DevelopmentCats]

Is this actually an issue?

I notice we pass the permission_mode through the start.sh script and plan seems to work perfectly fine with no prompts appearing. I am fairly positive we handle this with the internal claude configuration we do here.

[maschwenk]

When I try to use Tasks

I seem to get this when the Claude Code module boots in the Task ui. I can try to debug some more

[DevelopmentCats]

When I try to use Tasks

I seem to get this when the Claude Code module boots in the Task ui. I can try to debug some more

Which versions of Coder, and Claude-Code are you using? bypassPermissionsModeAccepted should be set to true whenever task mode is recognized by the coder exp mcp configure claude-code command that is run which can be a bit confusing since its not in the module scope.

[blinkagent]

@maschwenk The bypassPermissionsModeAccepted pre-seeding in the new accept_permission_mode function is already handled in both existing paths:

• Task reporting mode (report_tasks=true): coder exp mcp configure claude-code already sets bypassPermissionsModeAccepted = true in ~/.claude.json
• Standalone mode: configure_standalone_mode also writes it directly

So the bypass-specific part of this PR is redundant. The only net-new thing needed is autoModeAccepted = true for the new auto permission mode — and that should be added to the same places (configure_standalone_mode in install.sh, and configureClaude in cli/exp_mcp.go) rather than as a separate function that runs after report_tasks.

[DevelopmentCats]

@maschwenk The bypassPermissionsModeAccepted pre-seeding in the new accept_permission_mode function is already handled in both existing paths:

• Task reporting mode (report_tasks=true): coder exp mcp configure claude-code already sets bypassPermissionsModeAccepted = true in ~/.claude.json
• Standalone mode: configure_standalone_mode also writes it directly

So the bypass-specific part of this PR is redundant. The only net-new thing needed is autoModeAccepted = true for the new auto permission mode — and that should be added to the same places (configure_standalone_mode in install.sh, and configureClaude in cli/exp_mcp.go) rather than as a separate function that runs after report_tasks.

@maschwenk This is what I was referring to earlier when I was mentioning that this was already accounted for, but I can help try to understand why this is not working for you if you can share your coder and claude-code module and cli versions for the template

I am definitely down for adding the "auto" mode to the module though 😸

[maschwenk]

@DevelopmentCats ahhhh ok I think I see what's going on. I think one of our custom scripts must be clobbering some stuff. Ok yes I will revert all the non-auto-mode stuff. Thank you for your time!

[DevelopmentCats]

@DevelopmentCats ahhhh ok I think I see what's going on. I think one of our custom scripts must be clobbering some stuff. Ok yes I will revert all the non-auto-mode stuff. Thank you for your time!

No worries at all! I am glad I could at least convey that since the internal coder exp mcp configure logic even confuses me sometimes haha

[maschwenk]

@DevelopmentCats restricted the changes to just the auto mode stuff. Now I guess the question is should I be instead doing this in cli/exp_mcp.go for coder exp mcp configure claude-code?

[DevelopmentCats]

@DevelopmentCats restricted the changes to just the auto mode stuff. Now I guess the question is should I be instead doing this in cli/exp_mcp.go for coder exp mcp configure claude-code?

If you we didn't already do this through exp_mcp.go you probably would indeed want to add it there.

It is sometimes confusing because this is only run for task configuration, so generally we have to account for things like that in both the module and the configure command since its only run when in task mode with the command which is intentional.

[DevelopmentCats]

Also @maschwenk I am pretty sure this would be a patch version bump now if You can go ahead and update the claude versions for a patch bump in the README, and then we should be good.