feat: auto approve parallel read only builtin tools

[uinstinct]

Description

Previously when calling tools in parallel, all tool required approval. This PR changes that behaviour by when calling tools in parallel, the readonly builtin tools which were auto approved get called without waiting.

closes CON-3922

AI Code Review

• Team members only: AI review runs automatically when PR is opened or marked ready for review
• Team members can also trigger a review by commenting @continue-review

Checklist

• [] I've read the contributing guide
• [] The relevant docs, if any, have been updated or created
• [] The relevant tests, if any, have been updated or created

Screen recording or screenshot

before

after

Tests

[ What tests were added or updated to ensure the changes work as expected? ]

---

Summary by cubic

Auto-approve and immediately run read-only built-in tools during parallel tool calls. Addresses CON-3922 and removes approval delays and UI flicker for safe built-ins.

• New Features
  • Auto-exec built-in read-only tools marked allowedWithoutPermission during parallel runs.
  • Filters by BUILT_IN_GROUP_NAME and tool.readonly; dispatches with isAutoApproved: true.
  • Updates stream/UI state to avoid flicker while other tools wait for approval.

^{Written for commit 2024317. Summary will update automatically on new commits.}

[continue]

Keep this PR in a mergeable state →

Learn more

---

All Green is an AI agent that automatically:

✅ Addresses code review comments

✅ Fixes failing CI checks

✅ Resolves merge conflicts

[continue]

Reviewed documentation - no updates needed.

This PR optimizes parallel tool call execution by auto-executing read-only built-in tools immediately rather than waiting for write tool approvals. This is an internal performance improvement that reduces UI flicker and wait times.

The existing documentation in:

• docs/ide-extensions/agent/how-it-works.mdx
• docs/ide-extensions/agent/quick-start.mdx
• docs/ide-extensions/agent/how-to-customize.mdx

Already accurately describes tool permissions and approval behavior at the appropriate level of detail. This optimization doesn't change the user-facing permission model or require any new configuration.

[cubic-dev-ai]

No issues found across 1 file

[RomneyDa]

@uinstinct I think this implementation is really clean, should be good on the thunk side. I noticed a sort-of bug in the screenshot which may or may not be related: it says "Pending 2" calls when it has already called the read only one. Could you check on that?

[uinstinct]

@uinstinct I think this implementation is really clean, should be good on the thunk side. I noticed a sort-of bug in the screenshot which may or may not be related: it says "Pending 2" calls when it has already called the read only one. Could you check on that?

nice eyes 👀! fixed

[sestinj]

🎉 This PR is included in version 1.35.0 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀

[sestinj]

🎉 This PR is included in version 1.7.0 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀