fix(agent-bridge): require permission for all tools in default mode

PreToolUse hook now returns 'ask' instead of empty object to bypass
SDK's built-in Allow Rules that auto-approve read-only tools (Read,
Glob, Grep, WebSearch, etc.). This ensures all tools prompt for
permission in default mode, not just write operations.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: fazxes

agent-bridge/src/agent.ts

@@ -542,9 +542,16 @@ When browser is open, you also have access to Chrome DevTools Protocol tools via
                   });
                 }
 
-                // Return empty object to continue SDK permission flow
-                // SDK will check Deny Rules → Allow Rules → Ask Rules → Permission Mode → canUseTool
-                return Promise.resolve({});
+                // Return 'ask' to force ALL tools through canUseTool callback
+                // This bypasses SDK's built-in Allow Rules that auto-approve read-only tools
+                // (Read, Glob, Grep, WebSearch, etc.)
+                return Promise.resolve({
+                  hookSpecificOutput: {
+                    hookEventName: 'PreToolUse' as const,
+                    permissionDecision: 'ask' as const,
+                    updatedInput: toolInput,
+                  },
+                });
               },
             ],
           },