fix(vscode): restore permission auto-accept replies

Route live VS Code permission requests directly to directory-scoped permission replies instead of blocking on the refresh-only state preflight.

When auto-accept is enabled after prompts are already visible, reply to the authoritative local requests first, then reconcile and deduplicate the server pending list. Keep state verification for reconnect and refresh flows so stale resolved requests are not resurrected.

Add regression coverage for live events, existing prompts, directory routing, retry behavior, stale reconciliation, and network failures.

packages/ui/src/sync/session-actions.test.ts

@@ -926,6 +926,18 @@ describe("respondToPermission passes directory", () => {
     expect(replyCalls[0].params.reply).toBe("reject")
     expect(replyCalls[0].params.directory).toBe("/fallback/dir")
   })
+
+  test("uses an explicit event directory before incomplete local routing state", async () => {
+    const childStores = createChildStores([])
+
+    const { setActionRefs, respondToPermission } = await import("./session-actions")
+    setActionRefs(mockSdk as unknown as OpencodeClient, childStores, () => "/stale/current")
+
+    await respondToPermission("unknown-session", "perm-event", "once", "/event/project")
+
+    expect(scopedClientDirectories).toContain("/event/project")
+    expect(replyCalls[0].params.directory).toBe("/event/project")
+  })
 })
 
 describe("revertToMessage passes session directory", () => {