fix: wire /yolo command handler and apply yolo_mode from settings

The yolo_mode setting field existed in core/src/lib.rs with serde and
merge logic, and docs described the /yolo command, but the actual TUI
command handler was missing and the setting was never read at startup.

- Add /yolo command handler in app.rs (on/off/status/toggle)
- Wire yolo_mode from settings.json into permission_mode at startup
- Add test for /yolo command toggling permission_mode

Author: alecuba16

src-rust/crates/cli/src/main.rs

@@ -547,6 +547,10 @@ async fn main() -> anyhow::Result<()> {
             );
         }
         config.permission_mode = PermissionMode::BypassPermissions;
+    } else if settings.config.yolo_mode {
+        // Persistent YOLO mode from settings.json — same effect as the CLI
+        // flag but without the root/sudo guard (settings are user-controlled).
+        config.permission_mode = PermissionMode::BypassPermissions;
     } else {
         config.permission_mode = cli.permission_mode.into();
     }

src-rust/crates/tui/src/app.rs

@@ -102,6 +102,7 @@ const PROMPT_SLASH_COMMANDS: &[(&str, &str)] = &[
     ("upgrade", "Check for updates and upgrade to the latest version"),
     ("vim", "Toggle vim keybindings"),
     ("voice", "Toggle voice input mode"),
+    ("yolo", "Toggle YOLO mode (skip all permission prompts)"),
 ];
 
 fn help_command_category(name: &str) -> &'static str {
@@ -2220,6 +2221,51 @@ impl App {
             }
             return true;
         }
+        if cmd == "yolo" {
+            let mut s = claurst_core::Settings::load_sync().unwrap_or_default();
+            let sub = args.trim();
+            match sub {
+                "on" | "enable" => {
+                    s.config.yolo_mode = true;
+                    let _ = s.save_sync();
+                    self.config.permission_mode =
+                        claurst_core::config::PermissionMode::BypassPermissions;
+                    self.status_message =
+                        Some("YOLO mode enabled. All tool calls auto-approved.".to_string());
+                }
+                "off" | "disable" => {
+                    s.config.yolo_mode = false;
+                    let _ = s.save_sync();
+                    self.config.permission_mode =
+                        claurst_core::config::PermissionMode::Default;
+                    self.status_message = Some("YOLO mode disabled.".to_string());
+                }
+                "status" => {
+                    self.status_message = Some(format!(
+                        "YOLO mode: {}",
+                        if s.config.yolo_mode { "ON" } else { "OFF" },
+                    ));
+                }
+                "" => {
+                    s.config.yolo_mode = !s.config.yolo_mode;
+                    let _ = s.save_sync();
+                    self.config.permission_mode = if s.config.yolo_mode {
+                        claurst_core::config::PermissionMode::BypassPermissions
+                    } else {
+                        claurst_core::config::PermissionMode::Default
+                    };
+                    self.status_message = Some(format!(
+                        "YOLO mode {}.",
+                        if s.config.yolo_mode { "enabled" } else { "disabled" }
+                    ));
+                }
+                _ => {
+                    self.status_message =
+                        Some("Usage: /yolo [on|off|status] (no arg toggles).".to_string());
+                }
+            }
+            return true;
+        }
         self.intercept_slash_command(cmd)
     }
 
@@ -8466,4 +8512,38 @@ mod tests {
         assert!(app.selection_anchor.is_none());
         assert!(app.selection_focus.is_none());
     }
+
+    #[test]
+    fn yolo_command_toggles_permission_mode() {
+        let mut app = make_app();
+        // Default permission mode.
+        assert_eq!(
+            app.config.permission_mode,
+            claurst_core::config::PermissionMode::Default
+        );
+        // /yolo on sets bypass mode.
+        assert!(app.intercept_slash_command_with_args("yolo", "on"));
+        assert_eq!(
+            app.config.permission_mode,
+            claurst_core::config::PermissionMode::BypassPermissions
+        );
+        assert!(app.status_message.as_deref().unwrap().contains("enabled"));
+        // /yolo off resets to default.
+        assert!(app.intercept_slash_command_with_args("yolo", "off"));
+        assert_eq!(
+            app.config.permission_mode,
+            claurst_core::config::PermissionMode::Default
+        );
+        assert!(app.status_message.as_deref().unwrap().contains("disabled"));
+        // /yolo on again.
+        assert!(app.intercept_slash_command_with_args("yolo", "on"));
+        assert_eq!(
+            app.config.permission_mode,
+            claurst_core::config::PermissionMode::BypassPermissions
+        );
+        assert!(app.status_message.as_deref().unwrap().contains("enabled"));
+        // /yolo status shows current state.
+        assert!(app.intercept_slash_command_with_args("yolo", "status"));
+        assert!(app.status_message.as_deref().unwrap().contains("ON"));
+    }
 }