diff --git a/packages/ui/src/components/instance/instance-shell2.tsx b/packages/ui/src/components/instance/instance-shell2.tsx
index 454ffdf0..6931ef8f 100644
--- a/packages/ui/src/components/instance/instance-shell2.tsx
+++ b/packages/ui/src/components/instance/instance-shell2.tsx
@@ -50,6 +50,8 @@ import InstanceServiceStatus from "../instance-service-status"
 import AgentSelector from "../agent-selector"
 import ModelSelector from "../model-selector"
 import CommandPalette from "../command-palette"
+import PermissionNotificationBanner from "../permission-notification-banner"
+import PermissionApprovalModal from "../permission-approval-modal"
 import Kbd from "../kbd"
 import { TodoListView } from "../tool-call/renderers/todo"
 import ContextUsagePanel from "../session/context-usage-panel"
@@ -141,6 +143,7 @@ const InstanceShell2: Component<InstanceShellProps> = (props) => {
   ])
   const [selectedBackgroundProcess, setSelectedBackgroundProcess] = createSignal<BackgroundProcess | null>(null)
   const [showBackgroundOutput, setShowBackgroundOutput] = createSignal(false)
+  const [permissionModalOpen, setPermissionModalOpen] = createSignal(false)
 
   const messageStore = createMemo(() => messageStoreBus.getOrCreate(props.instance.id))
 
@@ -654,7 +657,7 @@ const InstanceShell2: Component<InstanceShellProps> = (props) => {
   })
 
   type DrawerViewState = "pinned" | "floating-open" | "floating-closed"
- 
+
 
   const leftDrawerState = createMemo<DrawerViewState>(() => {
     if (leftPinned()) return "pinned"
@@ -695,7 +698,7 @@ const InstanceShell2: Component<InstanceShellProps> = (props) => {
 
 
 
-   const pinLeftDrawer = () => {
+  const pinLeftDrawer = () => {
     blurIfInside(leftDrawerContentEl())
     batch(() => {
       setLeftPinned(true)
@@ -814,18 +817,18 @@ const InstanceShell2: Component<InstanceShellProps> = (props) => {
             </Show>
           </div>
         </div>
-          <div class="flex items-center gap-2">
-            <Show when={!isPhoneLayout()}>
-              <IconButton
-                size="small"
-                color="inherit"
-                aria-label={leftPinned() ? "Unpin left drawer" : "Pin left drawer"}
-                onClick={() => (leftPinned() ? unpinLeftDrawer() : pinLeftDrawer())}
-              >
-                {leftPinned() ? <PushPinIcon fontSize="small" /> : <PushPinOutlinedIcon fontSize="small" />}
-              </IconButton>
-            </Show>
-          </div>
+        <div class="flex items-center gap-2">
+          <Show when={!isPhoneLayout()}>
+            <IconButton
+              size="small"
+              color="inherit"
+              aria-label={leftPinned() ? "Unpin left drawer" : "Pin left drawer"}
+              onClick={() => (leftPinned() ? unpinLeftDrawer() : pinLeftDrawer())}
+            >
+              {leftPinned() ? <PushPinIcon fontSize="small" /> : <PushPinOutlinedIcon fontSize="small" />}
+            </IconButton>
+          </Show>
+        </div>
 
       </div>
 
@@ -1240,6 +1243,13 @@ const InstanceShell2: Component<InstanceShellProps> = (props) => {
                     >
                       <span class="status-dot" />
                     </span>
+
+                    <div style={{ flex: "0 0 auto", display: "flex", "align-items": "center" }}>
+                      <PermissionNotificationBanner
+                        instanceId={props.instance.id}
+                        onClick={() => setPermissionModalOpen(true)}
+                      />
+                    </div>
                   </div>
 
                   <IconButton
@@ -1268,46 +1278,53 @@ const InstanceShell2: Component<InstanceShellProps> = (props) => {
               </div>
             }
           >
-             <div class="session-toolbar-left flex items-center gap-3 min-w-0">
-               <IconButton
-                 ref={setLeftToggleButtonEl}
-                 color="inherit"
-                 onClick={handleLeftAppBarButtonClick}
-                 aria-label={leftAppBarButtonLabel()}
-                 size="small"
-                 aria-expanded={leftDrawerState() !== "floating-closed"}
-                 disabled={leftDrawerState() === "pinned"}
-               >
-                 {leftAppBarButtonIcon()}
-               </IconButton>
+            <div class="session-toolbar-left flex items-center gap-3 min-w-0">
+              <IconButton
+                ref={setLeftToggleButtonEl}
+                color="inherit"
+                onClick={handleLeftAppBarButtonClick}
+                aria-label={leftAppBarButtonLabel()}
+                size="small"
+                aria-expanded={leftDrawerState() !== "floating-closed"}
+                disabled={leftDrawerState() === "pinned"}
+              >
+                {leftAppBarButtonIcon()}
+              </IconButton>
 
-               <Show when={!showingInfoView()}>
-                 <div class="inline-flex items-center gap-1 rounded-full border border-base px-2 py-0.5 text-xs text-primary">
-                   <span class="uppercase text-[10px] tracking-wide text-primary/70">Used</span>
-                   <span class="font-semibold text-primary">{formattedUsedTokens()}</span>
-                 </div>
-                 <div class="inline-flex items-center gap-1 rounded-full border border-base px-2 py-0.5 text-xs text-primary">
-                   <span class="uppercase text-[10px] tracking-wide text-primary/70">Avail</span>
-                   <span class="font-semibold text-primary">{formattedAvailableTokens()}</span>
-                 </div>
-               </Show>
-             </div>
+              <Show when={!showingInfoView()}>
+                <div class="inline-flex items-center gap-1 rounded-full border border-base px-2 py-0.5 text-xs text-primary">
+                  <span class="uppercase text-[10px] tracking-wide text-primary/70">Used</span>
+                  <span class="font-semibold text-primary">{formattedUsedTokens()}</span>
+                </div>
+                <div class="inline-flex items-center gap-1 rounded-full border border-base px-2 py-0.5 text-xs text-primary">
+                  <span class="uppercase text-[10px] tracking-wide text-primary/70">Avail</span>
+                  <span class="font-semibold text-primary">{formattedAvailableTokens()}</span>
+                </div>
+              </Show>
+            </div>
 
 
-              <div class="session-toolbar-center flex-1 flex items-center justify-center gap-2 min-w-[160px]">
-                <button
-                  type="button"
-                  class="connection-status-button px-2 py-0.5 text-xs"
-                  onClick={handleCommandPaletteClick}
-                  aria-label="Open command palette"
-                  style={{ flex: "0 0 auto", width: "auto" }}
-                >
-                  Command Palette
-                </button>
-                <span class="connection-status-shortcut-hint">
-                  <Kbd shortcut="cmd+shift+p" />
-                </span>
+            <div class="session-toolbar-center flex-1 flex items-center justify-center gap-2 min-w-[160px]">
+              <button
+                type="button"
+                class="connection-status-button px-2 py-0.5 text-xs"
+                onClick={handleCommandPaletteClick}
+                aria-label="Open command palette"
+                style={{ flex: "0 0 auto", width: "auto" }}
+              >
+                Command Palette
+              </button>
+              <span class="connection-status-shortcut-hint">
+                <Kbd shortcut="cmd+shift+p" />
+              </span>
+
+              <div style={{ flex: "0 0 auto", display: "flex", "align-items": "center" }}>
+                <PermissionNotificationBanner
+                  instanceId={props.instance.id}
+                  onClick={() => setPermissionModalOpen(true)}
+                />
               </div>
+            </div>
 
 
             <div class="session-toolbar-right flex items-center gap-3">
@@ -1429,6 +1446,12 @@ const InstanceShell2: Component<InstanceShellProps> = (props) => {
         process={selectedBackgroundProcess()}
         onClose={closeBackgroundOutput}
       />
+
+      <PermissionApprovalModal
+        instanceId={props.instance.id}
+        isOpen={permissionModalOpen()}
+        onClose={() => setPermissionModalOpen(false)}
+      />
     </>
   )
 }
diff --git a/packages/ui/src/components/permission-approval-modal.tsx b/packages/ui/src/components/permission-approval-modal.tsx
new file mode 100644
index 00000000..24e701dd
--- /dev/null
+++ b/packages/ui/src/components/permission-approval-modal.tsx
@@ -0,0 +1,219 @@
+import { Show, createSignal, createMemo, createEffect, onCleanup, type Component } from "solid-js"
+import type { PermissionRequestLike } from "../types/permission"
+import { getPermissionSessionId, getPermissionKind, getPermissionDisplayTitle } from "../types/permission"
+import { getPermissionQueue, activePermissionId, sendPermissionResponse } from "../stores/instances"
+import { ToolCallDiffViewer } from "./diff-viewer"
+import { useTheme } from "../lib/theme"
+import { getRelativePath } from "./tool-call/utils"
+import { getLogger } from "../lib/logger"
+
+const log = getLogger("session")
+
+interface PermissionApprovalModalProps {
+  instanceId: string
+  isOpen: boolean
+  onClose: () => void
+}
+
+const PermissionApprovalModal: Component<PermissionApprovalModalProps> = (props) => {
+  const { isDark } = useTheme()
+  const [submitting, setSubmitting] = createSignal(false)
+  const [error, setError] = createSignal<string | null>(null)
+
+  const queue = createMemo(() => getPermissionQueue(props.instanceId))
+  const activePermId = createMemo(() => activePermissionId().get(props.instanceId) ?? null)
+  
+  const activePermission = createMemo((): PermissionRequestLike | null => {
+    const id = activePermId()
+    if (!id) return null
+    return queue().find((p) => p.id === id) ?? null
+  })
+
+  const hasActivePermission = createMemo(() => activePermission() !== null)
+
+  createEffect(() => {
+    const permission = activePermission()
+    if (!permission) {
+      setSubmitting(false)
+      setError(null)
+    }
+  })
+
+  // Keyboard shortcuts
+  createEffect(() => {
+    if (!props.isOpen || !hasActivePermission()) return
+
+    const handler = (event: KeyboardEvent) => {
+      if (submitting()) return
+      
+      if (event.key === "Enter") {
+        event.preventDefault()
+        handleResponse("once")
+      } else if (event.key === "a" || event.key === "A") {
+        event.preventDefault()
+        handleResponse("always")
+      } else if (event.key === "d" || event.key === "D") {
+        event.preventDefault()
+        handleResponse("reject")
+      } else if (event.key === "Escape") {
+        event.preventDefault()
+        props.onClose()
+      }
+    }
+
+    document.addEventListener("keydown", handler)
+    onCleanup(() => document.removeEventListener("keydown", handler))
+  })
+
+  async function handleResponse(response: "once" | "always" | "reject") {
+    const permission = activePermission()
+    if (!permission) return
+
+    setSubmitting(true)
+    setError(null)
+
+    try {
+      const sessionId = getPermissionSessionId(permission) || ""
+      await sendPermissionResponse(props.instanceId, sessionId, permission.id, response)
+      
+      // Wait a moment for queue to update before closing
+      setTimeout(() => {
+        const remaining = getPermissionQueue(props.instanceId)
+        if (remaining.length === 0) {
+          props.onClose()
+        }
+      }, 100)
+    } catch (err) {
+      log.error("Failed to send permission response", err)
+      setError(err instanceof Error ? err.message : "Failed to send response")
+    } finally {
+      setSubmitting(false)
+    }
+  }
+
+  function handleBackdropClick(event: MouseEvent) {
+    if (event.target === event.currentTarget) {
+      props.onClose()
+    }
+  }
+
+  const diffPayload = createMemo(() => {
+    const permission = activePermission()
+    if (!permission) return null
+
+    const metadata = ((permission as any).metadata || {}) as Record<string, unknown>
+    const diffValue = typeof metadata.diff === "string" ? metadata.diff : null
+    if (!diffValue || diffValue.trim().length === 0) return null
+
+    const diffPath = 
+      typeof metadata.filePath === "string" ? metadata.filePath :
+      typeof metadata.path === "string" ? metadata.path :
+      undefined
+
+    return { diffText: diffValue, filePath: diffPath }
+  })
+
+  return (
+    <Show when={props.isOpen}>
+      <div class="permission-approval-modal-backdrop" onClick={handleBackdropClick}>
+        <div class="permission-approval-modal" role="dialog" aria-modal="true" aria-labelledby="permission-modal-title">
+          <Show when={hasActivePermission()} fallback={
+            <div class="permission-modal-empty">
+              <p class="text-center text-gray-500">No pending permissions</p>
+            </div>
+          }>
+            <div class="permission-modal-header">
+              <h2 id="permission-modal-title" class="permission-modal-title">
+                Permission Required
+              </h2>
+              <Show when={queue().length > 1}>
+                <span class="permission-modal-count">
+                  {queue().indexOf(activePermission()!) + 1} of {queue().length}
+                </span>
+              </Show>
+            </div>
+
+            <div class="permission-modal-body">
+              <div class="permission-modal-type">
+                {getPermissionKind(activePermission())}
+              </div>
+              <div class="permission-modal-message">
+                <code>{getPermissionDisplayTitle(activePermission())}</code>
+              </div>
+
+              <Show when={diffPayload()}>
+                {(payload) => (
+                  <div class="permission-modal-diff">
+                    <div class="permission-modal-diff-label">
+                      Requested changes · {payload().filePath ? getRelativePath(payload().filePath!) : ""}
+                    </div>
+                    <div class="permission-modal-diff-viewer">
+                      <ToolCallDiffViewer
+                        diffText={payload().diffText}
+                        filePath={payload().filePath}
+                        theme={isDark() ? "dark" : "light"}
+                        mode="split"
+                        onRendered={() => {}}
+                      />
+                    </div>
+                  </div>
+                )}
+              </Show>
+
+              <Show when={error()}>
+                <div class="permission-modal-error" role="alert">
+                  {error()}
+                </div>
+              </Show>
+            </div>
+
+            <div class="permission-modal-footer">
+              <div class="permission-modal-buttons">
+                <button
+                  type="button"
+                  class="permission-modal-button permission-modal-button-once"
+                  disabled={submitting()}
+                  onClick={() => handleResponse("once")}
+                >
+                  Allow Once
+                </button>
+                <button
+                  type="button"
+                  class="permission-modal-button permission-modal-button-always"
+                  disabled={submitting()}
+                  onClick={() => handleResponse("always")}
+                >
+                  Always Allow
+                </button>
+                <button
+                  type="button"
+                  class="permission-modal-button permission-modal-button-deny"
+                  disabled={submitting()}
+                  onClick={() => handleResponse("reject")}
+                >
+                  Deny
+                </button>
+              </div>
+              <div class="permission-modal-shortcuts">
+                <span class="permission-modal-shortcut">
+                  <kbd class="kbd">Enter</kbd> Allow once
+                </span>
+                <span class="permission-modal-shortcut">
+                  <kbd class="kbd">A</kbd> Always
+                </span>
+                <span class="permission-modal-shortcut">
+                  <kbd class="kbd">D</kbd> Deny
+                </span>
+                <span class="permission-modal-shortcut">
+                  <kbd class="kbd">Esc</kbd> Close
+                </span>
+              </div>
+            </div>
+          </Show>
+        </div>
+      </div>
+    </Show>
+  )
+}
+
+export default PermissionApprovalModal
diff --git a/packages/ui/src/components/permission-notification-banner.tsx b/packages/ui/src/components/permission-notification-banner.tsx
new file mode 100644
index 00000000..412de5f9
--- /dev/null
+++ b/packages/ui/src/components/permission-notification-banner.tsx
@@ -0,0 +1,57 @@
+import { Show, createMemo, type Component } from "solid-js"
+import { getPermissionQueueLength } from "../stores/instances"
+import { isElectronHost } from "../lib/runtime-env"
+
+interface PermissionNotificationBannerProps {
+  instanceId: string
+  onClick: () => void
+}
+
+const PermissionNotificationBanner: Component<PermissionNotificationBannerProps> = (props) => {
+  const queueLength = createMemo(() => getPermissionQueueLength(props.instanceId))
+  const hasPermissions = createMemo(() => queueLength() > 0)
+  const isElectron = isElectronHost()
+
+  return (
+    <Show when={hasPermissions()}>
+      {/* Electron: Full banner with text */}
+      <Show when={isElectron}>
+        <button
+          type="button"
+          class="permission-notification-banner"
+          onClick={props.onClick}
+          aria-label={`${queueLength()} permission${queueLength() > 1 ? "s" : ""} pending approval`}
+        >
+          <span class="permission-notification-icon" aria-hidden="true">
+            ⚠️
+          </span>
+          <span class="permission-notification-text">
+            Approval Required
+          </span>
+          <Show when={queueLength() > 1}>
+            <span class="permission-notification-count" aria-label={`${queueLength()} permissions`}>
+              {queueLength()}
+            </span>
+          </Show>
+        </button>
+      </Show>
+
+      {/* Web: Compact indicator button */}
+      <Show when={!isElectron}>
+        <button
+          type="button"
+          class="permission-indicator-button"
+          onClick={props.onClick}
+          aria-label={`${queueLength()} permission${queueLength() > 1 ? "s" : ""} pending approval. Click to review.`}
+          title={`${queueLength()} permission${queueLength() > 1 ? "s" : ""} pending approval`}
+        >
+          <span class="permission-indicator-badge">
+            {queueLength() > 9 ? "9+" : queueLength()}
+          </span>
+        </button>
+      </Show>
+    </Show>
+  )
+}
+
+export default PermissionNotificationBanner
diff --git a/packages/ui/src/styles/components/permission-notification.css b/packages/ui/src/styles/components/permission-notification.css
new file mode 100644
index 00000000..912c3398
--- /dev/null
+++ b/packages/ui/src/styles/components/permission-notification.css
@@ -0,0 +1,395 @@
+/* Permission Notification Banner */
+.permission-notification-banner {
+  display: flex;
+  align-items: center;
+  gap: var(--space-sm);
+  padding: 0.375rem 0.75rem;
+  background: linear-gradient(135deg, var(--status-warning) 0%, color-mix(in srgb, var(--status-warning) 85%, #000) 100%);
+  color: var(--text-inverted);
+  border: 1px solid color-mix(in srgb, var(--status-warning) 70%, #000);
+  border-radius: var(--radius-sm);
+  font-size: var(--font-size-sm);
+  font-weight: var(--font-weight-semibold);
+  cursor: pointer;
+  transition: all 0.2s ease;
+  box-shadow: 0 2px 4px color-mix(in srgb, var(--status-warning) 30%, transparent);
+  animation: permission-pulse 2s ease-in-out infinite;
+}
+
+.permission-notification-banner:hover {
+  background: linear-gradient(135deg, color-mix(in srgb, var(--status-warning) 85%, #000) 0%, color-mix(in srgb, var(--status-warning) 70%, #000) 100%);
+  box-shadow: 0 4px 8px color-mix(in srgb, var(--status-warning) 40%, transparent);
+  transform: translateY(-1px);
+}
+
+.permission-notification-banner:active {
+  transform: translateY(0);
+  box-shadow: 0 2px 4px color-mix(in srgb, var(--status-warning) 30%, transparent);
+}
+
+.permission-notification-icon {
+  font-size: 1rem;
+  line-height: 1;
+  flex-shrink: 0;
+}
+
+.permission-notification-text {
+  white-space: nowrap;
+  color: inherit;
+  font-size: inherit;
+}
+
+.permission-notification-count {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  min-width: 1.25rem;
+  height: 1.25rem;
+  padding: 0 0.25rem;
+  background: color-mix(in srgb, #000 30%, transparent);
+  border-radius: var(--radius-full);
+  font-size: var(--font-size-xs);
+  font-weight: var(--font-weight-bold);
+  color: inherit;
+  flex-shrink: 0;
+}
+
+@keyframes permission-pulse {
+  0%, 100% {
+    box-shadow: 0 2px 4px color-mix(in srgb, var(--status-warning) 30%, transparent);
+  }
+  50% {
+    box-shadow: 0 2px 8px color-mix(in srgb, var(--status-warning) 60%, transparent), 0 0 16px color-mix(in srgb, var(--status-warning) 30%, transparent);
+  }
+}
+
+/* Web Permission Indicator Button (for browser-based streaming) */
+.permission-indicator-button {
+  position: relative;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 2rem;
+  height: 2rem;
+  padding: 0;
+  background: color-mix(in srgb, var(--status-warning) 15%, transparent);
+  color: var(--status-warning);
+  border: 2px solid var(--status-warning);
+  border-radius: var(--radius-full);
+  font-size: var(--font-size-sm);
+  font-weight: var(--font-weight-bold);
+  cursor: pointer;
+  transition: all 0.2s ease;
+  animation: web-permission-pulse 2s ease-in-out infinite;
+  flex-shrink: 0;
+  z-index: 10;
+  min-width: 2rem;
+  min-height: 2rem;
+  max-width: 2rem;
+  max-height: 2rem;
+}
+
+.permission-indicator-button:hover {
+  background: color-mix(in srgb, var(--status-warning) 25%, transparent);
+  box-shadow: 0 0 8px color-mix(in srgb, var(--status-warning) 50%, transparent);
+  transform: scale(1.05);
+}
+
+.permission-indicator-button:active {
+  transform: scale(0.98);
+}
+
+.permission-indicator-button:focus-visible {
+  outline: 2px solid var(--focus-ring-color);
+  outline-offset: 2px;
+}
+
+.permission-indicator-badge {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  font-size: var(--font-size-xs);
+  color: inherit;
+}
+
+@keyframes web-permission-pulse {
+  0%, 100% {
+    box-shadow: 0 0 0 0 color-mix(in srgb, var(--status-warning) 40%, transparent);
+  }
+  50% {
+    box-shadow: 0 0 0 4px color-mix(in srgb, var(--status-warning) 20%, transparent);
+  }
+}
+
+/* Ensure button visibility in web toolbars */
+@supports (display: flex) {
+  .permission-indicator-button {
+    visibility: visible;
+    opacity: 1;
+    pointer-events: auto;
+  }
+}
+
+/* Permission Approval Modal */
+.permission-approval-modal-backdrop {
+  position: fixed;
+  top: 0;
+  left: 0;
+  right: 0;
+  bottom: 0;
+  background: color-mix(in srgb, var(--text-inverted) 60%, transparent);
+  backdrop-filter: blur(4px);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  z-index: 9999;
+  padding: var(--space-lg);
+  animation: modal-backdrop-fadein 0.2s ease;
+}
+
+@keyframes modal-backdrop-fadein {
+  from {
+    opacity: 0;
+  }
+  to {
+    opacity: 1;
+  }
+}
+
+.permission-approval-modal {
+  background: var(--surface-base);
+  border: 1px solid var(--border-base);
+  border-radius: var(--radius-xl);
+  box-shadow: 0 20px 25px -5px color-mix(in srgb, #000 10%, transparent), 0 10px 10px -5px color-mix(in srgb, #000 4%, transparent);
+  max-width: 48rem;
+  width: 100%;
+  max-height: 90vh;
+  display: flex;
+  flex-direction: column;
+  animation: modal-slidein 0.3s ease;
+}
+
+@keyframes modal-slidein {
+  from {
+    opacity: 0;
+    transform: translateY(-20px) scale(0.95);
+  }
+  to {
+    opacity: 1;
+    transform: translateY(0) scale(1);
+  }
+}
+
+.permission-modal-empty {
+  padding: var(--space-xl);
+  color: var(--text-secondary);
+  text-align: center;
+}
+
+.permission-modal-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: var(--space-lg);
+  border-bottom: 1px solid var(--border-base);
+  gap: var(--space-lg);
+}
+
+.permission-modal-title {
+  font-size: var(--font-size-xl);
+  font-weight: var(--font-weight-semibold);
+  color: var(--text-primary);
+  margin: 0;
+  flex: 1;
+}
+
+.permission-modal-count {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  padding: var(--space-xs) var(--space-sm);
+  background: var(--surface-secondary);
+  border-radius: var(--radius-sm);
+  border: 1px solid var(--border-base);
+  font-size: var(--font-size-sm);
+  font-weight: var(--font-weight-medium);
+  color: var(--text-secondary);
+  white-space: nowrap;
+  flex-shrink: 0;
+}
+
+.permission-modal-body {
+  flex: 1;
+  overflow-y: auto;
+  padding: var(--space-lg);
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-lg);
+}
+
+.permission-modal-type {
+  display: inline-flex;
+  align-items: center;
+  padding: var(--space-xs) var(--space-sm);
+  background: color-mix(in srgb, var(--status-warning) 20%, transparent);
+  color: var(--status-warning);
+  border: 1px solid color-mix(in srgb, var(--status-warning) 50%, transparent);
+  border-radius: var(--radius-sm);
+  font-size: var(--font-size-xs);
+  font-weight: var(--font-weight-semibold);
+  text-transform: uppercase;
+  letter-spacing: 0.05em;
+  align-self: flex-start;
+}
+
+.permission-modal-message {
+  padding: var(--space-lg);
+  background: var(--surface-secondary);
+  border: 1px solid var(--border-base);
+  border-radius: var(--radius-md);
+  font-family: var(--font-family-mono);
+  word-break: break-word;
+}
+
+.permission-modal-message code {
+  font-family: var(--font-family-mono);
+  font-size: var(--font-size-sm);
+  color: var(--text-primary);
+}
+
+.permission-modal-diff {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-sm);
+}
+
+.permission-modal-diff-label {
+  font-size: var(--font-size-xs);
+  font-weight: var(--font-weight-semibold);
+  color: var(--text-secondary);
+  text-transform: uppercase;
+  letter-spacing: 0.05em;
+}
+
+.permission-modal-diff-viewer {
+  border: 1px solid var(--border-base);
+  border-radius: var(--radius-md);
+  overflow: hidden;
+  max-height: 24rem;
+  background: var(--surface-secondary);
+}
+
+.permission-modal-error {
+  padding: var(--space-sm) var(--space-lg);
+  background: color-mix(in srgb, var(--status-error) 20%, transparent);
+  color: var(--status-error);
+  border: 1px solid color-mix(in srgb, var(--status-error) 50%, transparent);
+  border-radius: var(--radius-md);
+  font-size: var(--font-size-sm);
+}
+
+.permission-modal-footer {
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-lg);
+  padding: var(--space-lg);
+  border-top: 1px solid var(--border-base);
+  background: var(--surface-secondary);
+}
+
+.permission-modal-buttons {
+  display: flex;
+  gap: var(--space-sm);
+  justify-content: stretch;
+}
+
+.permission-modal-button {
+  flex: 1;
+  padding: var(--button-padding-y) var(--button-padding-x);
+  border: 1px solid transparent;
+  border-radius: var(--button-radius);
+  font-size: var(--font-size-sm);
+  font-weight: var(--font-weight-semibold);
+  cursor: pointer;
+  transition: all 0.15s ease;
+  font-family: var(--font-family-sans);
+}
+
+.permission-modal-button:disabled {
+  opacity: 0.5;
+  cursor: not-allowed;
+}
+
+.permission-modal-button:focus-visible {
+  outline: 2px solid var(--focus-ring-color);
+  outline-offset: 2px;
+}
+
+.permission-modal-button-once {
+  background: var(--accent-primary);
+  color: var(--text-inverted);
+  border-color: var(--accent-primary);
+}
+
+.permission-modal-button-once:hover:not(:disabled) {
+  background: var(--accent-hover);
+  border-color: var(--accent-hover);
+}
+
+.permission-modal-button-always {
+  background: var(--status-success);
+  color: var(--text-inverted);
+  border-color: var(--status-success);
+}
+
+.permission-modal-button-always:hover:not(:disabled) {
+  background: color-mix(in srgb, var(--status-success) 85%, #000);
+  border-color: color-mix(in srgb, var(--status-success) 85%, #000);
+}
+
+.permission-modal-button-deny {
+  background: var(--status-error);
+  color: var(--text-inverted);
+  border-color: var(--status-error);
+}
+
+.permission-modal-button-deny:hover:not(:disabled) {
+  background: color-mix(in srgb, var(--status-error) 85%, #000);
+  border-color: color-mix(in srgb, var(--status-error) 85%, #000);
+}
+
+.permission-modal-shortcuts {
+  display: flex;
+  gap: var(--space-lg);
+  justify-content: center;
+  flex-wrap: wrap;
+}
+
+.permission-modal-shortcut {
+  display: flex;
+  align-items: center;
+  gap: var(--space-sm);
+  font-size: var(--font-size-xs);
+  color: var(--text-secondary);
+}
+
+.permission-modal-shortcut kbd {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  min-width: 1.5rem;
+  height: 1.5rem;
+  padding: 0 0.375rem;
+  background: var(--kbd-bg);
+  border: 1px solid var(--kbd-border);
+  color: var(--kbd-text);
+  border-radius: var(--radius-xs);
+  font-family: var(--font-family-mono);
+  font-size: var(--font-size-xs);
+  font-weight: var(--font-weight-semibold);
+  box-shadow: inset 0 -2px 0 color-mix(in srgb, #000 10%, transparent);
+}
+
+/* Dark theme adjustments - already handled by CSS tokens above */
+/* The token system automatically applies correct colors for dark mode via
+   :root @media (prefers-color-scheme: dark) definitions */
diff --git a/packages/ui/src/styles/controls.css b/packages/ui/src/styles/controls.css
index e7b71479..44f02851 100644
--- a/packages/ui/src/styles/controls.css
+++ b/packages/ui/src/styles/controls.css
@@ -6,3 +6,4 @@
 @import "./components/env-vars.css";
 @import "./components/directory-browser.css";
 @import "./components/remote-access.css";
+@import "./components/permission-notification.css";