fix: persist task permissions in HistoryItem and add ReDoS mitigation

[roomote-v0]

Related GitHub Issue

Addresses remaining considerations from PR #12337 (Phase 3b), linked to Issue #12330.

Description

This PR attempts to address the two remaining considerations raised in the PR #12337 review before merging:

1. Permission persistence in HistoryItem -- taskPermissions are now saved to disk as part of the task history, so they survive VS Code restarts.
2. ReDoS mitigation for model-provided regex patterns -- An isSafeRegex() heuristic rejects patterns with nested quantifiers and excessive length at both parse time (Zod schema) and runtime (matchesAnyPattern).

Feedback and guidance are welcome.

Changes

File	Change
packages/types/src/task-permissions.ts	Add isSafeRegex() heuristic, apply as Zod refinement and runtime guard in matchesAnyPattern
packages/types/src/history.ts	Add optional taskPermissions field to historyItemSchema
src/core/task-persistence/taskMetadata.ts	Accept and persist taskPermissions in metadata
src/core/task/Task.ts	Pass serializable permission fields to taskMetadata() on save
src/core/webview/ClineProvider.ts	Restore permissions via toTaskPermissions() in createTaskWithHistoryItem
packages/types/src/__tests__/task-permissions.spec.ts	32 new tests for isSafeRegex, schema validation, runtime safety, persistence round-trip

Recommendation

Both fixes should be included before merging PR #12337:

• Permission persistence is low-effort, architecturally clean, and prevents a class of bugs when Phase 3c/3d introduces longer-lived subtasks.
• ReDoS mitigation is also low-effort and eliminates a known attack surface. The heuristic is conservative (rejects nested quantifiers and long patterns) with clear error messages so the model can self-correct.

Test Procedure

• 53 tests pass in packages/types (32 new + 21 existing)
• 13 tests pass in enforcement spec (all existing)
• 40 tests pass in validateToolUse + newTaskTool specs (all existing)
• Full type-check and lint pass across all 10 packages

Pre-Submission Checklist

• Issue Linked: Related to [ENHANCEMENT] Support parallel execution of specialized agents and improve context handoff between modes #12330 / PR feat: model-driven permission control for subtasks (Phase 3b) #12337
• Scope: Changes are focused on the two remaining considerations
• Self-Review: Performed
• Testing: 32 new tests added
• Contribution Guidelines: Read and agree

Interactively review PR in Roo Code Cloud

[roomote-v0]

Closing this PR as requested -- the persistence and ReDoS fixes are already included in #12337.