Remove ReadonlyPendingPermissionsMap class and related deep cloning/freezing methods that were causing "ManagedAgent views returned by AgentManager are read-only" errors. The bug occurred because Map constructor internally calls .set() which was overridden to throw. Replace with simple shallow clones - sufficient because all consumers either read 1-2 fields or immediately serialize via toAgentPayload() which already creates safe copies. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>