jerpint / jerpint/woltspace

Remove --dangerously-skip-permissions from internal calls

Open
#253 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
12
Forks
1
Avg merge
7h 13m
Merged PRs (30d)
31

Description

Problem

--dangerously-skip-permissions is passed in 10 places (entrypoint.sh, run-session.sh, wclaude calls, bot core.py, bashrc wolt() function, create-wolt skill). But the config already handles bypass:

  • .claude.json has bypassPermissionsAccepted: true
  • settings.json has skipDangerousModePermissionPrompt: true

The flag is redundant — a belt-and-suspenders holdover from before config-based bypass was set up.

Proposal

  1. Verify that wclaude sessions work without the flag (config-based bypass is sufficient)
  2. Strip --dangerously-skip-permissions from all internal callers
  3. Keep wclaude as the single entrypoint — it already sets HOME, copies creds, trusts dirs
  4. If bypass needs to be explicit, have wclaude inject it automatically so callers don't need to know

Files to update

  • container/entrypoint.sh (2 occurrences)
  • container/entrypoint_setup.py (2 occurrences in write_bashrc)
  • container/bin/run-session.sh (1)
  • container/bot/core.py (1)
  • container/skills/woltspace-create-wolt/SKILL.md (1)
  • container/cron/digest.mjs (1)
  • container/hooks/run-session.sh (1)
  • woltspace CLI (1)

🤖 Generated with Claude Code

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by checking the wclaude entrypoint and configuration, then inspect the listed occurrences in container/entrypoint.sh, container/entrypoint_setup.py, container/bin/run-session.sh, container/bot/core.py, the skill, digest.mjs, the hook, and woltspace. Verify that a wclaude session works without the flag, remove it from each internal caller, and confirm no listed occurrence remains.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, python, shell
Domain
cli, security, tooling
Issue type
Refactor
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
65/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.