Remove --dangerously-skip-permissions from internal calls
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 12
- Forks
- 1
- Avg merge
- 7h 13m
- Merged PRs (30d)
- 31
Description
Problem
--dangerously-skip-permissions is passed in 10 places (entrypoint.sh, run-session.sh, wclaude calls, bot core.py, bashrc wolt() function, create-wolt skill). But the config already handles bypass:
.claude.jsonhasbypassPermissionsAccepted: truesettings.jsonhasskipDangerousModePermissionPrompt: true
The flag is redundant — a belt-and-suspenders holdover from before config-based bypass was set up.
Proposal
- Verify that
wclaudesessions work without the flag (config-based bypass is sufficient) - Strip
--dangerously-skip-permissionsfrom all internal callers - Keep
wclaudeas the single entrypoint — it already sets HOME, copies creds, trusts dirs - If bypass needs to be explicit, have
wclaudeinject it automatically so callers don't need to know
Files to update
container/entrypoint.sh(2 occurrences)container/entrypoint_setup.py(2 occurrences in write_bashrc)container/bin/run-session.sh(1)container/bot/core.py(1)container/skills/woltspace-create-wolt/SKILL.md(1)container/cron/digest.mjs(1)container/hooks/run-session.sh(1)woltspaceCLI (1)
🤖 Generated with Claude Code
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by checking the wclaude entrypoint and configuration, then inspect the listed occurrences in container/entrypoint.sh, container/entrypoint_setup.py, container/bin/run-session.sh, container/bot/core.py, the skill, digest.mjs, the hook, and woltspace. Verify that a wclaude session works without the flag, remove it from each internal caller, and confirm no listed occurrence remains.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, python, shell
- Domain
- cli, security, tooling
- Issue type
- Refactor
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 65/100