From 9566986ade28989277c7fa8687bf9868e9a81e91 Mon Sep 17 00:00:00 2001
From: DannyDannyDanny <dth@taiga.ai>
Date: Sat, 18 Apr 2026 22:47:21 +0200
Subject: [PATCH] =?UTF-8?q?fix:=20move=20permission=20bypass=20to=20settin?=
 =?UTF-8?q?gs.json=20to=20avoid=20warning=20dialog=20=F0=9F=94=A7?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nixos/hosts/phantom-ship.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/nixos/hosts/phantom-ship.nix b/nixos/hosts/phantom-ship.nix
index 427b5c1..3aeb7e1 100644
--- a/nixos/hosts/phantom-ship.nix
+++ b/nixos/hosts/phantom-ship.nix
@@ -124,9 +124,9 @@ in
       WorkingDirectory = "/home/danny";
       EnvironmentFile = "/etc/claude-channels/env";
       # claude needs a PTY; wrap with script(1). /dev/null discards the typescript.
-      # --dangerously-skip-permissions: unattended use. Safe here because the bot
-      # is paired only to danny's Telegram ID (allowFrom) on a private server.
-      ExecStart = ''${pkgs.util-linux}/bin/script -qfc "${pkgs.claude-code}/bin/claude --channels plugin:telegram@claude-plugins-official --dangerously-skip-permissions" /dev/null'';
+      # Permission bypass lives in ~/.claude/settings.json (permissions.defaultMode)
+      # — using the CLI flag triggers an interactive warning dialog at startup.
+      ExecStart = ''${pkgs.util-linux}/bin/script -qfc "${pkgs.claude-code}/bin/claude --channels plugin:telegram@claude-plugins-official" /dev/null'';
       Restart = "always";
       RestartSec = 5;
     };