From dba2c91124d610f81e7a3949e040556c1bf68991 Mon Sep 17 00:00:00 2001
From: Thomas Marchand <thomas.marchand@tuta.io>
Date: Sun, 18 Jan 2026 19:27:23 +0000
Subject: [PATCH] fix: remove --dangerously-skip-permissions flag (incompatible
 with root)

---
 src/backend/claudecode/client.rs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/backend/claudecode/client.rs b/src/backend/claudecode/client.rs
index b900e47..30913ab 100644
--- a/src/backend/claudecode/client.rs
+++ b/src/backend/claudecode/client.rs
@@ -258,8 +258,8 @@ impl ClaudeCodeClient {
             .arg("--output-format")
             .arg("stream-json")
             .arg("--verbose")
-            .arg("--include-partial-messages")
-            .arg("--dangerously-skip-permissions");
+            .arg("--include-partial-messages");
+        // Note: --dangerously-skip-permissions cannot be used when running as root
 
         // Set API key or OAuth token if configured
         // OAuth tokens start with "sk-ant-oat" and must use CLAUDE_CODE_OAUTH_TOKEN