hailin
/
it0
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: use acceptEdits mode and mount .claude.json for SDK 

- bypassPermissions blocked by SDK when running as root
- Switch to acceptEdits with canUseTool for programmatic control
- Mount .claude.json config file into container

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
hailin 2026-02-23 06:37:31 -08:00
parent db1d0620f2
commit 04a18a7899
2 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
deploy/docker/docker-compose.yml
View File

@ -120,6 +120,7 @@ services:
- "13002:3002" - "13002:3002"
volumes: volumes:
- ${HOME}/.claude:/root/.claude - ${HOME}/.claude:/root/.claude
- ${HOME}/.claude.json:/root/.claude.json
environment: environment:
- DB_HOST=postgres - DB_HOST=postgres
- DB_PORT=5432 - DB_PORT=5432

6
packages/services/agent-service/src/infrastructure/engines/claude-agent-sdk/claude-agent-sdk-engine.ts
View File

@ -107,8 +107,7 @@ export class ClaudeAgentSdkEngine implements AgentEnginePort {
maxBudgetUsd: params.maxBudgetUsd, maxBudgetUsd: params.maxBudgetUsd,
env, env,
abortController, abortController,
allowDangerouslySkipPermissions: true, permissionMode: 'acceptEdits',
permissionMode: 'bypassPermissions',
stderr: (data: string) => { stderr: (data: string) => {
this.logger.debug(`SDK stderr (${params.sessionId}): ${data.trim()}`); this.logger.debug(`SDK stderr (${params.sessionId}): ${data.trim()}`);
}, },
@ -275,8 +274,7 @@ export class ClaudeAgentSdkEngine implements AgentEnginePort {
resume: sdkSessionId, resume: sdkSessionId,
env, env,
abortController, abortController,
allowDangerouslySkipPermissions: true, permissionMode: 'acceptEdits',
permissionMode: 'bypassPermissions',
canUseTool: async (toolName, toolInput) => { canUseTool: async (toolName, toolInput) => {
const riskLevel = this.classifyToolRisk(toolName, toolInput); const riskLevel = this.classifyToolRisk(toolName, toolInput);
if (riskLevel <= CommandRiskLevel.LOW_RISK_WRITE) { if (riskLevel <= CommandRiskLevel.LOW_RISK_WRITE) {