Add dangerous permission bypass flag

[myzie]

Summary

• add --dangerously-skip-permissions to the experimental dive CLI
• activate the existing permission.ModeBypassPermissions mode when the flag is present while preserving the default approval flow
• document the flag in the unreleased changelog and cover both permission modes

Why

Externally sandboxed or otherwise pre-authorized runs need an explicit way to execute tool calls without stopping for interactive approval prompts.

Validation

• go test ./...
• cd experimental/cmd/dive && go test -race ./...
• cd experimental/cmd/dive && go run . --help confirms the public flag
• git diff --check

Summary by CodeRabbit

• New Features

  • Added an experimental dive CLI option to bypass tool approval prompts.
  • The option displays a warning and is intended only for externally sandboxed environments.
  • Default approval prompts remain unchanged when the option is not enabled.

• Documentation

  • Added an Unreleased changelog entry describing the new option.

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 0bcfd956-3833-4496-9091-580006868e27

📥 Commits

Reviewing files that changed from the base of the PR and between d859dc2 and 461a147.

📒 Files selected for processing (3)

• CHANGELOG.md
• experimental/cmd/dive/main.go
• experimental/cmd/dive/main_test.go

Included review availability: 3 reviews are currently available. Based on recent review activity, included reviews refill at 4 per hour.

---

📝 Walkthrough

Walkthrough

The experimental dive CLI adds --dangerously-skip-permissions. Interactive sessions use bypass mode when enabled and retain approval prompts by default. Tests cover both modes, and the changelog documents the option.

Changes

CLI permission mode

Layer / File(s)	Summary
Permission mode flag and wiring experimental/cmd/dive/main.go	The CLI registers --dangerously-skip-permissions and selects permission.ModeBypassPermissions or permission.ModeDefault.
Permission mode validation and documentation experimental/cmd/dive/main_test.go, CHANGELOG.md	Tests verify both permission modes. The changelog documents the flag and its sandboxing requirement.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk: ⚪ Minimal · up to 461a1

This localized change adds an explicit permission-bypass option to the experimental CLI while preserving the normal approval flow; no actionable merge-blocking risk remains after normal checks and review.

Possibly related PRs

• deepnoodle-ai/dive#194: Defines permission manager behavior that this CLI flag selects.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the addition of the dangerous permission bypass flag, which is the main change.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/dangerously-skip-permissions

---

_{Comment @coderabbitai help to get the list of available commands.}