This repository has no description
tools.claude: switch to permission-mode auto, drop GouvernAI
The built-in `auto` permission mode uses a classifier to gate per-action
approvals — covers the routine-action auto-approve role GouvernAI was
filling. Drops --dangerously-skip-permissions (no longer needed since
the mode handles approvals) and the GouvernAI plugin + fetchFromGitHub.
Sets permissions.defaultMode = "auto" in the wrapper's --settings so
every session boots into auto mode without a CLI flag.
author
lassulus
date
(Apr 28, 2026, 1:09 AM CEST)
commit
da59b6ae
da59b6aed2928c00b918bd5dc9758744f512694f
parent
9cfe0e8c
9cfe0e8ce253a31b95bca1bf443d8eea42c9c395
+1
-13
+1
-13
tools/claude/flake-module.nix
+1
-13
tools/claude/flake-module.nix
···
3
3
perSystem =
4
4
{ pkgs, system, ... }:
5
5
let
6
-
gouvernai = pkgs.fetchFromGitHub {
7
-
owner = "Myr-Aya";
8
-
repo = "GouvernAI-claude-code-plugin";
9
-
rev = "main";
10
-
hash = "sha256-Qv+SV5GBf/UphhkfM5azqv9PzPOr8qdR6nkoV6Rezs4=";
11
-
};
12
-
13
6
claude = inputs.wrappers.lib.wrapModule {
14
7
imports = [ self.wrapperModules.claude-code ];
15
8
inherit pkgs;
···
17
10
package = self.lib.halalify self.legacyPackages.${system}.llm.claude-code;
18
11
19
12
claudeMd = ./CLAUDE.md;
20
-
21
-
plugins = [
22
-
(gouvernai + "/gouvernai")
23
-
];
24
13
25
14
mcpServers = {
26
15
git-mcp = {
···
38
27
};
39
28
40
29
permissions = {
30
+
defaultMode = "auto";
41
31
allow = [
42
32
# nix operations
43
33
"Bash(nix build:*)"
···
153
143
# Prefer compact output for better context usage
154
144
verbose = true;
155
145
};
156
-
157
-
flags."--dangerously-skip-permissions" = true;
158
146
};
159
147
in
160
148
{