fix(dcg): switch to git dep + add --dangerously-skip-permissions flag

- Cargo.toml: replace local path dep with git URL
  https://github.com/quangdang46/destructive_command_guard (branch=main)
- cli/args.rs: add --dangerously-skip-permissions bool flag (Claude Code
  compatibility alias for --permission-mode bypass-permissions)
- cli/startup.rs: wire flag so BypassPermissions activates when set;
  --permission-mode still takes precedence if both are specified
- Cargo.lock: bump serde_json 1.0.149 -> 1.0.150 to resolve version
  conflict with dcg-core git dep

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: quangdang46

Cargo.lock

@@ -123,10 +123,10 @@ toml = "0.8"
 clap = { version = "4", features = ["derive"] }
 
 # Permission modes (Plan / AcceptEdits / BypassPermissions / DontAsk).
-# Local path dep until dcg-core publishes to crates.io. v0.6.0-rc.1 ships
-# the Mode + Effect + Engine + Session API; pack-rule evaluation lands in
-# Phase 2.
-dcg-core = { path = "../destructive_command_guard/crates/dcg-core" }
+# Git dep from the DCG repo (not crates.io, not local path).
+# v0.6.0-rc.1 ships the Mode + Effect + Engine + Session API;
+# pack-rule evaluation lands in Phase 2.
+dcg-core = { git = "https://github.com/quangdang46/destructive_command_guard", branch = "main" }
 
 # File operations
 glob = "0.3"

Cargo.toml

@@ -258,6 +258,12 @@ pub(crate) struct Args {
     #[arg(long = "permission-mode", global = true, value_enum)]
     pub(crate) permission_mode: Option<PermissionModeArg>,
 
+    /// Skip all permission prompts (alias for `--permission-mode bypass-permissions`).
+    /// This is the Claude Code compatibility flag. When both this flag and
+    /// `--permission-mode` are set, the explicit `--permission-mode` wins.
+    #[arg(long = "dangerously-skip-permissions", global = true)]
+    pub(crate) dangerously_skip_permissions: bool,
+
     #[command(subcommand)]
     pub(crate) command: Option<Command>,
 }

src/cli/args.rs

@@ -177,8 +177,14 @@ fn parse_and_prepare_args() -> Result<Args> {
     // --permission-mode → dcg_bridge global mode. When unspecified we leave
     // the default (`Mode::Default`, set by the bridge's LazyLock) untouched
     // so behavior matches the legacy AUTO_ALLOWED-based classify.
+    //
+    // `--dangerously-skip-permissions` is the Claude Code compatibility alias
+    // for `--permission-mode bypass-permissions`. Explicit `--permission-mode`
+    // wins when both are set.
     if let Some(mode) = args.permission_mode {
         crate::dcg_bridge::set_mode(mode.into_dcg_mode());
+    } else if args.dangerously_skip_permissions {
+        crate::dcg_bridge::set_mode(dcg_core::Mode::BypassPermissions);
     } else if let Ok(env_mode) = std::env::var("JCODE_PERMISSION_MODE") {
         if let Some(mode) = dcg_core::Mode::parse(env_mode.trim()) {
             crate::dcg_bridge::set_mode(mode);