[cap11235]

Stick it in docker, '--dangerously-skip-permissions'. There's also https://github.com/possibilities/claude-composer which seems to try to address this more directly, but I've never tried it.