theboringoffice v0.3.4 — bypass permissions mode

The deliberate escape hatch, supported by both backends.

/bypass toggles a session-scoped bypass-permissions mode. Enabling asks for an explicit confirm first — agents will run tools and browser actions WITHOUT asking, this office session only — disabling is instant. While on: a loud amber ⚠ BYPASS segment rides every tab's topbar; claude respawns with --dangerously-skip-permissions (your session context resumes); opencode's config merges a permission allow-all (your explicit deny rules still win); any stray ask is auto-approved with a dim log row; and the office's own browser-action prompt is covered too. Nothing is written to disk — every boot starts with bypass OFF.

Live-verified against the real claude CLI: a bypass run completed a Write-tool turn with zero permission asks on the wire.

Full Changelog: v0.3.3...v0.3.4