refactor(permission): consume structured bash payload

- require @gotgenes/pi-permission-system >=25.3.0 and read the complete local bash command from PromptPermissionDetails.payload instead of session-walking recovery
- remove the @sikongjueluo/pi-permission-shared package
- pass the triggering command unit to handlers via HandlerContext.unit in place of details.command
- add shadow-only AI judge modules for evidence projection, structured verdict requests, and prompt building, with vitest coverage
- record ADR 0004 and mark the ADR 0001 recovery mechanism superseded
- exclude pi-permission-system 25.3.0 from the pnpm minimumReleaseAge guard
This commit is contained in:
2026-08-16 23:08:45 +08:00
parent 6008c9e817
commit 1afcbd3118
29 changed files with 1540 additions and 587 deletions
@@ -1,5 +1,12 @@
# Research: context ownership for forwarded and subagent Bash asks
> **2026-08-16 update:** This report characterizes permission-system 24.0.0.
> Version 25.3 added a required structured prompt payload. Local Bash asks now
> expose the complete input as `full command` evidence when it differs from the
> triggering unit; forwarded 25.3/25.4 asks still carry only legacy request prose.
> See ADR 0004 for the current command-input contract. The root/child ownership
> findings below remain applicable.
## Scope
This report describes the installed runtime inspected on 2026-08-08: