feat(pi-permission-inner-cmd): authorize inner commands behind timeout wrappers

- recover the full bash command from the session by tool-call id
- add recognizer for the strict timeout wrapper grammar
- add authorizer mapping inner allow/ask/deny and forwarding agent name
- defer fail-closed on session mismatch, nested wrappers, and errors
- add unit tests for recovery, recognizer, authorizer, and lifecycle
- document the decision in ADR 0001
This commit is contained in:
2026-08-11 16:33:08 +08:00
parent c4d76ad284
commit 24153412c9
11 changed files with 1438 additions and 7 deletions
+4 -1
View File
@@ -234,8 +234,11 @@ importers:
specifier: '*'
version: 0.84.1(ws@8.21.2)(zod@4.4.3)
'@gotgenes/pi-permission-system':
specifier: '>=20.10.0'
specifier: '>=24.0.0'
version: 24.0.0(@earendil-works/pi-coding-agent@0.84.1(ws@8.21.2)(zod@4.4.3))(@earendil-works/pi-tui@0.84.1)
'@types/node':
specifier: ^26.0.0
version: 26.1.2
typescript:
specifier: ^5
version: 5.9.3