3 Commits

Include renames

Author	SHA1	Message	Date
SikongJueluo	6008c9e817	fix(pi-permission-inner-cmd): unwrap timeout in real-world command forms ... - accept GNU timeout durations without a unit suffix and with decimals (timeout 240 …) - detect the wrapper on details.command and strip it from the full command so scaffolded inputs (cd … && timeout … | tail) unwrap - re-evaluate the full de-wrapped compound so sibling commands cannot hide behind the wrapper allow - defer fail-closed when the unit is not a unique substring of the full command - amend ADR 0001 with the relaxed grammar and the scaffolded-command handling	2026-08-12 11:20:46 +08:00
SikongJueluo	06b21a28a6	refactor(pi-permission-inner-cmd): narrow bash recovery uniqueness to one message ... - walk entries in reverse and stop at the latest assistant message containing the id - require the id to match exactly one block within that message rather than across the whole session - resolve a cross-message id reuse to the latest call being authorized - update ADR 0001 wording for the narrowed scope - add a regression test for cross-message id reuse	2026-08-11 21:53:46 +08:00
SikongJueluo	24153412c9	feat(pi-permission-inner-cmd): authorize inner commands behind timeout wrappers ... - recover the full bash command from the session by tool-call id - add recognizer for the strict timeout wrapper grammar - add authorizer mapping inner allow/ask/deny and forwarding agent name - defer fail-closed on session mismatch, nested wrappers, and errors - add unit tests for recovery, recognizer, authorizer, and lifecycle - document the decision in ADR 0001	2026-08-11 16:33:08 +08:00