feat: add pure ssh2 remote operations

pi-permission-system/src/access-intent/tool-kind.ts

@@ -47,6 +47,8 @@ export interface ShellInvocation {
   command: string;
   /** The working directory the command runs in, if the tool projects one. */
   workdir: string | undefined;
+  /** Optional minimum review decision imposed by a configured shell alias. */
+  decisionFloor?: ShellToolsConfig[string]["decisionFloor"];
 }
 
 /**
@@ -78,6 +80,7 @@ export function resolveShellInvocation(
     return {
       command: getNonEmptyString(record.command) ?? "",
       workdir: undefined,
+      decisionFloor: undefined,
     };
   }
 
@@ -88,6 +91,7 @@ export function resolveShellInvocation(
       workdir: alias.workdirArgument
         ? (getNonEmptyString(record[alias.workdirArgument]) ?? undefined)
         : undefined,
+      decisionFloor: alias.decisionFloor,
     };
   }