feat: add pure ssh2 remote operations

pi-permission-system/test/config-loader.test.ts

@@ -677,7 +677,7 @@ describe("mergeUnifiedConfigs", () => {
     });
   });
 
-  it("shallow-merges shellTools by tool name: override adds without dropping base", () => {
+  it("merges shellTools by tool name: override adds without dropping base", () => {
     const merged = mergeUnifiedConfigs(
       { shellTools: { exec_command: { commandArgument: "cmd" } } },
       { shellTools: { run_shell: { commandArgument: "script" } } },
@@ -688,17 +688,25 @@ describe("mergeUnifiedConfigs", () => {
     });
   });
 
-  it("override shellTools replaces a colliding tool's alias wholesale", () => {
+  it("field-merges a colliding shell alias and preserves its decision floor", () => {
     const merged = mergeUnifiedConfigs(
       {
         shellTools: {
-          exec_command: { commandArgument: "cmd", workdirArgument: "workdir" },
+          exec_command: {
+            commandArgument: "cmd",
+            workdirArgument: "workdir",
+            decisionFloor: "ask",
+          },
         },
       },
       { shellTools: { exec_command: { commandArgument: "command" } } },
     );
     expect(merged.shellTools).toEqual({
-      exec_command: { commandArgument: "command" },
+      exec_command: {
+        commandArgument: "command",
+        workdirArgument: "workdir",
+        decisionFloor: "ask",
+      },
     });
   });