feat: vendor permission system source

pi-permission-system/src/presentation/forwarded-ask-payload.ts

@@ -0,0 +1,70 @@
+import type { ForwardedPermissionRequest } from "#src/authority/permission-forwarding";
+import type {
+  PromptPayload,
+  PromptRequester,
+} from "#src/presentation/prompt-payload";
+
+/**
+ * Build the payload for an ask forwarded up from a subagent.
+ *
+ * A projection, not a synthesizer: the child ships its own complete payload, so
+ * the serving node renders the child's facts under the *parent's* budget — which
+ * is what makes a forwarded ask and a local one consistent in kind, a forwarded
+ * bash ask reading `command : …` exactly as a local one does (ADR 0011 §2).
+ *
+ * A request carrying no payload renders from whatever it does hold: fail-closed
+ * applies to presentation as it does to policy, so a version-skewed ask still
+ * reaches the human rather than resolving without one (ADR 0011 §9).
+ */
+export function buildForwardedAskPayload(
+  request: ForwardedPermissionRequest,
+): PromptPayload {
+  // The child built its payload with `localRequester` — `forwarded: false`,
+  // `sessionId: null`. The serving node is the only party that knows the ask
+  // arrived over the wire, and the request's own provenance is authoritative
+  // (#292); everything else is the child's fact and passes through untouched.
+  const requester: PromptRequester = {
+    agentName: request.requesterAgentName,
+    forwarded: true,
+    sessionId: request.requesterSessionId,
+  };
+
+  return request.payload
+    ? {
+        ...request.payload,
+        request: { ...request.payload.request, requester },
+      }
+    : degradedForwardedPayload(request, requester);
+}
+
+/**
+ * The render for an ask that arrived without a payload.
+ *
+ * `kind: "forwarded"` narrows to meaning exactly this — not "an ask from a
+ * subagent", which every branch above is too.
+ */
+function degradedForwardedPayload(
+  request: ForwardedPermissionRequest,
+  requester: PromptRequester,
+): PromptPayload {
+  return {
+    kind: "forwarded",
+    request: {
+      requester,
+      // The child's display projection: what the ask was about, as the child's
+      // own gate named it.
+      surface: request.surface ?? "",
+      toolName: null,
+      invokedToolName: null,
+      value: request.value ?? "",
+      matchedPattern: null,
+      commandContext: null,
+      executedUnit: null,
+    },
+    // Nothing to carry: the wire no longer relays a sentence, and inventing
+    // evidence the child never sent is exactly the fiction the bounded
+    // renderers would then have to trust.
+    evidence: [],
+    annotations: [],
+  };
+}