refactor(permission-system): simplify policy and autoreview flow

This commit is contained in:
云服务部-叶林立
2026-09-03 02:01:06 +08:00
parent 180da95ab7
commit 6e7effa792
112 changed files with 911 additions and 10346 deletions
@@ -27,7 +27,7 @@ export interface ToolAccessIntent {
*/
export interface PathValuesAccessIntent {
kind: "path-values";
/** `"path"` or `"external_directory"`. */
/** Permission surface associated with these path match values. */
surface: string;
values: readonly string[];
agentName?: string;
@@ -36,9 +36,9 @@ export interface PathValuesAccessIntent {
/**
* An `AccessPath` value object for a path-shaped surface.
*
* Built for every path-shaped surface: the cross-cutting `path` and
* `external_directory` gates, the per-tool path-bearing surfaces
* (`read`/`write`/`edit`/`grep`/`find`/`ls`, #502), and the service/RPC policy
* Built for every path-shaped surface: the cross-cutting `path` gate, the
* per-tool path-bearing surfaces (`read`/`write`/`edit`/`grep`/`find`/`ls`,
* #502), and the service/RPC policy
* queries for those surfaces (#503). Lets `AccessPath` flow into the resolver
* as a first-class variant so the resolver — not the producer — asks it for
* `matchValues()` (Tell-Don't-Ask).