admin/my-pi
1
0
Fork 0
mirror of https://bitbucket.org/siakitem/my-pi.git synced 2026-10-26 10:45:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

refactor(permission-system): simplify policy and autoreview flow

Browse Source
This commit is contained in:
云服务部-叶林立
2026-09-03 02:01:06 +08:00
parent 180da95ab7
commit 6e7effa792
112 changed files with 911 additions and 10346 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pi-subagents/README.md
+1 -1
View File
@@ -20,7 +20,7 @@ Permission decisions remain owned by `pi-permission-system`:
- an `ask` is forwarded to the root session rather than reviewed inside the child;
- root whole-session rules are matched against the child-fixed access facts before another review;
- root auto-review uses the root transcript, where direct human messages remain distinguishable from assistant-generated delegation prompts;
- reviewer `defer`, reviewer failure, or an approval outside the delegation envelope falls through to the root human authority;
- reviewer `allow` or `deny` is final for the forwarded ask, including `path`; reviewer `defer` or failure falls through to the root human authority;
- a one-shot approval is not copied into a reusable descendant grant, so executing the same side effect twice still requires two decisions.
The lifecycle channel names are an event contract only. This package does not import permission-system internals or make policy decisions itself.