Skip to content

fix(pi-permission-system): approve bash chain units separately - #1097

Open
mikemikimike wants to merge 1 commit into
gotgenes:mainfrom
mikemikimike:fix-1095-bash-chain-approvals
Open

mikemikimike wants to merge 1 commit into
gotgenes:mainfrom
mikemikimike:fix-1095-bash-chain-approvals

Conversation

@mikemikimike

Copy link
Copy Markdown
Contributor

Fixes #1095

#1095

Ask separately for each unresolved command in a bash chain so each session approval describes what it grants. Keep deny checks ahead of prompts and avoid partial session grants when parsing recovers incomplete syntax. Suggest a directory-specific pattern for cd.

Validation:

  • pnpm run check
  • pnpm run lint
  • Focused bash chain and forwarding tests passed.
  • pnpm run test and the permission-system suite have existing Windows failures; the permission-system failure list matches the unmodified base.

@rneilson-cerby

Copy link
Copy Markdown

@gotgenes I think this would be a good addition, I hit this papercut all the time

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

A prompt over a chained command names only one part of the chain, so the session grant can approve the wrong command

2 participants