gotgenes/pi-packages pi-permission-system-v24.0.0 on GitHub

24.0.0 (2026-07-26)

pi-permission-system: an authorizer chain link's allow on a forwarded subagent ask raised by the path or external_directory gate is now downgraded to defer, so the request falls through to an interactive prompt. This affects only an operator running an allow-capable third-party link named in authorizerChain; the first-party model judge is deny-first and is unaffected, as are forwarded bash asks and per-tool-gated asks. See packages/pi-permission-system/docs/migration/0635-forwarded-ask-delegation-envelope.md

pi-permission-system: carry forwarded access facts to the Authorizer Chain (#635) (c0790ad)