Core elevation broker that replaces the superpowerd adapter. Handles command execution outside the sandbox with human-in-the-loop approval via desktop notifications. - Policy store: YAML-backed global policy + in-memory session policies - Request lifecycle: 300s TTL, approve/deny/persist resolution - Command execution: bash -c with caller env/cwd, streaming d/x frames - SO_PEERCRED for caller identification - NotifyFunc callback for UI integration (D-Bus, 9P, etc.) |
||
|---|---|---|
| .. | ||
| testdata/sandbox | ||
| code.go | ||
| detach.go | ||
| execute_test.go | ||
| flock.go | ||
| pipe.go | ||
| server.go | ||
| tier.go | ||
| tier_test.go | ||
| tool.go | ||