Core elevation broker that replaces the superpowerd adapter. Handles command execution outside the sandbox with human-in-the-loop approval via desktop notifications. - Policy store: YAML-backed global policy + in-memory session policies - Request lifecycle: 300s TTL, approve/deny/persist resolution - Command execution: bash -c with caller env/cwd, streaming d/x frames - SO_PEERCRED for caller identification - NotifyFunc callback for UI integration (D-Bus, 9P, etc.) |
||
|---|---|---|
| .. | ||
| execute | ||
| stream.go | ||
| tools.go | ||
| tools_test.go | ||