fix: use unified identity for bash ownership

This commit is contained in:
Tianyi Cui
2026-07-14 07:26:46 +08:00
parent c2979322c8
commit 99b5f04c9b
8 changed files with 40 additions and 47 deletions

View File

@@ -37,7 +37,7 @@ interface BashExecRequest {
env?: Record<string, string> | undefined
/**
* Opaque OWNER token for a background task — the consumer's isolation key
* (the tool layer passes the owning agent's `session.header.id`). The
* (the tool layer passes the owning agent's shared `id`). The
* executor stores it on the task and exposes it via {@link BashExecutor.ownerOf};
* the executor itself NEVER interprets it (no access policy lives in the
* seam — that is the consumer's job). Absent for foreground runs and for an