refactor(core): remove unreachable permission branch (#45617)

Remove the impossible pre-hook deny aggregation branch while preserving configured denials and post-hook denial handling.
This commit is contained in:
Kit Langton
2026-08-27 14:48:11 -04:00
committed by GitHub
Unverified
parent 284b222489
commit 0c77f6ed5b
+1 -1
View File
@@ -170,7 +170,7 @@ const layer = Layer.effect(
if (denied(input, rules)) return { effect: "deny" as const, rules }
const all = [...rules, ...(yield* savedRules())]
const effects = input.resources.map((resource) => evaluate(input.action, resource, all).effect)
const effect: Permission.Effect = effects.includes("deny") ? "deny" : effects.includes("ask") ? "ask" : "allow"
const effect: Permission.Effect = effects.includes("ask") ? "ask" : "allow"
const event = yield* hooks.trigger("permission", "evaluate", {
sessionID: input.sessionID,
agent: input.agent,