From 0c77f6ed5b4276ea713ca0d5983da21c1981ada4 Mon Sep 17 00:00:00 2001 From: Kit Langton Date: Thu, 27 Aug 2026 14:48:11 -0400 Subject: [PATCH] refactor(core): remove unreachable permission branch (#45617) Remove the impossible pre-hook deny aggregation branch while preserving configured denials and post-hook denial handling. --- packages/core/src/permission.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/core/src/permission.ts b/packages/core/src/permission.ts index d64c2d0c376..23bfd87529e 100644 --- a/packages/core/src/permission.ts +++ b/packages/core/src/permission.ts @@ -170,7 +170,7 @@ const layer = Layer.effect( if (denied(input, rules)) return { effect: "deny" as const, rules } const all = [...rules, ...(yield* savedRules())] const effects = input.resources.map((resource) => evaluate(input.action, resource, all).effect) - const effect: Permission.Effect = effects.includes("deny") ? "deny" : effects.includes("ask") ? "ask" : "allow" + const effect: Permission.Effect = effects.includes("ask") ? "ask" : "allow" const event = yield* hooks.trigger("permission", "evaluate", { sessionID: input.sessionID, agent: input.agent,