@gotgenes/pi-permission-system 33.1.0 → 33.1.1

package/CHANGELOG.md

@@ -5,6 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [33.1.1](https://github.com/gotgenes/pi-packages/compare/pi-permission-system-v33.1.0...pi-permission-system-v33.1.1) (2026-09-24)
+
+
+### Bug Fixes
+
+* **pi-permission-system:** read a recognized flag's quoted value as its value ([a9721e4](https://github.com/gotgenes/pi-packages/commit/a9721e43828ee499d6a78fa2f03d4d6c87a15a95)), closes [#957](https://github.com/gotgenes/pi-packages/issues/957)
+* **pi-permission-system:** admit a quoted flag by its unquoted leading dash ([#957](https://github.com/gotgenes/pi-packages/issues/957)) ([e5eb6ab](https://github.com/gotgenes/pi-packages/commit/e5eb6ab55ec2aae5ad0b8254f46ad90b59ca56aa)), closes [#972](https://github.com/gotgenes/pi-packages/issues/972)
+
 ## [33.1.0](https://github.com/gotgenes/pi-packages/compare/pi-permission-system-v33.0.8...pi-permission-system-v33.1.0) (2026-09-23)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gotgenes/pi-permission-system",
-  "version": "33.1.0",
+  "version": "33.1.1",
   "description": "Permission enforcement extension for the Pi coding agent.",
   "type": "module",
   "exports": {

package/src/access-intent/bash/token-collection.ts

@@ -779,33 +779,40 @@ function collectPatternCommandTokens(
     }
 
     // Flag detection (only before "--" end-of-flags marker).
-    if (
-      !pastEndOfFlags &&
-      child.type === "word" &&
-      text.startsWith("-") &&
-      text.length > 1
-    ) {
+    //
+    // A quoted flag value (`grep --regexp='/etc/passwd'`, `awk -F':'`) makes
+    // the argument a `concatenation`, so a recognized flag is acted on in that
+    // shape too. An unrecognized one is not, and neither is a token quoted
+    // whole (`sd '-old' '-new' file.txt`): reading either as a flag would stop
+    // a quoted `-`-leading *pattern* from spending its positional and drop the
+    // real operand, where leaving it positional only over-surfaces (#957).
+    if (!pastEndOfFlags && text.startsWith("-") && text.length > 1) {
       const directive = classifyPatternCommandFlag(text, config);
-      switch (directive.kind) {
-        case "end-of-flags":
-          pastEndOfFlags = true;
-          break;
-        case "consume-next":
-          pendingConsumption = directive.role;
-          if (suppliesScript(directive.role)) hasExplicitScript = true;
-          break;
-        case "inline-value":
-          if (directive.role === "script-file")
-            tokens.push({ token: directive.value, effect });
-          if (suppliesScript(directive.role)) hasExplicitScript = true;
-          break;
-        case "regular-flag":
-          // Unrecognized: fall back to the blind `--opt=value` split, which is
-          // safe precisely because the flag's role is unknown (#645).
-          tokens.push(...embeddedOptionValueToken(text, effect));
-          break;
+      if (
+        child.type === "word" ||
+        (directive.kind !== "regular-flag" && hasUnquotedLeadingDash(child))
+      ) {
+        switch (directive.kind) {
+          case "end-of-flags":
+            pastEndOfFlags = true;
+            break;
+          case "consume-next":
+            pendingConsumption = directive.role;
+            if (suppliesScript(directive.role)) hasExplicitScript = true;
+            break;
+          case "inline-value":
+            if (directive.role === "script-file")
+              tokens.push({ token: directive.value, effect });
+            if (suppliesScript(directive.role)) hasExplicitScript = true;
+            break;
+          case "regular-flag":
+            // Unrecognized: fall back to the blind `--opt=value` split, which is
+            // safe precisely because the flag's role is unknown (#645).
+            tokens.push(...embeddedOptionValueToken(text, effect));
+            break;
+        }
+        continue;
       }
-      continue;
     }
 
     // Positional argument.
@@ -814,14 +821,25 @@ function collectPatternCommandTokens(
     } else {
       tokens.push({ token: text, effect });
     }
-    // A quoted flag never reaches the flag branch above, so its embedded value
-    // is split here instead.
+    // A quoted token that did not act as a flag above has its embedded value
+    // split here instead.
     tokens.push(...embeddedOptionValueToken(text, effect));
   }
 
   return tokens;
 }
 
+/**
+ * Whether a `concatenation` argument begins with an unquoted `-`, as a flag
+ * carrying a quoted value does (`-F':'` is the word `-F` then `':'`). A token
+ * quoted whole is a `raw_string` or `string`, never a `concatenation`.
+ */
+function hasUnquotedLeadingDash(child: TSNode): boolean {
+  if (child.type !== "concatenation") return false;
+  const head = child.child(0);
+  return head?.type === "word" && head.text.startsWith("-");
+}
+
 /**
  * Whether a flag in this role means the inline pattern positional is spent.
  *

package/src/authority/authorizer-chain.ts

@@ -44,7 +44,7 @@ export function composeAuthorizerChain(
         if (decision) {
           return decision;
         }
-        // `defer` \u2014 try the next link.
+        // `defer` — try the next link.
       }
       return terminal.authorize(details);
     },