Summary

• Make compound bash segment fallback honor the permission policy mode.
• Prevent Auto approval from prompting on uncovered compound bash segments when writer fallback is allow.
• Add regression coverage for a PowerShell-style pipeline/semicolon command across allow, ask, and deny modes.

Root Cause

Compound bash commands are decomposed into simple-command segments. Uncovered segments previously forced Ask directly instead of applying the same writer fallback used by atomic bash commands, so Auto approval could still show a bash approval prompt.

Tests

• go test ./internal/permission
• go test ./internal/control