Feat/shell allowlist approval#142

Closed

ytallo wants to merge 44 commits into

mainfrom

feat/shell-allowlist-approval

Commits on May 16, 2026

docs(approval-gate): design for trigger-model approvals
ytallo
committed
feat(approval-gate): add transition_record helper for terminal-status records
ytallo
committed
feat(approval-gate): declare new function ids and terminal-status helper
ytallo
committed
feat(approval-gate): add pure handle_intercept for immediate-return policy
ytallo
committed
feat(approval-gate): add FunctionExecutor trait for testable underlying-call invocation
ytallo
committed
feat(approval-gate): handle_resolve(allow) invokes function and records executed/failed
ytallo
committed
test(approval-gate): pin deny path does not invoke underlying function
ytallo
committed
test(approval-gate): lazy timeout flip on resolve
ytallo
committed
feat(approval-gate): handle_list_undelivered with lazy timeout
ytallo
committed
test(approval-gate): pin list_undelivered excludes delivered-stamped records
ytallo
committed
feat(approval-gate): handle_ack_delivered with idempotent stamping
ytallo
committed
feat(approval-gate): lazy migration of legacy allow/deny records on read
ytallo
committed
feat(approval-gate): rewire subscriber for trigger model; register new RPCs; delete await_decision
ytallo
committed
feat(turn-orchestrator): add approval_stitching module with truncate_for_message
ytallo
committed
feat(turn-orchestrator): add stitch_entries pure helper for resolved-approval messages
ytallo
committed
feat(turn-orchestrator): produce structured pending_approval tool result for gated calls
ytallo
committed
feat(turn-orchestrator): stitch resolved approvals into LLM turns + ack on success
ytallo
committed
test(turn-orchestrator): engine-backed allow-path lifecycle test
ytallo
committed
test(turn-orchestrator): engine-backed deny-path lifecycle test
ytallo
committed
test(turn-orchestrator): engine-backed timeout lazy-flip test
ytallo
committed
test(web): regression-pin tolerance of new optional fields on approval_resolved
ytallo
committed
docs(approval-gate): update skill docs for trigger model + add list_undelivered/ack_delivered
ytallo
committed
feat(approval-gate): add approval::sweep_session for session-deletion cascade
ytallo
committed
fix(approval-gate, turn-orchestrator): fix integration test for trigger model + clippy clean
ytallo
committed
feat(approval-gate): add end-to-end approval lifecycle tests and update .gitignore
ytallo
committed
feat(shell): implement approval bypass mechanism with new classify_argv function and update ShellConfig for allow_any option
ytallo
committed
refactor(approval-gate): clean up test code formatting and improve readability in approval lifecycle tests
ytallo
committed
feat(approval-gate): stamp resolved_at when transitioning to terminal status
ytallo
committed
feat(approval-gate): cap+FIFO-sort list_undelivered, report omitted count
ytallo
committed
feat(approval-gate): add consume_undelivered for atomic list+ack
ytallo
committed
feat(approval-gate): register consume_undelivered + flush_delivered RPCs
ytallo
committed
feat(turn-orchestrator): add omission_summary_message for capped approval stitch
ytallo
committed
refactor(turn-orchestrator): consume+persist approval stitch atomically
ytallo
committed
docs(approval-gate): document consume_undelivered + flush_delivered
ytallo
committed
feat(approval-gate): interceptor rules authoritative, run-level approval_required becomes a fallback
ytallo
committed
feat(shell): arity-aware allowlist matching
ytallo
committed
refactor(approval-gate): structured Denial replaces decision_reason
ytallo
committed
approval-gate simplification — rules engine, three-state lifecycle, single drain RPC (#146)
ytallo
committed
Remove deprecated approval-gate skills: ack_delivered, consume_undelivered, flush_delivered, list_undelivered, and sweep_session. These files have been deleted as part of the ongoing simplification…
ytallo
committed