approval-gate simplification — rules engine, three-state lifecycle, single drain RPC#146

Merged

ytallo merged 30 commits into

feat/shell-allowlist-approvalfrom

approval-gate-simplification

May 16, 2026

Commits on May 15, 2026

Commits on May 16, 2026

refactor(approval-gate): move pub(crate)-using tests inline
ytallo
committed
refactor(approval-gate): move public-API tests to tests/*.rs
ytallo
committed
feat(approval-gate): new Record schema with Pending|InFlight|Done lifecycle
ytallo
committed
fix(approval-gate): keep lifecycle.rs as transitional compat shim
ytallo
committed
feat(approval-gate): Denial::Policy carries rule_permission + rule_pattern
ytallo
committed
feat(approval-gate): pattern_for(function_id, args) extractor
ytallo
committed
feat(approval-gate): StateBus::delete primitive
ytallo
committed
feat(approval-gate): verdict-driven handle_intercept
ytallo
committed
feat(approval-gate): three-phase resolve + cascade exact-pattern (T6+T7)
ytallo
committed
feat(approval-gate): approval::consume + strip delivery dead RPCs + delete sweeper.rs/lifecycle.rs (T8+T9+T11)
ytallo
committed
feat(approval-gate): strip __from_approval marker plumbing (T10)
ytallo
committed
feat(approval-gate): strip config to topic+scope+timeout+rules (T12)
ytallo
committed
feat(shell): strip classify_argv / allowlist / __from_approval marker (T13)
ytallo
committed
feat(turn-orchestrator): switch stitch to approval::consume (T14)
ytallo
committed
test(approval-gate): E2E lifecycle tests + delete dead integration tests (T17)
ytallo
committed
feat(harness/web): Allow+Always, Deny feedback, expires_at countdown (T15)
ytallo
committed
docs(harness/fanout): note T16 stream-rewrite as deferred follow-up
ytallo
committed
fix(shell/e2e): drop allowlist/denylist tests + configs
ytallo
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

approval-gate simplification — rules engine, three-state lifecycle, single drain RPC#146

approval-gate simplification — rules engine, three-state lifecycle, single drain RPC#146
ytallo merged 30 commits into
feat/shell-allowlist-approvalfrom
approval-gate-simplification

Commits on May 15, 2026

feat(approval-gate): layered policy rules with findLast evaluator

feat(approval-gate): cascade allow on `always: true` resolve reply

chore(approval-gate): remove legacy migration surface

feat(approval-gate): add typed Record, Status, Next schema

refactor(approval-gate): extract wire.rs from lib.rs

refactor(approval-gate): extract lifecycle.rs from lib.rs

refactor(approval-gate): extract state.rs from lib.rs

refactor(approval-gate): extract intercept.rs from lib.rs

refactor(approval-gate): extract resolve.rs from lib.rs

refactor(approval-gate): extract delivery.rs from lib.rs

refactor(approval-gate): extract sweeper.rs from lib.rs

refactor(approval-gate): extract register.rs from lib.rs

Commits on May 16, 2026

refactor(approval-gate): move pub(crate)-using tests inline

refactor(approval-gate): move public-API tests to tests/*.rs

feat(approval-gate): new Record schema with Pending|InFlight|Done lifecycle

fix(approval-gate): keep lifecycle.rs as transitional compat shim

feat(approval-gate): Denial::Policy carries rule_permission + rule_pattern

feat(approval-gate): pattern_for(function_id, args) extractor

feat(approval-gate): StateBus::delete primitive

feat(approval-gate): verdict-driven handle_intercept

feat(approval-gate): three-phase resolve + cascade exact-pattern (T6+T7)

feat(approval-gate): approval::consume + strip delivery dead RPCs + delete sweeper.rs/lifecycle.rs (T8+T9+T11)

feat(approval-gate): strip __from_approval marker plumbing (T10)

feat(approval-gate): strip config to topic+scope+timeout+rules (T12)

feat(shell): strip classify_argv / allowlist / __from_approval marker (T13)

feat(turn-orchestrator): switch stitch to approval::consume (T14)

test(approval-gate): E2E lifecycle tests + delete dead integration tests (T17)

feat(harness/web): Allow+Always, Deny feedback, expires_at countdown (T15)

docs(harness/fanout): note T16 stream-rewrite as deferred follow-up

fix(shell/e2e): drop allowlist/denylist tests + configs