Add policy-bound AG-UI adapter for Mercator acceptance - #8

Merged

chungty merged 25 commits into

mainfrom

codex/mercator-policy-agui

Aug 16, 2026

Commits on Aug 13, 2026

feat(agui): AG-UI HTTP/SSE adapter for Hermes

authored and
chungty
committed
e889a2d
feat(agui): fail-closed inbound authentication

authored and
chungty
committed
47f7cc4
feat(agui): interrupt-based dangerous-command approval

authored and
chungty
committed
741d486
docs(agui): adapter README + SECURITY.md security section

authored and
chungty
committed
02d2ef4
fix(agui): reject client tool names that shadow server tools

authored and
chungty
committed
458e575
fix(agui): bootstrap the hermes-agui entry point

authored and
chungty
committed
340630f
docs(agui): correct the aimock install and document reserved tool names

authored and
chungty
committed
1737ec4
feat: add Mercator policy-bound AG-UI adapter
chungty
committed
ae0b63c
fix: support AG-UI adapter on Verdigris pin
chungty
committed
941cffe
fix(agui): install the AG-UI adapter with the [all] extra

chungty
and
claude
committed
1c875df
fix(agui): read camelCase mime types and stop resuming empty runs

chungty
and
claude
committed
4a6c1fb
fix(agui): close the tool-registry race and bound its growth

chungty
and
claude
committed
ae768e8

Commits on Aug 14, 2026

fix(agui): address CodeRabbit findings on the AG-UI adapter

chungty
and
claude
committed
707e18d
test(tools): teach the approval stub about is_interactive_cli

chungty
and
claude
committed
db3effa
docs(agui): correct Host-guard and resume claims; deregister test probes

chungty
and
claude
committed
20b7e22
fix(terminal): don't send TTY-less runs into the sudo prompt

chungty
and
claude
committed
fe8e880
fix(agui): close the forwardedProps tool-declaration channel

chungty
and
claude
committed
4643a4a
test(agui): cover every policy gate, not just the core-tools one

chungty
and
claude
committed
47183b4
fix(agui): make parked-approval cleanup atomic

chungty
and
claude
committed
2e23c5c

Commits on Aug 15, 2026

docs(agui): scope the native-approval paragraph to runtimes with resume

chungty
and
claude
committed
ea23e37
docs(agui): the README still advertised query-token auth on network binds

chungty
and
claude
committed
54e49c4
fix(agui): silent success on a missing run state, and a loose version gate

chungty
and
claude
committed
ee9751c
fix(terminal): an adapter run must never prompt the operator's tty for sudo

chungty
and
claude
committed
17e87cc
test(tools): stub the second approval symbol terminal_tool imports

chungty
and
claude
committed
d7a8e90

Commits on Aug 16, 2026

fix(agui): namespace the approval label, and cap the queue and run count

chungty
and
claude
committed
dff85b6