feat(acp): surface permission requests as clickable sentinel cards (#4938) - #5106

Open

wpfleger96 wants to merge 32 commits into

mainfrom

duncan/permission-policy

Commits on Aug 6, 2026

feat(acp): implement permission policy (#4938)

Duncan
and
wpfleger96
committed
127298f
feat(desktop): permission policy config + actionable Allow/Deny card (#4938)

Hayt
and
wpfleger96
committed
d8be338
fix(desktop): control_result is delivery confirmation, not terminal outcome

Hayt
and
wpfleger96
committed
90e3292
Merge remote-tracking branch 'origin/hayt/permission-policy' into duncan/permission-policy
Duncan
committed
4f72c3c
feat(acp): add PermissionMode::Auto + contradiction matrix rows (#4938)

Duncan
and
wpfleger96
committed
6dbbc67
fix(acp): address Thufir pass-1 CRITICAL and IMPORTANT findings (#4938)

Duncan
and
wpfleger96
committed
b3b1b3b
fix(acp): address Thufir pass-2 review findings (#4938)

Duncan
and
wpfleger96
committed
96538e9

Commits on Aug 7, 2026

fix(acp): structural round — one nonce-keyed permission record, finish_permission() helper

Duncan
and
wpfleger96
committed
6607eaf
fix(acp): address Thufir pass-4 review findings

Duncan
and
wpfleger96
committed
7d277da
fix(buzz-acp): thread single nonce through sync denial paths; upgrade two tests to pipe-level proof

Duncan
and
wpfleger96
committed
73f2ffe
test(buzz-acp): tighten equality-deadline test to pinned future + exact payload

Duncan
and
wpfleger96
committed
fcd33ff
refactor(desktop): extract permission/transcript types to fix file-size ratchet

Duncan
and
wpfleger96
committed
bcd9bac
Merge remote-tracking branch 'origin/main' into duncan/permission-policy
Duncan
committed
fe901d8
refactor(desktop): extract RawManagedAgent/fromRawManagedAgent to managedAgentMapping.ts

Duncan
and
wpfleger96
committed
2dd0706
fix(desktop): use struct literal init to satisfy clippy::field_reassign_with_default

Duncan
and
wpfleger96
committed
e87f265

Commits on Aug 8, 2026

feat(desktop): render permission-request sentinel card in thread timeline

Hayt
and
wpfleger96
committed
cef78d7
feat(acp): publish kind-9/40003 permission sentinel cards into channel thread

Duncan
and
wpfleger96
committed
d808c4b
Merge remote-tracking branch 'origin/main' into duncan/permission-policy

Duncan
and
wpfleger96
committed
74c9200
fix(acp): restore correct merge resolution for buzz-acp post-main-revert

Duncan
and
wpfleger96
committed
1e0c5ba
fix(desktop): parse bare-JSON sentinel, unify expiry clock, tighten guards, add component tests

Hayt
and
wpfleger96
committed
a16b059
fix(acp): ACK-gated sentinel lifecycle, D7 admission, NIP-AO docs

Duncan
and
wpfleger96
committed
fe7efd8
test(desktop): add harness integration fixture test for kind-9 parser

Hayt
and
wpfleger96
committed
3129900
fix(acp): background task owns ACK-waiter expiry, add 3 missing named tests

Duncan
and
wpfleger96
committed
ef67355
refactor(acp): delete publish_event_acked, only register_publish_ack is live

Duncan
and
wpfleger96
committed
aeca230
fix(desktop): sentinel-only edit gate in formatTimelineMessages; reword card doc

Hayt
and
wpfleger96
committed
f858cab
test(e2e): align permission outcome assertion with label-based rendering

Hayt
and
wpfleger96
committed
60c247e

Commits on Aug 10, 2026

chore: merge origin/main into duncan/permission-policy

Duncan
and
wpfleger96
committed
ff5b21f
fix(desktop): fail-closed PermissionDecisionButtons for allow_always and unknown kinds

Hayt
and
wpfleger96
committed
3ad999a
fix(acp): add permission_decision_tx: None to main's new test TaskMeta inits

Duncan
and
wpfleger96
committed
bac3264
fix(desktop): persist applied permission policy for remote deploys

Duncan
and
wpfleger96
committed
00456e4
fix(desktop): exact-allowlist permission kinds, disclose persistent deny

Hayt
and
wpfleger96
committed
ca9acfa
fix(desktop): enforce deploy-receipt invariant for applied permission policy

Duncan
and
wpfleger96
committed
0bc5683