Repository navigation

feat(permissions): one named permission-mode vocabulary and two admission gates - #1935

Open

aponcedeleonch wants to merge 46 commits into

mainfrom

impl/unified-permission-mode

Open

feat(permissions): one named permission-mode vocabulary and two admission gates#1935
aponcedeleonch wants to merge 46 commits into
mainfrom
impl/unified-permission-mode

Commits on Oct 16, 2026
- feat(permissions): resolve a named permission-mode token in composition
  
  aponcedeleonch
  and
  claude
  committed
  c524910
- test(permissions): pin the permission-mode contract in composition
  
  aponcedeleonch
  and
  claude
  committed
  e7392db
- feat(permissions): add --permission-mode to the server roots
  
  aponcedeleonch
  and
  claude
  committed
  3280616
- fix(permissions): let gRPC CreateSession use the server default mode
  
  aponcedeleonch
  and
  claude
  committed
  e68fb44
- feat(mecatui): add --permission-mode and show the posture honestly
  
  aponcedeleonch
  and
  claude
  committed
  37f9f3d
- docs(permissions): document the permission-mode vocabulary
  
  aponcedeleonch
  and
  claude
  committed
  d78fed1
- fix(permissions): let the startup fast paths see permissionMode:
  
  aponcedeleonch
  and
  claude
  committed
  fab96fe
- refactor(permissions): name the checker states and bound loadProjectRules
  
  aponcedeleonch
  and
  claude
  committed
  fdb367e
- docs(reference): regenerate the gRPC schema for the CreateSession mode
  
  aponcedeleonch
  and
  claude
  committed
  4a6ab1d
- refactor(permissions): follow the ADR renumber to 0375
  
  aponcedeleonch
  and
  Mecatl
  committed
  92e6c92
- test(permissions): declare the checker choice at the remaining allow-all build sites
  
  aponcedeleonch
  and
  Mecatl
  committed
  d95590e
- test(permissions): declare the checker choice at allow-all sites added on main
  
  aponcedeleonch
  and
  Mecatl
  committed
  1a2e0be
- refactor(mecatequi): extract explicit-flag recording from parseFlags
  
  aponcedeleonch
  and
  Mecatl
  committed
  d3fd50d
- chore(permissions): drop references to the deleted ADR 0375
  
  aponcedeleonch
  and
  Mecatl
  committed
  4ed1273
- feat(mecatui): cycle every permission mode and block ones that need a restart
  
  aponcedeleonch
  and
  Mecatl
  committed
  8dace64
- test(permissions): declare the checker choice at allow-all sites added on main
  
  aponcedeleonch
  and
  Mecatl
  committed
  1c4ad94
- test(permissions): adapt tests added on main to the permission-mode contract
  
  aponcedeleonch
  and
  Mecatl
  committed
  a06c2f9
- refactor(permissions): make allow-all and loose-substitution mode-driven
  
  aponcedeleonch
  and
  Mecatl
  committed
  fbf4644
- fix(mecatui): wire auto/yolo modes end-to-end in the UI
  
  aponcedeleonch
  and
  Mecatl
  committed
  235353b
- fix(mecatui): correct auto/yolo mode display and remove stale 'pending' suffix
  
  aponcedeleonch
  and
  Mecatl
  committed
  bbf2d64
- fix(lint,api,docs): fix gci ordering, unused receiver, goconst, api snapshot, grpc ref
  
  aponcedeleonch
  and
  Mecatl
  committed
  e35b0c1
- fix(permissions): make auto/yolo modes work end to end and split trust from mode
  
  aponcedeleonch
  and
  Mecatl
  committed
  ec32065
- fix(sdk): project ServerCapabilities.projectTrusted in the TypeScript SDK
  
  aponcedeleonch
  and
  Mecatl
  committed
  2228fc6
- fix(permissions): address review on session-scoped permission modes
  
  aponcedeleonch
  and
  Mecatl
  committed
  2af72e4
- fix(ci): run kind fixtures in yolo and drop stale --guardrails base arg
  
  aponcedeleonch
  and
  Mecatl
  committed
  fcb4825
- test(e2e): create kind e2e sessions in the deployment default mode
  
  aponcedeleonch
  and
  Mecatl
  committed
  43b28c1
- style(e2e): gofmt the live qualification create body
  
  aponcedeleonch
  and
  Mecatl
  committed
  90fd7ce
- fix(permissions): admit auto only when an enforcing guardrail rule compiles
  
  aponcedeleonch
  and
  claude
  committed
  d89d066
- fix(permissions): derive legacy mode and ceiling after the full alias fold
  
  aponcedeleonch
  and
  claude
  committed
  d8166f2
- fix(permissions): re-admit the stored mode under the acquired lease
  
  aponcedeleonch
  and
  claude
  committed
  7978c30
- docs(permissions): describe rollback for sessions stored in auto or yolo
  
  aponcedeleonch
  and
  claude
  committed
  c04bba2
- fix(mecatui): gate session-scoped mode semantics on session_permission_modes
  
  aponcedeleonch
  and
  claude
  committed
  7c8d873
- fix(studio): report auto and yolo sessions instead of showing them as Manual
  
  aponcedeleonch
  and
  claude
  committed
  7ffbc2f
- fix(helm): reject single-dash mode flags in extraArgs
  
  aponcedeleonch
  and
  claude
  committed
  c5c37d2
- fix(helm): enumerate permissionMode values in the chart schema
  
  aponcedeleonch
  and
  claude
  committed
  1a471d1
- docs(ci): match the reusable mecatequi reviewer note to the action default
  
  aponcedeleonch
  and
  claude
  committed
  1e35027
- fix(permissions): keep explicit default child modes and re-admit resumed children
  
  aponcedeleonch
  and
  claude
  committed
  cbb41d1
- fix(permissions): select checker enforcement from the executing child's mode
  
  aponcedeleonch
  and
  claude
  committed
  a6cf4f1
- feat(permissions): recover a refused-mode awaiting session with a SetMode downgrade
  
  aponcedeleonch
  and
  claude
  committed
  2de26a4
- fix(permissions): refuse settings permissionMode with deprecated --posture or --yolo
  
  aponcedeleonch
  and
  claude
  committed
  8f513e4
- test(permissions): execute a yolo, auto, default sequence on one session
  
  aponcedeleonch
  and
  claude
  committed
  7b45c22
- fix(permissions): adopt the under-lease snapshot at run entry
  
  aponcedeleonch
  and
  claude
  committed
  a6cbf1a
- test(permissions): give the Team checker fixture a well-formed prohibited verdict
  
  aponcedeleonch
  and
  claude
  committed
  f7bca08
- fix(schedule): fire a mutating in-chat schedule in its creator's mode
  
  aponcedeleonch
  and
  claude
  committed
  dea7609
- fix(schedule): keep an unspecified schedule mode as the server default
  
  aponcedeleonch
  and
  claude
  committed
  9689c6b
- fix(studio): show and preserve auto, yolo, and server-default schedule modes
  
  aponcedeleonch
  and
  claude
  committed
  aaba681

Commits

Commits on Oct 16, 2026