[feat] Approval boundary: pause on authored intent, not session ids - #5041

Merged

mmabrouk merged 24 commits into

docs/approval-boundary

Jul 4, 2026

Commits on Jul 4, 2026

feat(sdk): annotate_trace platform op (code half of the #4999 design)
mmabrouk
committed
docs(agent-workflows): approval-boundary workspace: flow explainer, bug, reviews, fix plan
mmabrouk
committed
docs(approval-boundary): address review round 1 on how-approvals-work
mmabrouk
committed
docs(approval-boundary): fold in the PR #5054 loop diagnosis
mmabrouk
committed
docs(approval-boundary): round 2: settle the permission model, add the target path
mmabrouk
committed
docs(approval-boundary): settle runner.permissions naming and add the Pi settings block (round 3)
mmabrouk
committed
docs(approval-boundary): fold the Codex pre-implementation review (resume redesign, wire-first phases, test plan)
mmabrouk
committed
feat(runner): permission wire types + decision core (approval-boundary phase 1)
mmabrouk
committed
feat(runner): consult-first approval responder replaces park-by-default (phase 2a)
mmabrouk
committed
feat(runner): relay enforces the shared permission plan; Pi gets relay-ask pauses (phase 2b)
mmabrouk
committed
feat(sdk): assemble and ship the permission plan; delete needs_approval (phase 3)
mmabrouk
committed
feat(sdk): strip needs_approval from the platform op catalog (phase 3 tail)
mmabrouk
committed
docs(approval-boundary): build notes for phase 3 + restack incident
mmabrouk
committed
feat(web): four-mode permission policy, Pi settings block, drop legacy fallbacks (phase 4b)
mmabrouk
committed
feat(service): batch responses surface the paused state (phase 4a)
mmabrouk
committed
chore(runner): delete legacy wire fields, rename acp-interactions + pause controller (phase 5)
mmabrouk
committed
docs(agent-workflows): sweep the old permission vocabulary; banner superseded workspaces
mmabrouk
committed
test: cross-language permission-decision parity fixture (40 cases)
mmabrouk
committed
fix(sdk): drop unenforceable builtin tool permission loudly (QA finding)
mmabrouk
committed
fix(runner): a paused tool call's teardown frames no longer clobber the approval prompt
mmabrouk
committed
fix: reconcile the rebase onto big-agents (#5064/#5059)
mmabrouk
committed
fix: address CodeRabbit review + pin the client-tool interaction row
mmabrouk
committed
docs(approval-boundary): status + build notes for the rebase, CodeRabbit round, and merge
mmabrouk
committed
fix(runner): stamp resolvedName on pause payloads; persist client-tool pauses with their own kind
mmabrouk
committed