Skip to content

v0.14.10

Choose a tag to compare

View all tags
@TechDufus TechDufus released this 06 Nov 08:53
· 35 commits to main since this release
v0.14.10
This tag was signed with the committer’s verified signature.
TechDufus Matthew DeGarmo
SSH Key Fingerprint: kfWmC1mt2f9FtwtRlPl4nhawEyxgiV82rpTOtA/7cLU
Verified
Learn about vigilant mode.
97c51ba
This commit was signed with the committer’s verified signature.
TechDufus Matthew DeGarmo
SSH Key Fingerprint: kfWmC1mt2f9FtwtRlPl4nhawEyxgiV82rpTOtA/7cLU
Verified
Learn about vigilant mode.

AI agents can now act on your lab, with your approval (#40). This release adds MCP action tools that wait for a person to approve them, the approval page and its notifications, and the guides for the Android app and MCP clients. It is a patch; with MCP off (the default) nothing changes.

New

  • Action tools for agents. With MCP on, an administrator's mcp token holding actions:<plugin> sees that plugin's actions as tools: kubernetes_restart, flux_reconcile, alertmanager_silence_create and alertmanager_silence_expire. They are listed only while the plugin is running.
  • Human approval:
    • an agent's call creates an approval request, and the agent gets a link to give you;
    • you open /approve/<id> (or the new header indicator), check the action, its target and full input, and approve or deny;
    • a protected target needs you to type its name, and the agent can never supply it;
    • the action runs once, as the requesting agent, after re-checking its token, role and scope;
    • the agent reads the outcome with dash_approval, or waits for it through URL elicitation on MCP 2026-07-28;
    • requests expire after 10 minutes, and each user can have at most 20 pending.
  • Approval notifications: a pending-approvals badge in the header, and a push to your devices that take approvals (v0.14.9).
  • Per-plugin agent policy: plugins.<id>.actions.agents, also in Settings → MCP:
    • approve (default): every call waits for you;
    • allow: runs at once, except protected targets;
    • deny: hides the tools.
  • Audit: every request, decision and run, with the requester, the approver, the target and a hash of the arguments, never their free text.
  • Guides:
    • docs/agents/mcp.md: Claude Code with a token, Claude Desktop and claude.ai through OAuth, VS Code, omp;
    • docs/agents/dash-skill/SKILL.md: an agent skill for using dash;
    • docs/clients/android.md: the contract for the coming Android app.
  • Inputs: action inputs describe themselves (required fields, allowed kinds), and silence matchers are capped in length.

Upgrade notes

  • No step needed. If you turned MCP on, an existing mcp token holding actions:<plugin> now sees that plugin's action tools, and its calls create approval requests (the approve default).

  • Rolling back to v0.14.9:

    • remove plugins.<id>.actions.agents from the config file and unset DASH_PLUGINS_<ID>_ACTIONS_AGENTS; v0.14.9 refuses both;
    • a value saved in the settings page only warns;
    • pending approvals are kept in memory and are lost at any restart.

    See docs/upgrading.md.

Assets 2
Loading