Release v0.5.1#73

Merged

shoom1 merged 42 commits intomainfrom

Apr 19, 2026

Commits on Apr 18, 2026

feat(permissions): scaffold permissions package
shoom1
committed
feat(permissions): Capability, ResolvedCapability, EXEMPT sentinel
shoom1
committed
feat(permissions): Rule, Effect, RuleSource, AskScope, CheckResult
shoom1
committed
feat(permissions): PermissionContext + variable substitution
shoom1
committed
feat(permissions): Matcher protocol + StringGlobMatcher
shoom1
committed
feat(permissions): PathMatcher with ** glob support
shoom1
committed
feat(permissions): URLMatcher for http.* capabilities
shoom1
committed
feat(permissions): ShellMatcher for shell.* capabilities
shoom1
committed
feat(permissions): matcher registry + capability-name glob
shoom1
committed
feat(permissions): BUILTIN_RULES default policy
shoom1
committed
feat(permissions): load_rules from settings.json permissions section
shoom1
committed
feat(permissions): append_project_rule with atomic JSON merge
shoom1
committed
feat(permissions): build_request + parse_response for ask dialog
shoom1
committed
feat(permissions): PermissionEngine init + rule loading + disabled short-circuit
shoom1
committed
feat(permissions): engine rule-based allow/deny path
shoom1
committed
feat(permissions): engine ask flow (once/session/always/deny)
shoom1
committed
test(permissions): serialise concurrent ask prompts
shoom1
committed
refactor(permissions): drop try/except scaffolding from __init__.py now that all modules exist
shoom1
committed
feat(tools): add ToolDefinition.capabilities field + register_tool kwarg (staged)
shoom1
committed
feat(tools): declare capabilities on every registered tool
shoom1
committed
feat(permissions): ADK PermissionPlugin
shoom1
committed
feat(permissions): LangGraph wrap_tool_for_permission
shoom1
committed
feat(permissions): construct PermissionEngine in BaseWorkflowManager + PERMISSION_ENGINE key
shoom1
committed
feat(permissions): add permissions + permissions_enabled settings (staged)
shoom1
committed
feat(permissions): ADK manager uses PermissionPlugin
shoom1
committed
feat(permissions): LangGraph builder uses wrap_tool_for_permission
shoom1
committed
refactor(permissions): delete retired code (PermissionLevel, ConfirmationPlugin, _wrap_for_confirmation, hitl_tools, hitl_enabled)
shoom1
committed
docs(permissions): drop transient 'once Task N' phrasing from adapter docstrings
shoom1
committed
docs(permissions): update CLAUDE.md + README.md to describe the new permission engine
shoom1
committed
fix(permissions): preserve '*' wildcard in matcher canonicalize + matches
shoom1
committed
fix(permissions): register backend state tools as EXEMPT
shoom1
committed
feat(permissions): allow memory.* and kb.* by default; register ADK transfer_to_agent as EXEMPT
shoom1
committed
perf(workflow): offload _ensure_managers_initialized to a worker thread
shoom1
committed
feat(permissions): broaden filesystem.* grants to the parent directory
shoom1
committed
feat(permissions): show directory-scope target in ask prompt
shoom1
committed
Merge pull request #72 from shoom1/feature/permissions-system
shoom1
authored

Commits on Apr 19, 2026

Release v0.5.1
shoom1
committed