weichen 17f7e2b168 Wire the permission ask port to HITL and adopt the Policy object ...

Why: N1 WP2/WP3 host side - the kernel ask loop must reach the HITL
confirm card, and tool gating should run through the typed Policy with
the session-allow store port instead of a hand-built Request.

Evidence: go vet clean; go test ./... all packages ok, including new
TestConvAllowStoreKeysByName, TestPermissionAskRoutesToHITL, and
permissionAskOf tests. Nested agent-native pin at 9758a8d (PR #17).

Impact: runmgr.ExecuteTool decides via agentpolicy.Policy with
convAllowStore (keying unchanged: conversation x tool name);
runCtx.PermissionAsk routes kernel asks to the shared toolConfirmCard
HITL; direct and subagent loops pass PermissionAsk into the kernel
config (nil for hosts without the method, preserving legacy ask=reject).

Refs: Documents proposal 2026-10-07-agent-stack-n1q1i1-plans.md WP2/WP3; Agent-Native PR #17

2026-10-07 04:04:10 +00:00

..

app

Expose builtin document parsing through the host handle

2026-10-06 14:59:38 +00:00

blobstore

Validate object ids in the local blobstore to block path traversal

2026-09-30 16:32:17 +00:00

bus

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00

cardsvc

Land project inbox: aggregation, archive-to-project, project SSE (CF3)

2026-09-30 19:11:11 +00:00

cmdbus

Add EXT-1 inproc plugin command handler with owner-scoped host handle

2026-10-05 11:39:25 +00:00

config

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

ctxasm

Store secrets apart from settings and assemble context at the end

2026-10-04 18:20:10 +00:00

docgen

Generate styled Word deliverables and pin artifact cards in chat

2026-10-01 02:48:49 +00:00

evalgold

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

hostapi

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

ingest

Skip wide sparse columns without dropping later xlsx sheets

2026-10-06 15:30:50 +00:00

intentgate

Route a matched intent to its workflow after commands

2026-10-01 16:04:49 +00:00

pgbus

Add admin-issued accounts with forced first-login password change

2026-09-30 11:15:22 +00:00

plugins

Add a mock workflow script and load the example plugin

2026-10-01 16:21:50 +00:00

profiles

Stream tool progress and drop hard agent limits

2026-10-02 02:17:02 +00:00

prompts

Hide the compose model's reasoning from the user

2026-10-02 13:53:57 +00:00

quality

Check final replies before the direct run stops

2026-10-01 13:54:15 +00:00

rag

Add EXT-1 inproc plugin command handler with owner-scoped host handle

2026-10-05 11:39:25 +00:00

ratelimit

Add multi-instance groundwork: blobstore seam for artifacts

2026-09-30 02:39:50 +00:00

runmgr

Wire the permission ask port to HITL and adopt the Policy object

2026-10-07 04:04:10 +00:00

runtime

Wire the permission ask port to HITL and adopt the Policy object

2026-10-07 04:04:10 +00:00

server

Expose builtin document parsing through the host handle

2026-10-06 14:59:38 +00:00

settings

Store secrets apart from settings and assemble context at the end

2026-10-04 18:20:10 +00:00

skills

Add cross-task content methods, visuals, and scoring

2026-10-01 09:06:36 +00:00

squadadapter

Wire the squad native adapter instead of the core registration

2026-10-03 13:42:04 +00:00

store

Bind archived filter as bool in ListTasks

2026-10-05 03:18:10 +00:00

tools

Run tool scripts through the shared host and keep orchestration off

2026-10-03 18:04:25 +00:00

workflow

Run workflow scripts through a capped callback host

2026-10-01 16:18:59 +00:00