Repository navigation

fix(agent-platform): stop session_principal approval gate from auto-dispatching - #64318

Closed

benjackwhite wants to merge 578 commits into

masterfrom

fix/agent-platform-session-principal-approval-bypass

Closed

fix(agent-platform): stop session_principal approval gate from auto-dispatching#64318
benjackwhite wants to merge 578 commits into
masterfrom
fix/agent-platform-session-principal-approval-bypass

This pull request is big! We're only showing the most recent 250 commits

Commits on Jun 8, 2026
- refactor(ci): use `@posthog/quill...` instead of an explicit allowlist
  
  benjackwhite
  and
  claude
  committed
  0d4c956
- feat(agents): slack BYO + concierge native writes + console history & allowlist
  
  benjackwhite
  and
  claude
  committed
  e8c3129
- feat(agents): slack trigger gains mention_only, auto_resume_threads, ack_reaction
  
  benjackwhite
  and
  claude
  committed
  4cf8d93
- fix(agents): breadcrumb 'Agents' link routes to /agents not /
  
  benjackwhite
  and
  claude
  committed
  c3b2623
- fix(agent-migrations): serialize migrate() across processes + survive racing creates
  
  benjackwhite
  and
  claude
  committed
  c9b44a8
- feat(agents): teach concierge about slack-trigger behavioral fields
  
  benjackwhite
  and
  claude
  committed
  46950ec
- feat(agents): preview-token response describes endpoints + auth contract
  
  benjackwhite
  and
  claude
  committed
  b3dba7b
- feat(agents): structured logging for slack trigger ack_reaction path
  
  benjackwhite
  and
  claude
  committed
  101a6c9
- docs(agents): concierge skill flags reactions:write when ack_reaction is set
  
  benjackwhite
  and
  claude
  committed
  d92b182
- feat(agents): janitor validate surfaces non-blocking warnings for orphans
  
  benjackwhite
  and
  claude
  committed
  9ffa23a
- refactor(agents): stop self-migrating; dedicated migrator owns the schema
  
  benjackwhite
  and
  claude
  committed
  6f0ae23
- feat(agents): janitor compiles custom-tool source.ts at freeze
  
  benjackwhite
  and
  claude
  committed
  c9c8ca6
- feat(agent-runner): default sandboxHostImage to the local dev tag under isDev()
  
  benjackwhite
  and
  claude
  committed
  b9d0c01
- feat(agents): enforce custom-tool runtime shape at freeze + reject hand-written compiled.js
  
  benjackwhite
  and
  claude
  committed
  0a1cb14
- feat(agents): notify slack thread on terminal session failure
  
  benjackwhite
  and
  claude
  committed
  07bb960
- feat(agents): replace live-now panel with per-agent stat rows on agents list
  
  benjackwhite
  and
  claude
  committed
  a8d3c8d
- feat(agents): typed bundle authoring API + AST tool shape check
  
  benjackwhite
  and
  claude
  committed
  74e9ad3
- chore(agents): upgrade agent-console storybook to v10 + navigable shell
  
  benjackwhite
  and
  claude
  committed
  99dc96f
- feat(agents): redesign config panel + richer bundle file viewer
  
  benjackwhite
  and
  claude
  committed
  b8a3200
- fix(agents): freeze deadlock — janitor returns derived spec; Django stamps it
  
  benjackwhite
  and
  claude
  committed
  66d5371
- feat(agents): interactive client tools — park session + resume via /send
  
  benjackwhite
  and
  claude
  committed
  2c74a84
- fix(agents): stop leaking concierge fixture fallback into real sessions
  
  benjackwhite
  and
  claude
  committed
  fd42c0f
- refactor(agents): keep fixture runner out of production code paths
  
  benjackwhite
  and
  claude
  committed
  330f07a
- fix(agents): stop ConciergeDock from remounting on every agent navigation
  
  benjackwhite
  and
  claude
  committed
  4ba81e4
- refactor(agents): consolidate concierge dock header into fewer controls
  
  benjackwhite
  and
  claude
  committed
  b53a3a9
- refactor(agents): multi-line concierge dock header + focus indicator + bug fixes
  
  benjackwhite
  and
  claude
  committed
  a2d4648
- refactor(agents): redesigned two-row dock header
  
  benjackwhite
  and
  claude
  committed
  7b07f2d
- style(agents): add thin divider between dock header rows
  benjackwhite
  committed
  e44c610
- style(agents): make dock header row divider full-width
  benjackwhite
  committed
  a241fe8
- feat(agents): tab count badges + idle-listener-stop TODO
  
  benjackwhite
  and
  claude
  committed
  56fb552
- feat(agents): approvals UI + tab count badges + small fixes
  
  benjackwhite
  and
  claude
  committed
  80e26fc
- feat(agents): approvals UI + tab count badges + small fixes
  benjackwhite
  committed
  5054c2f
- feat(agents): paginate sessions tab with load-more
  
  benjackwhite
  and
  claude
  committed
  3af1696
- feat(agents): accept requires_approval on native + custom tools in spec schema
  
  benjackwhite
  and
  claude
  committed
  d1428ec
Commits on Jun 9, 2026
- feat(agents): minimal /healthz liveness server for agent-runner
  
  benjackwhite
  and
  claude
  committed
  f826945
- chore(agents): line up local agent ports; runner health default 8083
  
  benjackwhite
  and
  claude
  committed
  95fb28e
- feat(agents): slack thread participant control + rejection replies
  
  benjackwhite
  and
  claude
  committed
  1adda5d
- chore(docs): move shipped plans to `plans/shipped/` and update roadmap (#62400)
  
  benjackwhite
  and
  claude
  authored
  4095f6f
- feat(agents): move agent platform to a dedicated Django product DB
  
  benjackwhite
  and
  claude
  committed
  89e1574
- fix(agents): concierge authors via native tools, drop the MCP server
  
  benjackwhite
  and
  claude
  committed
  45e1a7b
Commits on Jun 10, 2026
- fix(agents): slack manifest — PAT scope + console interactivity gate
  
  benjackwhite
  and
  claude
  committed
  821846d
- fix(agents): persist derived spec on janitor freeze
  
  benjackwhite
  and
  claude
  committed
  746a691
- chore(agents): align concierge example with current tool surface
  
  benjackwhite
  and
  claude
  committed
  0b6f02a
- chore(agents): drop agent activity-log wiring; use get_from_env for settings
  
  benjackwhite
  and
  claude
  committed
  7937d0d
- chore: update OpenAPI generated types
  tests-posthog[bot]
  authored
  c0b37bd
- chore: update OpenAPI generated types
  tests-posthog[bot]
  authored
  1a41f74
- feat(agents): sre bot runbook memory with approval-gated curation
  
  benjackwhite
  and
  claude
  committed
  a279bfa
- test(mcp): update unit test snapshots
  tests-posthog[bot]
  authored
  9008809
- fix(agents): review fixes — janitor URL, freeze guard, MCP secret exposure
  
  benjackwhite
  and
  claude
  committed
  ad589e7
- feat(agents): gate agent-platform MCP tools behind agent-platform-mcp flag
  
  benjackwhite
  and
  claude
  committed
  b641e28
- chore: update OpenAPI generated types
  tests-posthog[bot]
  authored
  bb85df5
- chore: update OpenAPI generated types
  tests-posthog[bot]
  authored
  fddc342
- feat(agents): register agent-platform-mcp feature flag
  
  benjackwhite
  and
  claude
  committed
  43d3120
- fix(agents): restore agent-platform-mcp MCP gate
  
  benjackwhite
  and
  claude
  committed
  8b3f631
- chore: update OpenAPI generated types
  tests-posthog[bot]
  authored
  e16d474
- chore: update OpenAPI generated types
  tests-posthog[bot]
  authored
  f0a8c56
- chore(agents): enable flag-gated MCP tools against a local API
  
  benjackwhite
  and
  claude
  committed
  326544b
- feat(agents): store skills as skills/<id>/SKILL.md, drop companion files
  
  benjackwhite
  and
  claude
  committed
  a16d6b3
- test(mcp): update unit test snapshots
  tests-posthog[bot]
  authored
  3dccbe3
- chore: update OpenAPI generated types
  tests-posthog[bot]
  authored
  62d738f
- chore(agents): fix agent_platform product:lint (package.json, tach, drop turbo.json)
  
  benjackwhite
  and
  claude
  committed
  18daa4f
- fix(agents): constrain agent slug at model, serializer, and preview-proxy
  
  benjackwhite
  and
  claude
  committed
  a339974
- chore(mcp): reconcile stale tool-schema snapshots
  
  benjackwhite
  and
  claude
  committed
  e5fac9a
- feat(agents): domain-mode aware agent-ingress URLs
  
  benjackwhite
  and
  claude
  committed
  b210a2c
- feat(agents): add agent platform Django product (models, API, config)
  
  benjackwhite
  and
  claude
  committed
  31d462e
- chore(agents): quiet agent-ingress boot log when no public url set
  
  benjackwhite
  and
  claude
  committed
  185b9bd
- chore: update OpenAPI generated types
  tests-posthog[bot]
  authored
  235e0d6
- chore: update OpenAPI generated types
  tests-posthog[bot]
  authored
  f4b8679
- feat(agents): unify agent config into a filesystem explorer
  
  benjackwhite
  and
  claude
  committed
  9433d3a
- fix(mcp): preserve category-level feature_flag through scaffold-yaml
  
  benjackwhite
  and
  claude
  committed
  b082837
- fix(agents): add padding to agent.md viewer in config explorer
  
  benjackwhite
  and
  claude
  committed
  a8fa446
- fix(mcp): gate agent-platform tools behind agent-platform-mcp flag
  
  benjackwhite
  and
  claude
  committed
  ce7e726
- feat(agents): scope auth to triggers, enforce every auth mode
  
  benjackwhite
  and
  claude
  committed
  fd2d703
- fix(agents): repair broken tests across agent services
  
  benjackwhite
  and
  claude
  committed
  c53c1e3
- fix(agents): build MCP connect URL per routing mode
  
  benjackwhite
  and
  claude
  committed
  742cc1e
- feat(agents): per-trigger auth + domain-mode ingress URLs
  
  benjackwhite
  and
  claude
  committed
  20ebd55
- fix(ci): register agent_platform models in IDOR semgrep rules
  
  benjackwhite
  and
  claude
  committed
  41b294e
- fix(ci): register agent_platform models in IDOR semgrep rules
  
  benjackwhite
  and
  claude
  committed
  3fb81cd
- feat(agents): mode-aware trigger usage URLs + fold limits into model
  
  benjackwhite
  and
  claude
  committed
  aae486d
- fix(agents): satisfy mypy in missing_required_secrets
  
  benjackwhite
  and
  claude
  committed
  d4bc576
- fix(agents): satisfy mypy in missing_required_secrets
  
  benjackwhite
  and
  claude
  committed
  6c684e6
- fix(agents): clarify selection and auto-expand in config explorer tree
  
  benjackwhite
  and
  claude
  committed
  337061b
- feat(agents): log every ingress HTTP request
  
  benjackwhite
  and
  claude
  committed
  ef16fbf
- fix(agents): log workspace when slack event rejected as untrusted
  
  benjackwhite
  and
  claude
  committed
  40da5a6
- fix(agents): resolve chat/mcp trigger config default for zod typecheck
  
  benjackwhite
  and
  claude
  committed
  98bff73
- fix(agents): resolve chat/mcp trigger config default for zod typecheck
  
  benjackwhite
  and
  claude
  committed
  2f59d5c
- chore(agents): plan ingress decision logs surfaced to the agent
  
  benjackwhite
  and
  claude
  committed
  dd455bf
- feat(agents): add nightly fleet-audit cron to the concierge
  
  benjackwhite
  and
  claude
  committed
  4112bde
- chore(agents): pull live sre-slack-bot spec (trusted workspace fix)
  
  benjackwhite
  and
  claude
  committed
  87b486e
- fix(agents): derive skill description from SKILL.md frontmatter
  
  benjackwhite
  and
  claude
  committed
  43f7f75
- fix(agents): make approval store mandatory and fail-closed
  
  benjackwhite
  and
  claude
  committed
  4c739b7
- fix(agents): record approval decider by user uuid, not integer pk
  
  benjackwhite
  and
  claude
  committed
  fcc9b0e
- feat(agents): clickable console deep link for approval requests
  
  benjackwhite
  and
  claude
  committed
  0821bd4
- feat(agents): route LLM observability into each agent's own project
  
  benjackwhite
  and
  claude
  committed
  79b511e
- feat(agents): link the console out to AI observability per agent + session
  
  benjackwhite
  and
  claude
  committed
  75d295e
- feat(agents): AI observability dashboard in the console (fleet + per-agent)
  
  benjackwhite
  and
  claude
  committed
  8859303
Commits on Jun 11, 2026
- Merge branch 'master' into agent-platform-django-base
  benjackwhite
  authored
  243bd4a
- fix(agents): drop ai_gateway scope from console OAuth request (temporary)
  
  benjackwhite
  and
  claude
  committed
  d45f304
- Merge agent-platform-django-base (master catch-up) into ass
  
  benjackwhite
  and
  claude
  committed
  4ecb76f
- fix(agents): post-merge fixups — tool-filtering count + console ai_gateway mock
  
  benjackwhite
  and
  claude
  committed
  a131161
- fix(agents): repair pre-existing CI breaks surfaced by the master merge
  
  benjackwhite
  and
  claude
  committed
  5c39f2a
- fix(agents): unblock agent-console build (quill-charts + registry stub)
  
  benjackwhite
  and
  claude
  committed
  474d7de
- fix(ci): build @posthog/quill-charts in agent-console CI jobs
  
  benjackwhite
  and
  claude
  committed
  71bddec
- fix(ci): set AGENT_INTERNAL_SIGNING_KEY in the agent bundle smoke test
  
  benjackwhite
  and
  claude
  committed
  dc24e1a
- fix(agents): restore dropped enum override + shim __filename in agent bundle
  
  benjackwhite
  and
  claude
  committed
  d792dec
- chore(agents): ruff-format agent_platform 0002 migration
  
  benjackwhite
  and
  claude
  committed
  613faaa
- fix(ci): drop the removed migrate entrypoint from the agents smoke test
  
  benjackwhite
  and
  claude
  committed
  a4e5f91
- chore(agents): fix stale approval_url assertions in e2e tests
  
  benjackwhite
  and
  claude
  committed
  c82675c
- chore: update OpenAPI generated types
  tests-posthog[bot]
  authored
  b0cd2f1
- feat(agent_platform): apply opt-in SSL options to product-DB connections
  claude
  committed
  661346d
- refactor(agent_platform): scope product-DB SSL options per product
  claude
  committed
  93bccbd
- fix(agent_platform): bypass egress proxy for internal janitor/ingress calls
  claude
  committed
  424efae
Commits on Jun 12, 2026
- fix(agents): console post-login redirect to CONSOLE_BASE_URL, not request origin
  
  benjackwhite
  and
  claude
  committed
  c7045b0
- fix(agents): surface agents API scope in PAT UI behind platform flag
  
  benjackwhite
  and
  claude
  committed
  263ded9
- fix(agents): surface agents API scope in PAT UI behind platform flag
  
  benjackwhite
  and
  claude
  committed
  4ef58c6
- chore(agents): restructure agent_platform into canonical product layout (#63175)
  
  benjackwhite
  and
  claude
  authored
  33e7adc
- chore(mcp): fix stale required-flags count in tool-filtering test
  
  benjackwhite
  and
  claude
  committed
  48a217a
- refactor(agent_platform): scope product-DB sslmode to direct alias only (#63182)
  
  benjackwhite
  and
  claude
  authored
  29d2a1e
- chore(agents): allowlist agent_platform presentation imports in import-linter
  
  benjackwhite
  and
  claude
  committed
  702a0dd
- chore(agents): move agent settings into posthog/settings/agents.py
  
  benjackwhite
  and
  claude
  committed
  22fd3dc
- chore(agents): colocate internal-jwt helpers in the agent_platform product
  
  benjackwhite
  and
  claude
  committed
  579dfb3
- feat(agents): global agent slug namespace with server-minted slugs
  
  benjackwhite
  and
  claude
  committed
  873f9b2
- feat(agents): resolve ingress agents by slug globally, derive session team from app
  
  benjackwhite
  and
  claude
  committed
  e657d45
- fix(agents): posthog data tools act as the calling user, not the agent team
  
  benjackwhite
  and
  claude
  committed
  0ac9d26
- fix(agents): domain-mode-aware console proxy + dock assumes concierge exists
  
  benjackwhite
  and
  claude
  committed
  73ee18e
- Merge remote-tracking branch 'origin/master' into agent-platform-django-base
  benjackwhite
  committed
  7aaf1e4
- Merge remote-tracking branch 'origin/agent-platform-django-base' into ass
  benjackwhite
  committed
  d52c667
- feat(agents): global agent slug namespace with server-minted slugs
  
  benjackwhite
  and
  claude
  committed
  feb3015
- Merge remote-tracking branch 'origin/agent-platform-django-base' into ass
  benjackwhite
  committed
  fbe6d46
- chore(agents): drop duplicate slug-minting test (moved to backend/tests/ on base)
  
  benjackwhite
  and
  claude
  committed
  dc5f3a0
- test(mcp): update unit test snapshots
  tests-posthog[bot]
  authored
  7bc4599
- test(mcp): update unit test snapshots
  tests-posthog[bot]
  authored
  33c9c2f
- fix(agents): don't request client SSL for in-cluster pgbouncer DB hosts
  
  benjackwhite
  and
  claude
  committed
  7cd05ad
- fix(agents): console domain proxy dials agent public domain directly
  
  benjackwhite
  and
  claude
  committed
  9f7474c
- refactor(agents): inline DropdownMenuTrigger props in DockHeader
  
  dmarticus
  and
  claude
  committed
  e570c98
- fix(agents): recover from drifted source spec in clone_from + put_bundle
  
  dmarticus
  and
  claude
  committed
  efcc8b8
- fix(agents): keep agent-console transcript in chat order on mid-stream send
  
  dmarticus
  and
  claude
  committed
  b94f43b
- fix(mcp): bump required feature flag count to 17
  dmarticus
  committed
  a940fc0
- test(snowflake): merge duplicate non-retryable test classes
  dmarticus
  committed
  5aec048
- Merge agent-platform-django-base into ass
  dmarticus
  committed
  9ea12cf
- fix(agents): repair stale CI references on the PR branch
  dmarticus
  committed
  3aa818f
- fix(quill): restore ghost button variant
  dmarticus
  committed
  c7201ef
- fix(frontend): satisfy strict quill types in scene menu bar + taxonomic input
  dmarticus
  committed
  ef5e005
- fix(ci): don't fail storybook flake check when no main-storybook tests match
  dmarticus
  committed
  9cbd7af
Commits on Jun 14, 2026
Commits on Jun 15, 2026
- Merge branch 'master' into agent-platform-django-base
  dmarticus
  authored
  0603f1e
- Merge branch 'master' into agent-platform-django-base
  benjackwhite
  authored
  2c2b509
- fix(agents): authenticate chat cancel/listen/client_tool_result + validate console slug
  
  benjackwhite
  and
  claude
  committed
  b31f682
- feat(agents): document agent endpoints in console overview + config
  
  benjackwhite
  and
  claude
  committed
  7d08353
- Merge remote-tracking branch 'origin/agent-platform-django-base' into ass
  benjackwhite
  committed
  5d126ff
- refactor(agents): drive ingress route auth from one declarative guard
  
  benjackwhite
  and
  claude
  committed
  7274b60
- Merge remote-tracking branch 'origin/master' into agent-platform-django-base
  benjackwhite
  committed
  e38c44e
- Merge remote-tracking branch 'origin/agent-platform-django-base' into ass
  benjackwhite
  committed
  e7884c2
- chore(agents): ruff-format data_stores.py after master merge
  
  benjackwhite
  and
  claude
  committed
  87c6e6d
- chore(agents): ruff-format data_stores.py after master merge
  
  benjackwhite
  and
  claude
  committed
  e63e8d9
- fix(agents): drop server-derived limits from sre-slack-bot example spec
  
  benjackwhite
  and
  claude
  committed
  21f196a
- Merge branch 'master' into agent-platform-django-base
  benjackwhite
  authored
  308b685
- chore(agents): validate the concierge — catalog tool, drop cron, Slack fix (#63581)
  
  benjackwhite
  and
  claude
  authored
  0dfea5e
- fix(agents): surface janitor structured errors in the API detail
  
  benjackwhite
  and
  claude
  committed
  8c72883
- Merge agent-platform-django-base into ass
  dmarticus
  committed
  ba56632
- chore(agents): co-locate agent platform under products/agent_platform (#63542)
  
  authored
  68533e5
- Merge remote-tracking branch 'origin/master' into ass-merge-fix-v2
  dmarticus
  committed
  5d85922
- fix(agents): correct sync-api-schema REPO_ROOT walk-up after colocation
  
  dmarticus
  and
  claude
  committed
  edcc6bd
- chore(agents): make agent_platform service CLAUDE.md files symlinks to AGENTS.md
  
  dmarticus
  and
  claude
  committed
  cdde002
Commits on Jun 16, 2026
Commits on Jun 17, 2026

Commits

Commits on Jun 8, 2026

Commits on Jun 9, 2026

Commits on Jun 10, 2026

Commits on Jun 11, 2026

Commits on Jun 12, 2026