feat(desktop): authorize client capabilities in managed sessions - #4143

Merged

YayoiNanoka merged 30 commits into

apache:mainfrom

YayoiNanoka:feat/client-capability-session-grants

Sep 1, 2026

Commits on Sep 1, 2026

refactor(runtime-host): separate capability acceptance from admission
YayoiNanoka
committed
6265f68
feat(runtime-host): carry capability admission evidence
YayoiNanoka
committed
78a6d53
feat(storage): persist client capability session grants
YayoiNanoka
committed
ac6ea4c
refactor(core): centralize capability grant identity
YayoiNanoka
committed
ab194f4
feat(core): define client capability approval interactions
YayoiNanoka
committed
1bb8fe9
feat(storage): atomically commit capability approvals and grants
YayoiNanoka
committed
ec1c0c2
feat(runtime-host): host client capability approval interactions
YayoiNanoka
committed
1b92ba6
feat(runtime): prepare client capabilities before durable dispatch
YayoiNanoka
committed
7acef85
fix(storage): share capability grants by scope
YayoiNanoka
committed
d0220a0
feat(runtime-host): authorize managed client capabilities
YayoiNanoka
committed
86ec298
feat(desktop): attest browser origins before admission
YayoiNanoka
committed
6177cb1
fix(desktop): limit cross-origin browser results
YayoiNanoka
committed
73e0d50
fix(runtime-host): close approvals when providers disconnect
YayoiNanoka
committed
86135c8
feat(desktop): present client capability approvals
YayoiNanoka
committed
b1477c3
fix(runtime): classify client capability interaction events
YayoiNanoka
committed
ae51fed
fix(runtime-host): canonicalize client capability provider ids
YayoiNanoka
committed
87a938a
fix(runtime): route client capability host admission
YayoiNanoka
committed
b96a714
fix(desktop): enforce browser origin leases
YayoiNanoka
committed
94f33c2
chore(runtime-host): advance capability protocol epoch
YayoiNanoka
committed
197e7fe
chore(desktop): sync capability prompt inventory
YayoiNanoka
committed
ef56279
test(desktop): complete side chat story port
YayoiNanoka
committed
d7ef542
test(runtime-host): honor capability admission handshake
YayoiNanoka
committed
961a944
test: trim duplicate capability coverage
YayoiNanoka
committed
765653a
test: simplify capability coverage
YayoiNanoka
committed
af254f3
fix(desktop): redact unapproved browser destinations
YayoiNanoka
committed
0a53185
fix(desktop): keep capability approval outside legacy shell
YayoiNanoka
committed
e3e2e21
fix(runtime-host): preserve local capability trust
YayoiNanoka
committed
76a1f47
fix(runtime-host): close approvals with callers
YayoiNanoka
committed
ac6acc0
fix(runtime-host): isolate shared approval waiters
YayoiNanoka
committed
45f92e3
docs: refresh Astryx surface inventory
YayoiNanoka
committed
ee24969

Navigation Menu

Uh oh!

feat(desktop): authorize client capabilities in managed sessions - #4143

feat(desktop): authorize client capabilities in managed sessions#4143
YayoiNanoka merged 30 commits into
apache:mainfrom
YayoiNanoka:feat/client-capability-session-grants

Commits on Sep 1, 2026

refactor(runtime-host): separate capability acceptance from admission

feat(runtime-host): carry capability admission evidence

feat(storage): persist client capability session grants

refactor(core): centralize capability grant identity

feat(core): define client capability approval interactions

feat(storage): atomically commit capability approvals and grants

feat(runtime-host): host client capability approval interactions

feat(runtime): prepare client capabilities before durable dispatch

fix(storage): share capability grants by scope

feat(runtime-host): authorize managed client capabilities

feat(desktop): attest browser origins before admission

fix(desktop): limit cross-origin browser results

fix(runtime-host): close approvals when providers disconnect

feat(desktop): present client capability approvals

fix(runtime): classify client capability interaction events

fix(runtime-host): canonicalize client capability provider ids

fix(runtime): route client capability host admission

fix(desktop): enforce browser origin leases

chore(runtime-host): advance capability protocol epoch

chore(desktop): sync capability prompt inventory

test(desktop): complete side chat story port

test(runtime-host): honor capability admission handshake

test: trim duplicate capability coverage

test: simplify capability coverage

fix(desktop): redact unapproved browser destinations

fix(desktop): keep capability approval outside legacy shell

fix(runtime-host): preserve local capability trust

fix(runtime-host): close approvals with callers

fix(runtime-host): isolate shared approval waiters

docs: refresh Astryx surface inventory