feat(collab): agent delegation handshake + sponsor_contact_id + cascades (D1) - #2048

Open

hognek wants to merge 23 commits into

jaylfc:devfrom

hognek:feat/collab-d1-agent-delegation

Commits on Sep 12, 2026

feat(collab): agent delegation handshake + sponsor_contact_id + cascades (D1)
hognek
committed
dbd48d0
fix(collab): resolve 5 Kilo findings on D1 delegation PR
hognek
committed
42101dd
fix(collab): resolve 3 Kilo v2 findings on D1 delegation
hognek
committed
c497456
fix(collab): skip PIN verification when pin_required=False in redeem()
hognek
committed
7ab1d91
fix(collab): fix D1 delegation regressions, N1 tests, and e2e coverage (#2048)
hognek
committed
30b42ef
fix(collab): rebase onto dev + fix project_invite_store → project_invites key
hognek
committed
9304198
fix(tests): update delegation test mocks to use project_invites (not project_invite_store)
hognek
committed
b267d9d
fix(delegation): remove invalid metadata kwarg from mint() calls
hognek
committed
c84302f
fix(collab): wire delegation approval into decisions route + expose auto-approve setting (#2048)
hognek
committed
0bd0cb8
fix(collab): restore CI workflows reverted in rebase + changelog fragment (#2048)
hognek
committed
50febab
fix(collab): D1 security blockers — sponsor metadata, scope allowlist, fail-closed re-check, TOCTOU set_sponsor, task release, high-entropy invite IDs (#2048)
hognek
committed
8032e75
fix(collab): wire delegation invite delivery + relax set_sponsor guard + tighten scope allowlist
hognek
committed
68a9783
fix(collab): update concurrent set_sponsor test for re-parenting allowance
hognek
committed
bd3ba0e
fix(collab): address delegation_status envelope to hub:<user>, not hub:hub:<user>
hognek
committed
c0d89ae
fix(collab): read peer endpoints as URL strings in send_envelope
hognek
committed
8f04093
fix(collab): persist delegation_status durably so the requester can redeem
hognek
committed
759b3fd
test(collab): cover the delegation invite delivery path
hognek
committed
fbc75fa
fix(peer): fail loudly on non-hub contact ids and restore deterministic endpoint ordering
hognek
committed
798b085
fix(peer): make delegation_status idempotent + attribute decision properly
hognek
committed
320f21f
test(collab): regression tests for Kilo delivery-path findings
hognek
committed
6e59b78
feat(collab): per-(identity, project) sponsorship association (D1 rework, #2048)
hognek
committed
3f3888f
test(collab): D1 sponsorship rework acceptance tests (per-(identity, project) association, #2048)
hognek
committed
746b2ab
security(decisions): collab_delegation_gate is a privileged gate — allowlist it + provenance-guard it (#2048)
hognek
committed
b16a628

Navigation Menu

Uh oh!

feat(collab): agent delegation handshake + sponsor_contact_id + cascades (D1) - #2048

feat(collab): agent delegation handshake + sponsor_contact_id + cascades (D1)#2048
hognek wants to merge 23 commits into
jaylfc:devfrom
hognek:feat/collab-d1-agent-delegation

Commits on Sep 12, 2026

feat(collab): agent delegation handshake + sponsor_contact_id + cascades (D1)

fix(collab): resolve 5 Kilo findings on D1 delegation PR

fix(collab): resolve 3 Kilo v2 findings on D1 delegation

fix(collab): skip PIN verification when pin_required=False in redeem()

fix(collab): fix D1 delegation regressions, N1 tests, and e2e coverage (#2048)

fix(collab): rebase onto dev + fix project_invite_store → project_invites key

fix(tests): update delegation test mocks to use project_invites (not project_invite_store)

fix(delegation): remove invalid metadata kwarg from mint() calls

fix(collab): wire delegation approval into decisions route + expose auto-approve setting (#2048)

fix(collab): restore CI workflows reverted in rebase + changelog fragment (#2048)

fix(collab): D1 security blockers — sponsor metadata, scope allowlist, fail-closed re-check, TOCTOU set_sponsor, task release, high-entropy invite IDs (#2048)

fix(collab): wire delegation invite delivery + relax set_sponsor guard + tighten scope allowlist

fix(collab): update concurrent set_sponsor test for re-parenting allowance

fix(collab): address delegation_status envelope to hub:<user>, not hub:hub:<user>

fix(collab): read peer endpoints as URL strings in send_envelope

fix(collab): persist delegation_status durably so the requester can redeem

test(collab): cover the delegation invite delivery path

fix(peer): fail loudly on non-hub contact ids and restore deterministic endpoint ordering

fix(peer): make delegation_status idempotent + attribute decision properly

test(collab): regression tests for Kilo delivery-path findings

feat(collab): per-(identity, project) sponsorship association (D1 rework, #2048)

test(collab): D1 sponsorship rework acceptance tests (per-(identity, project) association, #2048)

security(decisions): collab_delegation_gate is a privileged gate — allowlist it + provenance-guard it (#2048)