Skip to content

feat(eve): define approval response authorizers - #1344

Closed
benpankow wants to merge 1 commit into
ben/hitl-candidate-statefrom
ben/hitl-response-authorizer-api
Closed

feat(eve): define approval response authorizers#1344
benpankow wants to merge 1 commit into
ben/hitl-candidate-statefrom
ben/hitl-response-authorizer-api

Conversation

@benpankow

@benpankow benpankow commented Jul 29, 2026

Copy link
Copy Markdown
Collaborator

Summary

Defines the public response-authorization contract without wiring settlement yet:

  • object-form approval: { policy, authorizeResponse } alongside function shorthand
  • narrow callback context with verified responder, stable request, read-only lineage, and auth-only capabilities
  • explicit safeReason rejection result
  • TokenResult.providerSubject for stable provider-account identity
  • request-time policy normalization across static and dynamic tools
  • durable dynamic replay of response authorizers with fail-closed missing-function behavior

Validation

  • pnpm --filter eve exec vitest run --config vitest.unit.config.ts src/public/definitions/approval.test.ts src/context/dynamic-tool-lifecycle.test.ts src/harness/tools.test.ts
  • pnpm --filter eve typecheck

Stack

Depends on #1341.

Signed-off-by: benpankow <ben.pankow@vercel.com>
@vercel

vercel Bot commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
eve-docs Ready Ready Preview, Comment Jul 29, 2026 7:15pm
eve-docs-4759 Ready Ready Preview, Comment, Open in v0 Jul 29, 2026 7:15pm

@vercel vercel Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Additional Suggestion:

Authored-tool and connection resolution guards reject the valid object form of approval ({ policy, authorizeResponse }), throwing at build/resolve time even though the Approval type and doc comment declare the object form is supported.

Fix on Vercel

@benpankow

Copy link
Copy Markdown
Collaborator Author

Superseded by the consolidated 7-PR implementation stack starting at #1368 (GitHub stack #1375).

@benpankow benpankow closed this Jul 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant