oikos

dtoro/oikos

Fork 0

Commit Graph

Author	SHA1	Message	Date
dtoro	22fe1526ca	feat: add /deploy-plugins webhook route + deploy-plugins script Some checks failed ci / build-test (push) Has been cancelled Details ci / docker-build (push) Has been cancelled Details	2026-08-17 00:05:55 +02:00
dtoro	eca81ae9af	feat: dsh-gate — auto-run non-destructive mutations when no session ID PolicyService.route now auto-runs config_mutation and reversible_low when sessionID is empty (dsh sidecar path), routing as 'dsh-gate'. Destructive still queues. This eliminates the two-layer consent issue: dsh pre-execute is the sole consent gate, oikos no longer queues dsh-originated mutations. Also updates the dsh plan with Phase 1-3 completion status and the architectural decision that _session_id injection is permanently deferred. v0.38.0	2026-08-16 17:03:27 +02:00
dtoro	04aa1bd5e8	feat: Phase 3 — MCP header fallback, LIKE-based consent window, and auth token fix for dsh integration - X-Oikos-Session-Id header → context fallback for _session_id - sessionIDFromArgsOrContext() reads from args, then header - AssentWindowActive falls back to session-ID-only LIKE lookup - windowActiveLike() for LIKE-pattern autonomy_settings queries - mcpBearerToken: package-level resolved token replaces os.Getenv() in decide_approval - Bump 0.36.0 → 0.37.0	2026-08-16 16:35:34 +02:00

Author

SHA1

Message

Date

dtoro

22fe1526ca

feat: add /deploy-plugins webhook route + deploy-plugins script

ci / build-test (push) Has been cancelled

Details

ci / docker-build (push) Has been cancelled

Details

2026-08-17 00:05:55 +02:00

dtoro

eca81ae9af

feat: dsh-gate — auto-run non-destructive mutations when no session ID

PolicyService.route now auto-runs config_mutation and reversible_low when
sessionID is empty (dsh sidecar path), routing as 'dsh-gate'. Destructive
still queues. This eliminates the two-layer consent issue: dsh pre-execute
is the sole consent gate, oikos no longer queues dsh-originated mutations.

Also updates the dsh plan with Phase 1-3 completion status and the
architectural decision that _session_id injection is permanently deferred.

v0.38.0

2026-08-16 17:03:27 +02:00

dtoro

04aa1bd5e8

feat: Phase 3 — MCP header fallback, LIKE-based consent window, and auth token fix for dsh integration

- X-Oikos-Session-Id header → context fallback for _session_id
- sessionIDFromArgsOrContext() reads from args, then header
- AssentWindowActive falls back to session-ID-only LIKE lookup
- windowActiveLike() for LIKE-pattern autonomy_settings queries
- mcpBearerToken: package-level resolved token replaces os.Getenv() in decide_approval
- Bump 0.36.0 → 0.37.0

2026-08-16 16:35:34 +02:00

3 Commits