Repository navigation

feat: add an egress policy translator for embedded controllers - #3208

Closed

codyhartsook wants to merge 43 commits into

kagent-dev:feat/agent-egress-policiesfrom

codyhartsook:egress-credential-binder

Closed

feat: add an egress policy translator for embedded controllers#3208
codyhartsook wants to merge 43 commits into
kagent-dev:feat/agent-egress-policiesfrom
codyhartsook:egress-credential-binder

Commits on Oct 16, 2026
- feat: add reusable egress policies for agents and sandboxes
  EItanya
  committed
  26175f2
- test(helm): verify read-only egress policy RBAC
  EItanya
  committed
  7928853
- fix: validate MCP credential headers and test tool egress
  EItanya
  committed
  7902870
- style: align egress imports with main
  EItanya
  committed
  94891d0
- test: adapt egress fixture to optional harness image
  EItanya
  committed
  5f24176
- fix: require current prepared revisions for new instances
  EItanya
  committed
  f98a467
- test: align runtime lifecycle with revision readiness
  EItanya
  committed
  4a53b01
- test: exercise Codex egress through shell requests
  EItanya
  committed
  5b39d41
- fix: reconcile egress policy changes on live actors
  EItanya
  committed
  855514a
- fix: add live egress storage through a new migration
  EItanya
  committed
  57adcf8
- test: exercise live egress through a shared skill on every harness
  EItanya
  committed
  ddf5d7f
- test: keep live egress probes in the foreground
  EItanya
  committed
  21a160f
- fix: target live egress updates and keep prepared runtimes available
  EItanya
  committed
  cdfa5be
- refactor: clarify token passthrough origin naming
  EItanya
  committed
  a12f664
- refactor: persist controller-translated egress policy per revision
  EItanya
  committed
  47c38d1
- fix: finish live egress review follow-ups
  EItanya
  committed
  ed6a09d
- fix: skip unchanged egress updates and separate revision promotion
  EItanya
  committed
  36c5ef6
- test: make egress probe runs and expectations explicit
  EItanya
  committed
  c0220a8
- fix: serialize egress publication per revision
  EItanya
  committed
  88c88b9
- test: verify sessions use the last successful revision after invalid edits
  EItanya
  committed
  0c445aa
- refactor: fold egress schema into the initial migration
  EItanya
  committed
  43712a5
- test: wait for agent retirement before asserting session rejection
  EItanya
  committed
  7bc82ca
- refactor: queue egress policy publication by revision
  EItanya
  committed
  d16abd9
- refactor: record revisions and initial egress policies atomically
  EItanya
  committed
  ca09950
- refactor: own live egress grants on source definitions
  EItanya
  committed
  67cb452
- test: cover agent grants during compilation failures
  EItanya
  committed
  15c9680
- fix: simplify egress reconciliation and preserve validation semantics
  EItanya
  committed
  9755533
- refactor: apply live egress during source preparation
  EItanya
  committed
  0df9d88
- refactor: record and promote revisions atomically
  EItanya
  committed
  6c3046f
- refactor: name source policy access EgressGrant
  EItanya
  committed
  39b0856
- refactor: share harness skills paths with e2e tests
  EItanya
  committed
  483e85e
- fix: simplify egress ownership and allow HTTP credentials
  EItanya
  committed
  029c8a9
- fix: admit egress grants independently of runtime readiness
  EItanya
  committed
  c8fec1c
Commits on Oct 17, 2026

Commits

Commits on Oct 16, 2026

Commits on Oct 17, 2026