feat(session): Plugin invocation contract + 5-value action vocabulary + abctl row-per-plugin renderer#385

Merged

huang195 merged 21 commits into

rossoctl:mainfrom

huang195:feat/session-events-auth-extension

May 8, 2026

Commits on May 8, 2026

feat(pipeline): Add Auth extension, SessionDenied phase, plugin-event convention
huang195
committed
feat(auth): Surface machine-stable DenyReasonCode and CacheHit on results
huang195
committed
feat(plugins): jwt-validation populates Auth extension with allow/deny/bypass
huang195
committed
feat(plugins): token-exchange populates Auth extension for exchange/deny
huang195
committed
feat(listener): Record Auth + Plugins extensions, emit SessionDenied events
huang195
committed
test(sessionapi): Cover Auth + Plugins event fields on /v1/sessions
huang195
committed
docs: Session event extension contract + Plugins escape hatch
huang195
committed
feat(abctl): Render Auth decisions and denied events in sessions view
huang195
committed
fix(listener): Widen inbound-response recording gate to match request phase
huang195
committed
feat(auth): Surface request Path on InboundAuth entries
huang195
committed
feat(abctl): Rename PROTO column to PLUGIN; name the plugin attributed to each row
huang195
committed
feat(plugins): token-exchange populates Auth.Outbound on passthrough
huang195
committed
feat(pipeline): Add 5-value InvocationAction + Invocation type
huang195
committed
feat(plugins): Gate plugins emit Invocation with 5-value actions
huang195
committed
feat(plugins): Parsers emit Invocation with observe/skip
huang195
committed
feat(listener): Record Invocations on session events
huang195
committed
feat(abctl): One row per plugin invocation; ACTION column with 5-value vocab
huang195
committed
docs: Invocation contract and 5-value action vocabulary
huang195
committed
feat(pipeline): Tag Invocations with request/response phase
huang195
committed
feat(plugins): Tag parser Invocations with phase; drop type-mismatch skips
huang195
committed
feat(abctl): Event-level # column with pair IDs and method-aware pairing
huang195
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(session): Plugin invocation contract + 5-value action vocabulary + abctl row-per-plugin renderer#385

feat(session): Plugin invocation contract + 5-value action vocabulary + abctl row-per-plugin renderer#385
huang195 merged 21 commits into
rossoctl:mainfrom
huang195:feat/session-events-auth-extension

Commits on May 8, 2026

feat(pipeline): Add Auth extension, SessionDenied phase, plugin-event convention

feat(auth): Surface machine-stable DenyReasonCode and CacheHit on results

feat(plugins): jwt-validation populates Auth extension with allow/deny/bypass

feat(plugins): token-exchange populates Auth extension for exchange/deny

feat(listener): Record Auth + Plugins extensions, emit SessionDenied events

test(sessionapi): Cover Auth + Plugins event fields on /v1/sessions

docs: Session event extension contract + Plugins escape hatch

feat(abctl): Render Auth decisions and denied events in sessions view

fix(listener): Widen inbound-response recording gate to match request phase

feat(auth): Surface request Path on InboundAuth entries

feat(abctl): Rename PROTO column to PLUGIN; name the plugin attributed to each row

feat(plugins): token-exchange populates Auth.Outbound on passthrough

feat(pipeline): Add 5-value InvocationAction + Invocation type

feat(plugins): Gate plugins emit Invocation with 5-value actions

feat(plugins): Parsers emit Invocation with observe/skip

feat(listener): Record Invocations on session events

feat(abctl): One row per plugin invocation; ACTION column with 5-value vocab

docs: Invocation contract and 5-value action vocabulary

feat(pipeline): Tag Invocations with request/response phase

feat(plugins): Tag parser Invocations with phase; drop type-mismatch skips

feat(abctl): Event-level # column with pair IDs and method-aware pairing