feat(acl): implement access control layer #29

Merged

addison merged 12 commits from exe-dev-bot/kiosk:feat/acl-layer into main 2026-02-21 10:31:24 -05:00

Conversation 0 Commits 12 Files changed 5 +955 -17

exe-dev-bot commented 2026-02-21 08:09:17 -05:00

Contributor

Copy link

Implement the ACL layer from spec 002. Pure authorization functions: permission lookup, level comparison, ownership checks, privilege escalation protection, and root account protection. All 15 spec tasks complete.

Implement the ACL layer from spec 002. Pure authorization functions: permission lookup, level comparison, ownership checks, privilege escalation protection, and root account protection. All 15 spec tasks complete.

exe-dev-bot added 2 commits 2026-02-21 08:09:18 -05:00

feat(acl): implement access control layer ... 0fdc8cd5b2

Co-authored-by: Shelley <shelley@exe.dev>

docs(spec): mark ACL layer tasks complete ... 67560a6c45

Co-authored-by: Shelley <shelley@exe.dev>

exe-dev-bot added 2 commits 2026-02-21 08:58:17 -05:00

fix(acl): add root bypass to CheckCanGrant ... 8ca62ce89f

Co-authored-by: Shelley <shelley@exe.dev>

docs: add deep-review skill for subagent code reviews ... a7fcf9a7ce

Co-authored-by: Shelley <shelley@exe.dev>

exe-dev-bot added 1 commit 2026-02-21 08:58:44 -05:00

chore: move skill to .agents/skills/deep-review/SKILL.md ... 3b6f7bc0a3

Co-authored-by: Shelley <shelley@exe.dev>

exe-dev-bot added 2 commits 2026-02-21 09:05:06 -05:00

fix(acl): add input validation and consolidate error types ... 2623c34fda

Co-authored-by: Shelley <shelley@exe.dev>

fix(acl): validate requiredLevel in CheckPermission and feature in ValidFeatureLevel ... 0b8b1b6fe3

Co-authored-by: Shelley <shelley@exe.dev>

exe-dev-bot added 1 commit 2026-02-21 10:02:26 -05:00

fix(skills): add frontmatter to deep-review skill 8c5d08b2b8

exe-dev-bot added 1 commit 2026-02-21 10:10:31 -05:00

fix(acl): block none-level users from granting permissions 7883723a42

exe-dev-bot added 1 commit 2026-02-21 10:12:32 -05:00

fix(acl): fail closed on invalid levels and nil users 998a4a92fe

exe-dev-bot added 1 commit 2026-02-21 10:23:48 -05:00

fix(acl): return not-found error when removal target is missing 83394a72d2

exe-dev-bot added 1 commit 2026-02-21 10:30:45 -05:00

docs(acl): clarify none-level grant policy in spec 58b39f9a70

addison merged commit 0aa13e92ac into main 2026-02-21 10:31:24 -05:00

addison referenced this pull request from a commit 2026-02-21 10:31:24 -05:00

feat(acl): implement access control layer (#29)

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

kwila/kiosk!29

No description provided.