feat(caprock): add ocap proxy plugin#953

Draft

grypez wants to merge 34 commits into

mainfrom

Commits on Jun 26, 2026

feat(channels): add NodeSocketDuplexStream and session channel primitives

grypez
and
claude
committed
chore(changelog): add changelog entries for channels PR
grypez
committed
feat(session-types): add shared SessionSummary, PendingRequest, SessionApi types

grypez
and
claude
committed
feat(sessions): add session registry, channel factory, and stream socket server

grypez
and
claude
committed
feat(sessions): add history tracking and session.authorize

grypez
and
claude
committed
chore(changelog): add changelog entries for sessions PR
grypez
committed
feat(session-cli): add session subcommands to kernel-cli

grypez
and
claude
committed
feat(kernel-tui): add TUI with sessions view

grypez
and
claude
committed
feat(kernel-tui): add session detail view, history, and keybinds

grypez
and
claude
committed
feat(caprock): add sheaf-based permission-tracker vat and hook

grypez
and
claude
committed
feat(session): add provision editor, visibility, and auto-provisioned timeline entries

grypez
and
claude
committed
feat(caprock): clause-level provision routing for independent bash operators

grypez
and
claude
committed
fix(kernel-tui): omit optional clauses prop to satisfy exactOptionalPropertyTypes

grypez
and
claude
committed
fix(caprock): include redirected_statement stages in pipeline clause decomposition

grypez
and
claude
committed
fix(kernel-utils): recognize bare relative paths in isPathArg

grypez
and
claude
committed
feat(caprock): capture deny-list snapshot and provision_match events

grypez
and
claude
committed
feat(caprock): add audit CLI and slash-command skills

grypez
and
claude
committed
refactor(caprock): table-driven safety fragment for bash AST dispatch

grypez
and
claude
committed
docs(caprock): add package code-organization reference

grypez
and
claude
committed
chore(caprock): validate daemon RPC boundary with superstruct
grypez
committed
refactor(caprock): extract shared buildClauses + routeAllClauses
grypez
committed
refactor(caprock): split hook handlers into src/handlers/ with injected deps
grypez
committed
fix(caprock): accept extra fields on daemon RPC responses

grypez
and
claude
committed
fix(kernel-tui): sort sessions list newest-first

grypez
and
claude
committed
fix(caprock): lift && operands out of a redirected pipeline stage

grypez
and
claude
committed
feat(caprock,kernel-tui): revoke standing provisions from the TUI

grypez
and
claude
committed
feat(caprock): record hook and vat versions in session log

grypez
and
claude
committed
refactor(caprock): convert vat RPC helpers to options bags

grypez
and
claude
committed
fix(caprock): deny when persisted state has no kernel session

grypez
and
claude
committed
chore(kernel-utils,kernel-node-runtime): validate session.* RPC params with superstruct

grypez
and
claude
committed
refactor(kernel-tui): split session-detail-view into focused files

grypez
and
claude
committed
feat(kernel-tui): group sessions into recent/oldish/archived buckets
grypez
committed

Commits on Jul 1, 2026