feat(grove): add actor authentication and orb dev controls - #400

Merged

returnsvoidjanet merged 33 commits into

mainfrom

feat/grove-actor-auth-orb-ready

Aug 15, 2026

Commits on Aug 12, 2026

feat(grove): add actor identity authority

ampagent
and
lishaduck
committed
c7d231f
feat(grove): enforce actor authentication across transports

ampagent
and
lishaduck
committed
b367dce
docs(grove): define actor authority model

ampagent
and
lishaduck
committed
9f6d14a
fix(grove): close actor authority review gaps

ampagent
and
lishaduck
committed
04cdda9
docs(grove): clarify actor lifecycle readiness

ampagent
and
lishaduck
committed
ab919ec
style(grove): format authority command wrapper

ampagent
and
lishaduck
committed
ba47841
fix(grove): serialize capability revocation

ampagent
and
lishaduck
committed
9fbe6fc
fix(grove): make tool visibility current

ampagent
and
lishaduck
committed
8f35db2
fix(grove): authorize agent lifecycle commands

ampagent
and
lishaduck
committed
2b6872f

Commits on Aug 13, 2026

fix(grove): complete actor authentication demo

ampagent
and
lishaduck
committed
5402308
feat(effect-api): adopt official MCP v2 server

ampagent
and
lishaduck
committed
e3a3644
feat(grove): serve finalized MCP protocol

ampagent
and
lishaduck
committed
250781f
chore(grove): harden Amp orb lifecycle

ampagent
and
lishaduck
committed
93ef3fc
fix(grove): enable orb MCP machine auth

ampagent
and
lishaduck
committed
dd73293
fix(grove): distinguish rotated dev signing keys

ampagent
and
lishaduck
committed
850a1e7
feat(grove): add guarded orb browser auth routes

ampagent
and
lishaduck
committed
74719d5
feat(grove): add orb preflight and browser observability

ampagent
and
lishaduck
committed
161e7de
feat(grove): pave supervised orb services

ampagent
and
lishaduck
committed
be97795
feat(grove): enroll dev agents with official MCP client

ampagent
and
lishaduck
committed
3f5943d
docs(grove): guide agents through orb development

ampagent
and
lishaduck
committed
e6a8703
test(grove): accept secure dev session cookie clearing

ampagent
and
lishaduck
committed
9906841
test(grove): cover backslash redirect normalization

ampagent
and
lishaduck
committed
c263709
fix(grove): harden dev browser log sanitization

ampagent
and
lishaduck
committed
d9388cf
fix(grove): keep dev preflight read only

ampagent
and
lishaduck
committed
014623a
fix(grove): persist orb OIDC signing key

ampagent
and
lishaduck
committed
4b55aea
fix(grove): bound orb service recovery

ampagent
and
lishaduck
committed
cb98340
refactor(grove): move Agent enrollment to tools

ampagent
and
lishaduck
committed
b5366c0
fix(grove): exclude orb auth controls from production

ampagent
and
lishaduck
committed
c198a63
fix(grove): pass control plane quality gates

ampagent
and
lishaduck
committed
74fb301
fix(grove): redact URL userinfo from dev logs

ampagent
and
lishaduck
committed
2ad4e85
fix(grove): classify orb service failures safely

ampagent
and
lishaduck
committed
0cc7822

Commits on Aug 14, 2026

fix(grove): pass CI security checks

ampagent
and
lishaduck
committed
f725322
fix(grove): classify enrollment tooling as development

ampagent
and
lishaduck
committed
d605e23