WIP: add local sudo capability on devices#317

Draft

michaelw wants to merge 25 commits into

mainfrom

mw/local-sudo-request

Commits on Apr 15, 2026

Commits on Apr 20, 2026

Commits on Apr 24, 2026

fix(config): guard config push-back sync behind real Thand service
michaelw
committed
temporal: keep shared device registry queues unversioned
michaelw
committed
feat(devices): add canonical device_id plumbing and route registry
michaelw
committed
feat(workflows): add execution planning for device-targeted provider tasks
michaelw
committed
feat(local-sudo): add device-local sudo request and provider flow
michaelw
committed
localbroker: add gRPC bridge for the macOS privilege broker
michaelw
committed
provider/local: route Darwin timed sudo through broker activities
michaelw
committed
macos: add PrivilegeServices broker workspace and broker core
michaelw
committed
macos: bind notifier subscriptions to the login-item identity
michaelw
committed
macos: add packaging, install, CI wiring, and strict signed local docs
michaelw
committed
feat(workflows): add timeout routing for approvals
michaelw
committed
feat(providers): add local-presence approval provider
michaelw
committed
feat(local-notifications): add explicit local sudo notifications
michaelw
committed

Commits on Apr 25, 2026

fix(config): make config push-back sync deterministic
michaelw
committed

Commits on Apr 27, 2026

Merge branch 'main' into mw/local-sudo-request
hughneale
committed

Commits on Apr 28, 2026

Commits on Apr 30, 2026

fix(workflows): replace reflect.DeepEqual with deterministic comparison
hughneale
committed

Commits on May 1, 2026

fix(temporal): run device registry setup after workers start
hughneale
committed

Commits on May 2, 2026

fix(workflows): pass pre-built request types to provider child workflows
hughneale
committed