Free Wortley f5d9223e08 feat(supervisor): let operators require specific middleware bindings (#4678) ...

* feat(middleware): authorize supervisor bindings at registration

Let operators require and limit the operation and phase pairs that an
external middleware may expose. Validate the same binding policy at
gateway startup and when a supervisor discovers the service, and keep
only authorized bindings in the registry used for dispatch.

Preserve dynamic discovery and the existing wire configuration when no
binding policy is set. Document that older supervisors must be upgraded
before relying on binding restrictions.

Signed-off-by: Free Wortley <freeqaz@openai.com>

* docs(skills): check which supervisor middleware hooks the operator authorizes

Signed-off-by: Free Wortley <freeqaz@openai.com>

* fix(go): regenerate the sandbox protobuf binding

Restore the comment separator emitted by the pinned generator. This keeps the checked-in binding byte-for-byte reproducible without changing the protobuf schema or Go behavior.

Signed-off-by: Free Wortley <freeqaz@openai.com>

---------

Signed-off-by: Free Wortley <freeqaz@openai.com>

2026-10-26 22:23:46 +00:00

..

supervisor-middleware

feat(supervisor): let operators require specific middleware bindings (#4678)

2026-10-26 22:23:46 +00:00

drivers.mdx

docs(extensibility): document external compute driver setup (#4826)

2026-10-22 19:48:11 +00:00

gateway-interceptors.mdx

docs: refresh architecture and extensibility pages (#3741)

2026-09-27 02:18:29 +00:00

isolation-backends.mdx

feat(sandbox): publish and activate sandbox backend protocol (#3898)

2026-10-16 19:18:44 +00:00

overview.mdx

docs(extensibility): name extension base capabilities (#4405)

2026-10-12 21:10:15 +00:00