R2: full rails in chat, both platforms + Approval UX v2 - #82

Open

siddWednesday wants to merge 26 commits into

mainfrom

feat/r2-full-rails

Commits on Aug 14, 2026

docs(r2): the R2 checklist; R1 boxes 18/18b closed by the merged PR

siddWednesday
and
claude
committed
174a0c2
feat(tools): per-platform tool exposure - Windows joins with the Outlook subset (R2-A1)

siddWednesday
and
claude
committed
d1e1ecc
feat(actions): the win32 inline runner - links open, everything else refuses (R2-A2)

siddWednesday
and
claude
committed
c2fd140
feat(actions): Outlook read-back - Windows verifies what it creates (R2-A3)

siddWednesday
and
claude
committed
d1d5cf3
test(actions): the platform-pick seams, both arms each (R2-A follow-through)

siddWednesday
and
claude
committed
ff83efb
test(coverage): one report owns each file; a dbtest stops leaking its profile env

siddWednesday
and
claude
committed
bc3e88b
feat(actions): risk-tiered gating - reversible mutations auto-run with undo (R2-B1)

siddWednesday
and
claude
committed
d01d80a
feat(actions): the inline-gate plumbing - park-and-render instead of run-now (R2-B3, main + preload)

siddWednesday
and
claude
committed
43d3a8c
feat(renderer): the inline gate card + undo chip in the conversation (R2-B2/B3)

siddWednesday
and
claude
committed
2df0bbb
test(actions): cover the B3 surface - IPC contract, dock branches, outcome fanout

siddWednesday
and
claude
committed
e9e4ba9
docs(r2): tick B4 - the pro queue resolves the engine gate (desktop-pro PR #42)

siddWednesday
and
claude
committed
6b98f82
feat(browser): the rail's eyes - in-page collector with indexed elements (R2-C1)

siddWednesday
and
claude
committed
0a7c7ec
feat(browser): the rail's hands - CDP driver behind a transport seam (R2-C1)

siddWednesday
and
claude
committed
5a7c223
feat(browser): the web-task loop - snapshot/decide/act with takeover parking (R2-C3 core)

siddWednesday
and
claude
committed
9250956
feat(browser): the watched pane + takeover handoff (R2-C2)

siddWednesday
and
claude
committed
1222eb7
feat(browser): web_task through the engine - the browser rail, chat-drivable (R2-C3)

siddWednesday
and
claude
committed
5180cf3
docs(r2): tick C1-C3 - the browser rail is chat-drivable with takeover
siddWednesday
committed
6098994
feat(vision): the UI-TARS action parser (R2-D1 core)

siddWednesday
and
claude
committed
663be36
feat(vision): the supervised vision-rail spine - guard, loop, engine adapter (R2-D)

siddWednesday
and
claude
committed
782fc57
feat(vision): wire the vision rail into the engine, host behind a capability gate (R2-D)

siddWednesday
and
claude
committed
98f4142
docs(r2): D spine landed - vision rail wired, actuation capability-gated (D2b pending)

siddWednesday
and
claude
committed
0754c1e
feat(safety): injection-resistance review + cross-rail prompt guards (R2-E1)

siddWednesday
and
claude
committed
e549253
test(coverage): write the report even when a test fails (reportOnFailure)

siddWednesday
and
claude
committed
52c8a45
docs(r2): tick E1 (injection review + prompt guards); E2 blockers recorded

siddWednesday
and
claude
committed
98cebcd
test(coverage): the db report must not own the unit-tested browser/vision rails

siddWednesday
and
claude
committed
b140395
test(tools): pin darwin in the tool tests so they pass on the Linux CI runner

siddWednesday
and
claude
committed
1e13146

Navigation Menu

Uh oh!

R2: full rails in chat, both platforms + Approval UX v2 - #82

R2: full rails in chat, both platforms + Approval UX v2#82
siddWednesday wants to merge 26 commits into
mainfrom
feat/r2-full-rails

Commits on Aug 14, 2026

docs(r2): the R2 checklist; R1 boxes 18/18b closed by the merged PR

feat(tools): per-platform tool exposure - Windows joins with the Outlook subset (R2-A1)

feat(actions): the win32 inline runner - links open, everything else refuses (R2-A2)

feat(actions): Outlook read-back - Windows verifies what it creates (R2-A3)

test(actions): the platform-pick seams, both arms each (R2-A follow-through)

test(coverage): one report owns each file; a dbtest stops leaking its profile env

feat(actions): risk-tiered gating - reversible mutations auto-run with undo (R2-B1)

feat(actions): the inline-gate plumbing - park-and-render instead of run-now (R2-B3, main + preload)

feat(renderer): the inline gate card + undo chip in the conversation (R2-B2/B3)

test(actions): cover the B3 surface - IPC contract, dock branches, outcome fanout

docs(r2): tick B4 - the pro queue resolves the engine gate (desktop-pro PR #42)

feat(browser): the rail's eyes - in-page collector with indexed elements (R2-C1)

feat(browser): the rail's hands - CDP driver behind a transport seam (R2-C1)

feat(browser): the web-task loop - snapshot/decide/act with takeover parking (R2-C3 core)

feat(browser): the watched pane + takeover handoff (R2-C2)

feat(browser): web_task through the engine - the browser rail, chat-drivable (R2-C3)

docs(r2): tick C1-C3 - the browser rail is chat-drivable with takeover

feat(vision): the UI-TARS action parser (R2-D1 core)

feat(vision): the supervised vision-rail spine - guard, loop, engine adapter (R2-D)

feat(vision): wire the vision rail into the engine, host behind a capability gate (R2-D)

docs(r2): D spine landed - vision rail wired, actuation capability-gated (D2b pending)

feat(safety): injection-resistance review + cross-rail prompt guards (R2-E1)

test(coverage): write the report even when a test fails (reportOnFailure)

docs(r2): tick E1 (injection review + prompt guards); E2 blockers recorded

test(coverage): the db report must not own the unit-tested browser/vision rails

test(tools): pin darwin in the tool tests so they pass on the Linux CI runner