feat: gate human-in-the-loop tool confirmation on the caller principal - #7134

Open

cybrdude wants to merge 22 commits into

google:mainfrom

cybrdude:caller-principal-gate

Commits on Sep 16, 2026

feat(agents): add CallerPrincipal, the identity the serving layer vouched for
cybrdude
authored
c1c53a5
feat(agents): carry the caller principal on InvocationContext
cybrdude
authored
3322e1a
feat(runners): thread the caller principal into the invocation context
cybrdude
authored
aa01932
feat(a2a): stop discarding the authentication fact at the A2A edge
cybrdude
authored
45d3f41
feat(a2a): re-stamp the caller principal after the pluggable converter
cybrdude
authored
d07887c
feat(a2a): re-stamp the caller principal in the new executor path too
cybrdude
authored
03caf7c
feat(flows): gate tool confirmation on the caller principal
cybrdude
authored
e2767fa
test(flows): cover the three caller-principal states and the re-entry path
cybrdude
authored
5003e1e
fix(a2a): tie the principal to the same condition _get_user_id uses
cybrdude
authored
a688819
test(a2a): cover build_caller_principal and its agreement with _get_user_id
cybrdude
authored
22c6f1a
refactor(agents): make the caller principal module private, per house policy
cybrdude
authored
7c61673
feat(agents): export CallerPrincipal from google.adk.agents
cybrdude
authored
2a333b5
refactor(agents): import CallerPrincipal from the private module
cybrdude
authored
111fe7a
refactor(runners): import CallerPrincipal from the private module
cybrdude
authored
46a64a1
refactor(a2a): import CallerPrincipal from the private module
cybrdude
authored
7309499
feat(features): register STRICT_CALLER_PRINCIPAL, off by default
cybrdude
authored
e023db5
refactor(flows): read the strict switch from the feature registry
cybrdude
authored
499e49d
test(flows): follow the module rename and the feature-registry switch
cybrdude
authored
e0983bd
docs(agents): add the CallerPrincipal unit guide
cybrdude
authored
1aa91f1
docs: index the CallerPrincipal guide
cybrdude
authored
cc49ef7
style(a2a): apply pyink
cybrdude
authored
347c549
style(tests): apply pyink
cybrdude
authored
af3dae3

Navigation Menu

Uh oh!

feat: gate human-in-the-loop tool confirmation on the caller principal - #7134

feat: gate human-in-the-loop tool confirmation on the caller principal#7134
cybrdude wants to merge 22 commits into
google:mainfrom
cybrdude:caller-principal-gate

Commits on Sep 16, 2026

feat(agents): add CallerPrincipal, the identity the serving layer vouched for

feat(agents): carry the caller principal on InvocationContext

feat(runners): thread the caller principal into the invocation context

feat(a2a): stop discarding the authentication fact at the A2A edge

feat(a2a): re-stamp the caller principal after the pluggable converter

feat(a2a): re-stamp the caller principal in the new executor path too

feat(flows): gate tool confirmation on the caller principal

test(flows): cover the three caller-principal states and the re-entry path

fix(a2a): tie the principal to the same condition _get_user_id uses

test(a2a): cover build_caller_principal and its agreement with _get_user_id

refactor(agents): make the caller principal module private, per house policy

feat(agents): export CallerPrincipal from google.adk.agents

refactor(agents): import CallerPrincipal from the private module

refactor(runners): import CallerPrincipal from the private module

refactor(a2a): import CallerPrincipal from the private module

feat(features): register STRICT_CALLER_PRINCIPAL, off by default

refactor(flows): read the strict switch from the feature registry

test(flows): follow the module rename and the feature-registry switch

docs(agents): add the CallerPrincipal unit guide

docs: index the CallerPrincipal guide

style(a2a): apply pyink

style(tests): apply pyink