feat: grant k8s — cluster listing, kubeconfig, elevation and exec-credential - #55

Draft

aaearon wants to merge 8 commits into

mainfrom

feat/k8s-clusters

Commits on Aug 14, 2026

feat: add grant k8s list and the internal/k8s SCA service wrapper
aaearon
committed
6d0287e
feat: add grant k8s kubeconfig, elevate and exec-credential
aaearon
committed
1c29db7
fix: address Codex review of the grant k8s surface
aaearon
committed
8471b59
fix: reserve SDK stdout for the exec-credential protocol; unbreak the cache on Windows
aaearon
committed
648e573
fix(k8s): give exec-credential ownership of the whole stdout boundary
aaearon
committed
cd00198
fix(k8s): enforce the symlink refusal on Windows instead of skipping it
aaearon
committed
de38b84
docs(k8s): correct the guarantees CLAUDE.md and the selector hint claimed
aaearon
committed
ff6de85
fix(k8s): install the stdout guard before Cobra's pre-run, and stop overstating it
aaearon
committed
633a5ba