Gergo Magyar d00f70695e feat(mcp): enforce repository allowlist and default (#2465) ... Merged with the read-only policy: both filters compose in server.ts. Review hardening: assertResourceUri compares the opaque host case insensitively (GITNEXUS://GROUP bypass) and gains the fail-closed fallback for unparseable URIs; the backend proxy now also intercepts queryClusters/queryProcesses/queryClusterDetail/queryProcessDetail; scrubGroupDescription is shared from read-only-policy. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-16 08:50:07 +00:00
..
fixtures	fix(php): resolve symbol-named PSR-4 imports	2026-07-14 13:12:33 +07:00
helpers	fix: make large incremental writebacks commit reliably (#2409) (#2425)	2026-07-10 14:05:23 +01:00
integration	fix(scan): canonicalize traversal without order-sensitive bindings (#2482)	2026-07-16 08:31:46 +00:00
unit	feat(mcp): enforce repository allowlist and default (#2465)	2026-07-16 08:50:07 +00:00
utils	fix(hook): emit MCP query hint when server owns DB lock (#2396) (#2397)	2026-07-08 18:34:05 +01:00