Repository navigation

fix(core): stop MCP server rules from authorizing a colliding server - #12531

Merged

wenshao merged 51 commits into

mainfrom

fix/issue-10199-mcp-permission-alias-collision

Oct 6, 2026

Commits on Sep 23, 2026

fix(core): stop MCP server rules from authorizing a colliding server

yiliang114
and
qwencoder
committed
67d07f2
fix(core): keep a bare `*` from matching every MCP tool; correct matcher docs

yiliang114
and
qwencoder
committed
0342785
Merge branch 'main' into fix/issue-10199-mcp-permission-alias-collision
yiliang114
authored
bfc1c4d
fix(core): thread MCP permission aliases through every deny-side matcher
yiliang114
committed
b6ae20e
fix(core): publish exact MCP raw identity for permission matching

yiliang114
and
qwencoder
committed
59ba562

Commits on Sep 24, 2026

Merge origin/main into fix/issue-10199-mcp-permission-alias-collision

yiliang114
and
qwencoder
committed
84f4a8f
fix(core): judge the MCP server-level structure guard by every spelling

yiliang114
and
qwencoder
committed
3f82993
test(core): cover the alias resolver's positive branch in agent narrowing

yiliang114
and
qwencoder
committed
d941cc6
style(core): apply prettier to the new collision rows

yiliang114
and
qwencoder
committed
884a20d
test(core): make the collision witnesses falsifiable, scope the doc claim

yiliang114
and
qwencoder
committed
fcdc343

Commits on Sep 25, 2026

Commits on Sep 26, 2026

docs(design): correct two false alias-threading claims in the MCP naming doc

yiliang114
and
qwencoder
committed
1db81a2
refactor(core): cut review-driven scope out of the MCP rule fix

yiliang114
and
qwencoder
committed
5ed8796
Merge origin/main into fix/issue-10199-mcp-permission-alias-collision

yiliang114
and
qwencoder
committed
c5a3b27
test(core): pin legacy-spelled deny/ask coverage on a rewritten server segment

yiliang114
and
qwencoder
committed
a1a665d
Merge origin/main into fix/issue-10199-mcp-permission-alias-collision

yiliang114
and
qwencoder
committed
53f5735

Commits on Sep 27, 2026

Commits on Sep 28, 2026

Commits on Sep 29, 2026

Commits on Oct 1, 2026

Merge origin/main into fix/issue-10199-mcp-permission-alias-collision

yiliang114
and
qwencoder
committed
6dadce0
test(core): build the alias-channel PMs with the compressed test helpers

yiliang114
and
qwencoder
committed
2da7c3f
fix(core): read the MCP server boundary from the producer, not a flattened spelling

yiliang114
and
qwencoder
committed
1e29efd
Merge origin/main into fix/issue-10199-mcp-permission-alias-collision

yiliang114
and
qwencoder
committed
83c5961
Merge concurrent branch head 1e29efde68 and origin/main into fix/issue-10199-mcp-permission-alias-collision

yiliang114
and
qwencoder
committed
985683e

Commits on Oct 2, 2026

fix(core): let MCP identity augment rule spelling matching, not replace it

yiliang114
and
qwencoder
committed
5fa015c
Merge origin/main into fix/issue-10199-mcp-permission-alias-collision

yiliang114
and
qwencoder
committed
f034073
Merge origin/main into fix/issue-10199-mcp-permission-alias-collision

yiliang114
and
qwencoder
committed
82359fd
fix(core): keep the wildcard identity arms augmenting, not replacing

yiliang114
and
qwencoder
committed
bbf9a82
Merge branch 'main' into fix/issue-10199-mcp-permission-alias-collision
yiliang114
authored
882890c
fix(core): preserve exact legacy MCP restrictions
yiliang114
committed
dbab8f4

Commits on Oct 3, 2026

fix(core): keep restrictive rules matching cut MCP registrations

yiliang114
and
qwencoder
committed
5bfea95
fix(core): keep restrictive wildcards covering their own MCP key

yiliang114
and
Qwen-Coder
committed
d62f5b7
fix(core): preserve MCP wildcard restrictions and simplify matching
yiliang114
committed
1ace635
fix(core): reject ambiguous registered MCP alias grants
yiliang114
committed
b5f5dcc

Commits on Oct 4, 2026

fix(core): guard MCP wildcard grants and reuse permission checks
yiliang114
committed
d5e9fc7
refactor(core): simplify MCP permission checks and tests
yiliang114
committed
272d3ef
fix(core): preserve reverse MCP wildcard ownership

yiliang114
and
qwencoder
committed
7d5192b

Commits on Oct 5, 2026

fix(permissions): resolve MCP wildcard grants by live server boundaries

yiliang114
and
qwencoder
committed
6abd1eb
fix(core): preserve producer-owned MCP rule coverage

yiliang114
and
qwencoder
committed
7e489a5

Commits on Oct 6, 2026

fix(core): close partial-separator fail-open in restrictive MCP matching

yiliang114
and
qwencoder
committed
cdb3cb1
Merge origin/main into fix/issue-10199-mcp-permission-alias-collision

yiliang114
and
qwencoder
committed
0a5e943