Skip to content

v3.0.85

v3.0.85: feat(extensions): add contributor MCP server catalog (#2783)
@kantorcodes kantorcodes tagged this 05 Sep 05:17 
* feat(extensions): add contributor MCP server catalog

Ship a reviewed JSON format for catalog MCP servers with External
opt-in defaults, Filesystem MCP as the first in-tree example, and
Protection Center launch plus tool-default details.

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix(extensions): tighten MCP contribution validation and lockdown

Keep catalog MCP allow defaults from weakening global lockdown, require
safer alternatives, preserve MCP id separators, and refresh catalog
digest fixtures plus the dashboard bundle.

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix(extensions): keep MCP catalog permissions non-configurable

Server enable and tool defaults own MCP policy. Wrap a merged long line
so quality ruff stays clean.

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix(extensions): keep MCP permission ids unique after catalog merge

Encode dots in MCP action classes so permission suffixes stay unique,
share one tool-name normalizer for validation and evaluation, and
refresh the command decision-diff fixture.

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* fix(extensions): encode MCP ids injectively for catalog action classes

Escape dots, hyphens, and x so distinct MCP identifiers cannot collapse
into the same permission suffix.

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

* test(extensions): refresh command decision-diff after MCP catalog encoding

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>

---------

Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
Assets 2
Loading