fix(security): require the target tool's tier on call_tool_* dispatch, fail closed on unresolved tiers by Dumbris · Pull Request #1223 · smart-mcp-proxy/mcpproxy-go

fix(security): require the target tool's tier on call_tool_* dispatch, fail closed on unresolved tiers

Dumbris

committed

677b5c2

fix(review): classify and gate call_tool_* targets by their exact raw name, share one StateView read across the tier and intent gates

Dumbris

committed

5c5aeec

fix(review): keep honouring approval records filed under the collapsed tool name

Dumbris

committed

2eddbcb

fix(review): return the more restrictive of the exact and collapsed approval records

Dumbris

committed

d580929

fix(review): merge the exact and collapsed approval records instead of picking one

Dumbris

committed

ecf599d

fix(review): resolve the exact raw tool name before the prefixed spelling, and read the empty collapsed approval key

Dumbris

committed

829f3b1

fix(review): read the exact and collapsed approval records in one storage snapshot

Dumbris

committed

5334e7f

fix(review): gate the split (server, raw tool) pair exactly instead of normalizing it a second time

Dumbris

committed

fa18266

fix(review): resolve the tier gate's StateView lookup by the exact raw name only

Dumbris

committed

a61ff04

fix(review): let the changed approval record outrank a pending one when both keys are locked

Dumbris

committed

1c1a8ae

Navigation Menu

Repository navigation

fix(security): require the target tool's tier on call_tool_* dispatch, fail closed on unresolved tiers - #1223

fix(security): require the target tool's tier on call_tool_* dispatch, fail closed on unresolved tiers#1223
Dumbris merged 10 commits into
mainfrom
claude/clever-swartz-00b7d6

Commits on Sep 8, 2026

fix(security): require the target tool's tier on call_tool_* dispatch, fail closed on unresolved tiers

fix(review): classify and gate call_tool_* targets by their exact raw name, share one StateView read across the tier and intent gates

fix(review): keep honouring approval records filed under the collapsed tool name

fix(review): return the more restrictive of the exact and collapsed approval records

fix(review): merge the exact and collapsed approval records instead of picking one

fix(review): resolve the exact raw tool name before the prefixed spelling, and read the empty collapsed approval key

fix(review): read the exact and collapsed approval records in one storage snapshot

fix(review): gate the split (server, raw tool) pair exactly instead of normalizing it a second time

fix(review): resolve the tier gate's StateView lookup by the exact raw name only

fix(review): let the changed approval record outrank a pending one when both keys are locked