Repository navigation

feat(mcp): await access hook answers without holding the tool mutex - #322

Open

ArnauvGilotra wants to merge 31 commits into

gmickel:mainfrom

ArnauvGilotra:feat/access-hook-concurrency

Open

feat(mcp): await access hook answers without holding the tool mutex#322
ArnauvGilotra wants to merge 31 commits into
gmickel:mainfrom
ArnauvGilotra:feat/access-hook-concurrency

Commits on Oct 18, 2026
- feat(gateway): principals and asserted subject
  
  ArnauvGilotra
  and
  claude
  committed
  22bc71f
- fix(gateway): refuse the plain token when a principal shares it
  
  ArnauvGilotra
  and
  claude
  committed
  902da00
- feat: query/search across several collections
  
  ArnauvGilotra
  and
  claude
  committed
  24fd5f4
- fix(gateway): check token clashes against the request's own snapshot
  
  ArnauvGilotra
  and
  claude
  committed
  e3585a4
- fix: intersect collection scopes before graph expansion and reranking
  
  ArnauvGilotra
  and
  claude
  committed
  b4a88b6
- fix: raise the collections allowlist bound to 1024
  
  ArnauvGilotra
  and
  claude
  committed
  e5bc110
- fix(mcp): scope HTTP egress to the collections allowlist
  
  ArnauvGilotra
  and
  claude
  committed
  7767220
- docs(mcp): adapt to closed tool inputs for gno_query_diagnose
  
  ArnauvGilotra
  and
  claude
  committed
  99249d6
- Merge branch 'feat/gateway-principals-asserted-subject' into feat/collection-access-scoped-profile
  ArnauvGilotra
  committed
  3e02cc0
- feat: collection access and scoped tool profile
  
  ArnauvGilotra
  and
  claude
  committed
  f905998
- fix: deny accessRef collections and exclude invalid provenance before retrieval
  
  ArnauvGilotra
  and
  claude
  committed
  928ff88
- fix(context): accept up to 1024 collections in a Context Capsule scope
  ArnauvGilotra
  committed
  e409570
- fix(mcp): adapt to supersededBy links for scoped callers
  
  ArnauvGilotra
  and
  claude
  committed
  23fe893
- fix(mcp): name only readable collections in egressLineage for scoped callers
  
  ArnauvGilotra
  and
  claude
  committed
  69ec455
- fix(mcp): omit metadata coverage warnings for scoped callers
  
  ArnauvGilotra
  and
  claude
  committed
  0f5d51c
- fix(mcp): count only readable graph neighbours for scoped callers
  
  ArnauvGilotra
  and
  claude
  committed
  37df861
- fix(store): bound the scoped supersession walk
  
  ArnauvGilotra
  and
  claude
  committed
  b6f6050
- test: cover cycles in the scoped walk and pin access-unset output to upstream
  
  ArnauvGilotra
  and
  claude
  committed
  aaa34fe
- fix(mcp): resolve graph links over only the documents a scoped caller may read
  
  ArnauvGilotra
  and
  claude
  committed
  4ad6a74
- fix(mcp): never name unlisted collections to scoped callers
  
  ArnauvGilotra
  and
  claude
  committed
  eb4ac77
- docs(mcp): scoped supersededBy also covers the gno-context-agent-v2 projection
  
  ArnauvGilotra
  and
  claude
  committed
  92dfa86
- fix(context): derive scoped Capsule fingerprints from readable state only
  ArnauvGilotra
  committed
  89797f0
- feat: access hook
  
  ArnauvGilotra
  and
  claude
  committed
  d5b472c
- fix: pass the caller's GNO-Request-Id to the access hook
  
  ArnauvGilotra
  and
  claude
  committed
  9000af1
- docs(mcp): note the readable-corpus listing before scoped retrieval
  ArnauvGilotra
  committed
  1cd936c
- fix: adapt to supersededBy links for the access hook
  
  ArnauvGilotra
  and
  claude
  committed
  bf63afc
- test(mcp): budget access hook calls for supersededBy
  ArnauvGilotra
  committed
  4c74a4e
- fix: resolve graph links over only the documents the access hook allows
  ArnauvGilotra
  committed
  854ff4b
- test(mcp): pin hook-scoped supersededBy in the gno_context agent projection
  
  ArnauvGilotra
  and
  claude
  committed
  4603b41
- feat(mcp): await access hook answers without holding the tool mutex
  
  ArnauvGilotra
  and
  claude
  committed
  461088d
- fix(mcp): count access-hook queue time toward the deadline
  
  ArnauvGilotra
  and
  claude
  committed
  d5db7b0

Commits

Commits on Oct 18, 2026