michaelxerandXubin Ren 246ea8ef61 fix(tools): gate MCP resource and prompt registration behind enabledTools ...

The enabledTools allowlist was only enforced for MCP tools returned by
session.list_tools(). Resources and prompts from session.list_resources()
and session.list_prompts() were registered unconditionally, allowing a
deny-all or restrictive enabledTools config to leak resource and prompt
capabilities to the model.

Now resources and prompts are only registered when allow_all_tools is
true (default ["*"] wildcard). Any explicit tool restriction — including
enabledTools: [] (deny-all) or a list of specific tool names — also
blocks resource and prompt registration from that server.

Fixes #4435

2026-06-25 16:10:37 +08:00

..

__init__.py

feat(status): add web search provider usage to /status command

2026-04-06 13:37:55 +08:00

test_apply_patch_tool.py

Clarify filesystem workspace write policy

2026-06-18 00:03:26 +08:00

test_edit_advanced.py

test: improve deterministic unit test coverage

2026-06-04 19:41:32 +08:00

test_edit_enhancements.py

feat(tools): optimize coding workflows

2026-05-20 23:08:21 +08:00

test_exec_allow_patterns.py

fix: allow_patterns take priority over deny_patterns in ExecTool (#3594)

2026-05-03 00:27:17 +08:00

test_exec_env.py

feat(exec): add path prepend config

2026-06-10 18:09:57 +08:00

test_exec_platform.py

feat(exec): add path prepend config

2026-06-10 18:09:57 +08:00

test_exec_security.py

fix: allow git commands in workspace subdirectories

2026-06-18 00:02:58 +08:00

test_exec_session_tools.py

feat(transcription): add shared voice input support (#4232)

2026-06-09 01:08:49 +08:00

test_file_edit_coding_enhancements.py

feat(tools): optimize coding workflows

2026-05-20 23:08:21 +08:00

test_filesystem_tools.py

fix: enforce exact Dream memory file writes

2026-06-18 00:03:26 +08:00

test_image_generation_tool.py

test(image-generation): tighten zhipu provider coverage

2026-05-23 17:06:36 +08:00

test_mcp_probe.py

fix(mcp): reject unsafe HTTP URLs before probe

2026-06-08 16:03:57 +08:00

test_mcp_tool.py

fix(tools): gate MCP resource and prompt registration behind enabledTools

2026-06-25 16:10:37 +08:00

test_message_tool_suppress.py

feat(tools): introduce plugin-based tool discovery and runtime context protocol

2026-05-12 11:28:20 +08:00

test_message_tool.py

fix(heartbeat): skip when HEARTBEAT.md has no tasks and fail closed on delivery (#4111)

2026-05-31 15:15:37 +08:00

test_read_enhancements.py

fix(tools): scope file state by session

2026-05-01 19:15:07 +08:00

test_sandbox.py

fix(sandbox): set HOME inside bwrap

2026-06-10 15:50:53 +08:00

test_search_tools.py

feat(tools): improve coding workflow recovery

2026-05-21 00:58:05 +08:00

test_tool_descriptions.py

docs(tools): clarify coding tool guidance

2026-05-21 14:28:39 +08:00

test_tool_loader.py

Break tool config schema import cycle

2026-06-13 21:59:07 +08:00

test_tool_registry.py

fix(tools): reject unknown builtin parameters

2026-06-21 15:22:09 +08:00

test_tool_validation.py

fix(tools): reject unknown builtin parameters

2026-06-21 15:22:09 +08:00

test_web_fetch_security.py

feat(desktop): polish desktop shell and shared WebUI surfaces (#4195)

2026-06-06 19:49:33 +08:00

test_web_fetch_url_sanitization.py

fix(tools): tighten web fetch URL cleaning

2026-05-01 19:58:19 +08:00

test_web_search_tool.py

test: deduplicate proxy value and construct tool via constructor

2026-06-24 15:45:44 +08:00