Repository navigation

Let the executor own the MCP confirmation gate (#599) - #534

Merged

thomasluizon merged 11 commits into

mainfrom

fix/ticket-599-mcp-stepup

Sep 24, 2026

Merged

Let the executor own the MCP confirmation gate (#599)#534
thomasluizon merged 11 commits into
mainfrom
fix/ticket-599-mcp-stepup

Commits on Sep 19, 2026
- fix: let the executor own the MCP confirmation gate (#599)
  
  thomasluizon
  and
  claude
  committed
  9c7d8d5
- fix: thread the confirmation token through the bulk habit tools (#599)
  
  thomasluizon
  and
  claude
  committed
  f3766d1
- fix: resolve the forwarded MCP confirmation token back to the tool parameter (#599)
  
  thomasluizon
  and
  claude
  committed
  db92bce
- fix: strip only a real named-argument prefix in the MCP guard parser (#599)
  
  thomasluizon
  and
  claude
  committed
  d76d487
- fix: separate an omitted caller argument from a non-parameter expression (#599)
  
  thomasluizon
  and
  claude
  committed
  13ee68e
- fix: read a gated tool's direct and helper bridge calls together (#599)
  
  thomasluizon
  and
  claude
  committed
  3d8e621
- fix: refuse a gated tool that assigns to its own confirmationToken (#599)
  
  thomasluizon
  and
  claude
  committed
  6595c11
- docs: say what the MCP token resolver models, not more (#599)
  
  thomasluizon
  and
  claude
  committed
  2a45586
- fix: catch a compound assignment to confirmationToken (#599)
  
  thomasluizon
  and
  claude
  committed
  1c11317
- fix: read every same-named helper an MCP tool could be calling (#599)
  
  thomasluizon
  and
  claude
  committed
  68fbd1e
- docs: say what invariant 5 now refuses and what it still cannot see (#599)
  
  thomasluizon
  and
  claude
  committed
  953c9ee