feat(adt-mcp): enforce scoped safe execution#143

Merged

ThePlenkov merged 18 commits into

mainfrom

feat/scoped-safe-execution

Jul 24, 2026

Commits on Jul 24, 2026

feat(adt-mcp): enforce scoped safe execution
ThePlenkov
committed
fix: format mcp-runtime, refactor run-unit-tests for code health, swap fake JWT in test

devin-ai-integration[bot]
and
ThePlenkov
committed
fix(review): address PR #143 review threads\n\n- Deduplicate scope denied / safe-execute limit payloads via utils.ts helpers\n- Track per-execution dispatch counters in destination-mode.ts\n- Inclu…

devin-ai-integration[bot]
and
ThePlenkov
committed
refactor: split wrapToolHandler and initializeCsrf to improve code health\n\n- Extract parseHandlerArgs, isScopeAllowed, maxToolCallsReached, incrementCounter, and runSafeExecution helpers in desti…

devin-ai-integration[bot]
and
ThePlenkov
committed
fix(review): address Baz and Gitar threads on safe-execute dispatch\n\n- Deduplicate safe-execute payload in run-unit-tests coverage limit path by using safeExecuteLimitResult()\n- Reserve maxToolC…

devin-ai-integration[bot]
and
ThePlenkov
committed
fix(codacy): suppress false-positive header-injection on Map counters

devin-ai-integration[bot]
and
ThePlenkov
committed
fix(codacy): inline nosemgrep suppression for Map.set false positive

devin-ai-integration[bot]
and
ThePlenkov
committed
fix(review): address remaining Baz/Cubic/CodeRabbit review threads

devin-ai-integration[bot]
and
ThePlenkov
committed
refactor: reduce CodeScene complexity/argument warnings

devin-ai-integration[bot]
and
ThePlenkov
committed
fix: Sonar/Codacy issues in scoped execution

devin-ai-integration[bot]
and
ThePlenkov
committed
fix(session): pass URL objects directly to fetch to satisfy Codacy tainted-URL rule

devin-ai-integration[bot]
and
ThePlenkov
committed
fix(session): suppress Opengrep SSRF false positives on validated ADT session URLs

devin-ai-integration[bot]
and
ThePlenkov
committed
fix(adt-mcp, adt-client): address P1 review threads

devin-ai-integration[bot]
and
ThePlenkov
committed
fix(adt-client, adt-mcp): SSRF session-path normalization and safe-execute helper dedup

devin-ai-integration[bot]
and
ThePlenkov
committed
fix(adt-mcp): return normal MCP error for missing ATC object under safe execution

devin-ai-integration[bot]
and
ThePlenkov
committed
fix(adt-mcp): stable ATC object-not-found error and avoid orphan worklists

devin-ai-integration[bot]
and
ThePlenkov
committed
Merge branch 'main' into feat/scoped-safe-execution
ThePlenkov
authored
fix(adt-mcp): address Devin Review thread gaps

devin-ai-integration[bot]
and
ThePlenkov
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(adt-mcp): enforce scoped safe execution#143

feat(adt-mcp): enforce scoped safe execution#143
ThePlenkov merged 18 commits into
mainfrom
feat/scoped-safe-execution

Commits on Jul 24, 2026

feat(adt-mcp): enforce scoped safe execution

fix: format mcp-runtime, refactor run-unit-tests for code health, swap fake JWT in test

fix(review): address PR #143 review threads\n\n- Deduplicate scope denied / safe-execute limit payloads via utils.ts helpers\n- Track per-execution dispatch counters in destination-mode.ts\n- Inclu…

refactor: split wrapToolHandler and initializeCsrf to improve code health\n\n- Extract parseHandlerArgs, isScopeAllowed, maxToolCallsReached, incrementCounter, and runSafeExecution helpers in desti…

fix(review): address Baz and Gitar threads on safe-execute dispatch\n\n- Deduplicate safe-execute payload in run-unit-tests coverage limit path by using safeExecuteLimitResult()\n- Reserve maxToolC…

fix(codacy): suppress false-positive header-injection on Map counters

fix(codacy): inline nosemgrep suppression for Map.set false positive

fix(review): address remaining Baz/Cubic/CodeRabbit review threads

refactor: reduce CodeScene complexity/argument warnings

fix: Sonar/Codacy issues in scoped execution

fix(session): pass URL objects directly to fetch to satisfy Codacy tainted-URL rule

fix(session): suppress Opengrep SSRF false positives on validated ADT session URLs

fix(adt-mcp, adt-client): address P1 review threads

fix(adt-client, adt-mcp): SSRF session-path normalization and safe-execute helper dedup

fix(adt-mcp): return normal MCP error for missing ATC object under safe execution

fix(adt-mcp): stable ATC object-not-found error and avoid orphan worklists

Merge branch 'main' into feat/scoped-safe-execution

fix(adt-mcp): address Devin Review thread gaps