Block role/tool namespace mismatch for author and reviewer mutations (Issue #209) #223

2026-07-05T20:12:53-05:00

jcwalker3 commented

2026-07-05 20:12:53 -05:00

Summary

Implements Gitea-Tools #209.

Closes #209.

## Summary Implements Gitea-Tools #209. Closes #209.

jcwalker3 added 3 commits 2026-07-05 20:12:54 -05:00

Rename mcp_server.py to gitea_mcp_server.py c89ae2eb5c

Enforce issue-write tool gates to match task capability resolver (Issue #69 ) 00394d43b7

Extract TASK_CAPABILITY_MAP into task_capability_map.py as the single source
of truth shared by gitea_resolve_task_capability and issue-mutating tools.
Gate gitea_create_issue, gitea_close_issue, gitea_mark_issue, and
gitea_set_issue_labels with structured #142 permission reports. Add regression
tests proving resolver-denied tasks fail closed at the raw tool layer.

Implements mcp-control-plane #69.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

Block author mutations from reviewer MCP namespace (Issue #209 ) cbce6cb2e7

Add role_namespace_gate to fail closed when reviewer-bound sessions attempt
author mutations (create_pr always blocked; create_issue only when profile
explicitly grants gitea.issue.create). Extend mutation audit records with
mcp_namespace, task_role, and operation fields. Add handoff parity checks in
review_proofs for author role vs reviewer namespace mismatches.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

jcwalker3 referenced this pull request

2026-07-05 20:13:01 -05:00

Block role/tool namespace mismatch for author and reviewer mutations #209

sysadmin reviewed 2026-07-06 00:11:04 -05:00

sysadmin left a comment

Review (sysadmin / prgs-reviewer)

Approved — namespace mismatch gate (#209). Adds role_namespace_gate.py to block author mutations from reviewer MCP namespace, with audit enrichment. Stacked on #222 — merge #222 first.

## Review (sysadmin / prgs-reviewer) Approved — namespace mismatch gate (#209). Adds `role_namespace_gate.py` to block author mutations from reviewer MCP namespace, with audit enrichment. Stacked on #222 — merge #222 first.

sysadmin merged commit 6971a75818 into master

2026-07-06 00:14:48 -05:00

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Scaled-Tech-Consulting/Gitea-Tools#223