feat(mcp): enforce per-server tool allowlists across runtime, jobs, agents, and graph nodes

2026-08-27 14:43:18 -06:00
parent a92ebb5b94
commit 92d9464b38
11 changed files with 695 additions and 42 deletions
@@ -42,6 +42,9 @@ pub use self::install_remote::{
 pub use self::macro_policy::{
    MacroAllowlistLevel, MacroPolicy, MacroSource, MacroState, RESERVED_MACRO_NAMES, ResolvedMacro,
 };
+pub(crate) use self::mcp_tool_policy::expand_mcp_server_alias;
+#[cfg(test)]
+pub(crate) use self::mcp_tool_policy::{LayerSource, ToolFilter};
 #[allow(unused_imports)]
 pub use self::request_context::{
    RenderMode, RequestContext, effective_max_concurrent_jobs, jobs_enabled,