Add passthrough MCP mode - #1942

Draft

RhysSullivan wants to merge 19 commits into

mainfrom

mcp-passthrough

Commits on Sep 4, 2026

Add passthrough MCP mode
RhysSullivan
committed
d5b7338
Add OpenCode codemode passthrough scenario at 10,200 tools
RhysSullivan
committed
d64685c
Harden passthrough: provenance-gated approvals, injection-safe call code, exclusive artifacts
RhysSullivan
committed
db18de5
Passthrough: generation-checked catalog read, single-key tool access
RhysSullivan
committed
2082c84
Stamp catalog builds with a generation id; describeAll refuses a mixed join
RhysSullivan
committed
7eb987e
Catalog manifest per connection; passthrough refuses tightened policy; search tools are codemode-only
RhysSullivan
committed
ded81de
Catalog without a manifest is refused and rescanned; rebuilds clear the sync stamp first
RhysSullivan
committed
a215897
Rebuilds claim an ownership token; a build that lost its claim never stamps
RhysSullivan
committed
0c827d8
Catalog replacement is one fenced atomic unit; recovery stale-marks exact connections
RhysSullivan
committed
c12285b
replaceMany guard reads every driver's row count or refuses to fence; collision-free recovery keys
RhysSullivan
committed
829b193
Approval dominates read-only; replaceMany reads mysql2 counts; honest atomicity contract
RhysSullivan
committed
0dfffd9
Passthrough integration filter narrows the catalog read; refresh reports persisted rows
RhysSullivan
committed
01e2943
Scope the stale catalog sync to the requested integration; harden the narrowed-read and lost-claim tests; release fumadb
RhysSullivan
committed
d2dcf24
A lost rebuild claim reports the persisted catalog only when it is whole
RhysSullivan
committed
5e0fd2a
Every rebuild reports only a whole persisted catalog and stale-marks a torn one
RhysSullivan
committed
f2e9b94
A refused torn catalog is proven recovered on the next read; drop a duplicate log
RhysSullivan
committed
cbd416b
Kysely replaceMany; describeAll ignores torn catalogs the projection blocks
RhysSullivan
committed
4a0f571
Toolkit connection scope from real grant overlap; Kysely inserts are parameter-budgeted
RhysSullivan
committed
6bab5b2
Policy resolver and connection scope come from one prepared snapshot; batch inserts by widest row
RhysSullivan
committed
75651f9