6 Commits

Include renames

Author	SHA1	Message	Date
Hein	5a3a1df3c8	feat(resolvemcp)!: make the server read-only by default ... BREAKING CHANGE: Config.ReadOnly is now a *bool and unset means read-only. Use ReadOnly: resolvemcp.Bool(false) to enable insert/update/delete, annotations and function calls. Adds the Bool helper and updates docs.	2026-10-07 14:17:56 +02:00
Hein	82f901a49c	fix(resolvemcp): single transaction for create/update, hook registry mutex, uniform not-found, bounded SSE host cache	2026-10-01 13:33:11 +02:00
Hein	ad2f54693f	feat(resolvemcp): require authentication on MCP endpoints and enforce model rules on writes ... Guard() rejects unauthenticated callers (no guest/optional mode); Setup*/New* helpers take a SecurityList and have explicit *Unauthenticated variants. Model rules now reach the security hooks, create checks CanCreate (security.CheckModelCreateAllowed), create/update validate keys against the model's writable columns, update sets only given keys (NULL allowed), update and delete go through row security via a new BeforeScan hook, and the annotation tool is opt-in (Config.EnableAnnotations) and runs BeforeHandle.	2026-10-01 13:31:13 +02:00
warkanum	b35399fdfa	feat(security): exclude hidden/masked columns from create and update payloads	2026-09-30 23:48:09 +02:00
warkanum	7f84debdc5	test(tx): regression tests for per-request transactions across all specs	2026-09-30 23:19:58 +02:00
warkanum	4cbe4f597d	feat(tx): run resolvemcp operations in per-operation transactions with OnTxBegin	2026-09-30 22:49:47 +02:00