Hein 4ed9506ad2 feat(resolvemcp): add read-only mode and function allowlist ...

- Config.ReadOnly disables insert/update/delete/annotation tools, reports only
  select in list_tables/describe_table and tells the agent it cannot write
- Config.AllowFunctionCalls keeps function tools on a read-only server
- Config.AllowedFunctions limits list_functions/call_function to named
  functions (empty allows all); others are reported as unknown
- reflect read-only mode in the usage guide and exported catalogue

2026-10-07 14:15:14 +02:00

..

cache

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

common

fix(bun): ignore scanonly columns in ExcludeColumn

2026-10-05 14:10:52 +02:00

config

fix(common): harden CORS, sort, raw-SQL WHERE and x-custom-sql-or

2026-10-01 13:46:01 +02:00

dbmanager

fix(security): reorder import statements for consistency

2026-10-01 09:33:57 +02:00

dbtrace

fix(resolvemcp): single transaction for create/update, hook registry mutex, uniform not-found, bounded SSE host cache

2026-10-01 13:33:11 +02:00

errortracking

fix(errortracking): update error context handling in Sentry

2026-05-21 14:03:01 +02:00

eventbroker

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

funcspec

test(tx): regression tests for per-request transactions across all specs

2026-09-30 23:19:58 +02:00

logger

fix(logger): address audit findings

2026-09-30 13:19:52 +02:00

metrics

feat(metrics): bound HTTP path labels, add reset, custom push endpoint and JSON pull

2026-10-07 12:09:11 +02:00

middleware

feat(middleware): export clientqueue_enqueued_total counter

2026-09-30 16:16:25 +02:00

modelregistry

feat(resolvemcp): add model descriptions, usage guide and catalogue export

2026-10-07 14:09:37 +02:00

mqttspec

fix(crud): skip generated and read-only columns on insert and update

2026-10-02 22:43:45 +02:00

openapi

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

reflection

fix(bun): ignore scanonly columns in ExcludeColumn

2026-10-05 14:10:52 +02:00

resolvemcp

feat(resolvemcp): add read-only mode and function allowlist

2026-10-07 14:15:14 +02:00

resolvespec

test(wrap_bunrouter): add tests for route param preservation

2026-10-05 16:44:44 +02:00

restheadspec

test(wrap_bunrouter): add tests for route param preservation

2026-10-05 16:44:44 +02:00

security

feat(security): full OAuth 2.1 / OpenID Connect server and OIDC relying-party client

2026-10-01 14:42:12 +02:00

server

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

spectypes

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

testmodels

fix(delete): run delete hooks and queries in one transaction

2026-09-30 22:33:25 +02:00

tracing

fix(tracing): address audit findings

2026-09-30 13:39:50 +02:00

websocketspec

fix(crud): skip generated and read-only columns on insert and update

2026-10-02 22:43:45 +02:00