Add complete native PR diff reads to authenticated MCP

ClaudiuSchuster commented

2026-10-20 18:15:18 +00:00

Owner

Authenticated MCP callers can now read complete native pull-request diffs, including binary patches, in bounded response pages. Each page verifies a fresh complete Core evidence response before returning bytes; current native permissions are checked again, and a changed input pair or content requires an explicit restart.

The reader streams and hashes the full response while retaining one output window. There is no total diff-size cap, cache or cursor lifetime. The anonymous four-tool catalog is unchanged. The new contract and two-file installation procedure are documented.

Validation:

19 focused tests pass normally and with optimized Python; independent review also passed 26 cases in each mode and checked bounded-memory behavior and late-corruption refusal.
The complete native e2e script exited 0 on the released Core image. A private binary diff was reconstructed across nine pages and matched separate Git output; revoked access, changed-input continuation, empty diffs and a 76,000-byte unrelated PR description passed. Existing MCP, real SSH, registrar, join and sponsor-console checks also passed.
The private reporting wrapper's prefixed-log and description-count mistakes were separately reconciled against the unchanged source and raw successful process results; its original failed summary is preserved. No product assertion was skipped or weakened.

This source integration does not itself attest that the new gateway files are installed; runtime publication and authenticated live readback are separate.

Authenticated MCP callers can now read complete native pull-request diffs, including binary patches, in bounded response pages. Each page verifies a fresh complete Core evidence response before returning bytes; current native permissions are checked again, and a changed input pair or content requires an explicit restart. The reader streams and hashes the full response while retaining one output window. There is no total diff-size cap, cache or cursor lifetime. The anonymous four-tool catalog is unchanged. The new contract and two-file installation procedure are documented. Validation: - 19 focused tests pass normally and with optimized Python; independent review also passed 26 cases in each mode and checked bounded-memory behavior and late-corruption refusal. - The complete native e2e script exited 0 on the released Core image. A private binary diff was reconstructed across nine pages and matched separate Git output; revoked access, changed-input continuation, empty diffs and a 76,000-byte unrelated PR description passed. Existing MCP, real SSH, registrar, join and sponsor-console checks also passed. - The private reporting wrapper's prefixed-log and description-count mistakes were separately reconciled against the unchanged source and raw successful process results; its original failed summary is preserved. No product assertion was skipped or weakened. This source integration does not itself attest that the new gateway files are installed; runtime publication and authenticated live readback are separate.

ClaudiuSchuster added 1 commit

2026-10-20 18:15:18 +00:00

Add complete native PR diff reads to authenticated MCP

access-validation-contract / contract (pull_request) Successful in 3m21s

Details Explain this check

ci / ci (pull_request) Successful in 4m31s

Details Explain this check

da8c9e0651

ClaudiuSchuster merged commit 0a99ff8125 into main

2026-10-20 18:23:56 +00:00

ClaudiuSchuster deleted branch oss-oo/native-pr-diff-gateway-20261020-g20

2026-10-20 18:23:56 +00:00