Ashwinhegde19 4d8c31cf16 fix(config): enforce MCP trust boundary so project config cannot override user disable (#609) ...

A user-level MCP server disable is now sticky. The project config
(a cloned repo's ./.zero/config.json) cannot re-enable a server the
user disabled, and cannot disable a server the user explicitly enabled.

The previous merge just assigned base.Disabled = next.Disabled, so a repo
that set disabled:true could silently defeat a user's explicit mcp enable
<server>. The guard is now symmetric via a mergeMCPServer canReenable
flag: once a higher-trust scope has explicitly set the disabled flag, a
lower-trust layer may not override that decision in either direction. Only
the CLI override scope (canReenable=true) may lift a sticky user decision.

The prior disabledSet-before-check ordering bug is also fixed: the
higher-trust scope's prior disabledSet/Disabled is captured before folding
in next's flag, so a project layer can still disable a default-enabled
server (e.g. firecrawl) rather than being silently ignored.

Ports the fix onto main's refactored MCP merge (internal/config/mcp_merge.go
and mergeProjectMCPConfig), which splits project-scope merging from the
general mergeMCPConfig path.

Fixes #512

2026-07-17 13:03:32 +08:00

..

active_provider_env_test.go

fix(tui): sub-agents inherit the parent's live provider after a /model switch (#348)

2026-07-01 01:57:30 +05:30

command_test.go

Add provider catalog foundation (#141)

2026-06-08 16:37:29 +05:30

command.go

Add provider catalog foundation (#141)

2026-06-08 16:37:29 +05:30

credentials_test.go

fix(provider): stop dropping custom no-auth providers on restart (#558)

2026-07-08 08:54:39 +08:00

credentials.go

fix(provider): stop dropping custom no-auth providers on restart (#558)

2026-07-08 08:54:39 +08:00

env_provider_kind_test.go

audit: fix four high-severity concurrency/correctness bugs (#261)

2026-06-20 10:38:53 +05:30

local_control_test.go

test(config): make Resolve local-control tests env-independent (#585)

2026-07-09 09:20:45 +08:00

max_turns_env_test.go

fix: agent runtime resilience — stream stalls, weak-model tool args, and sub-agent reliability (#349)

2026-07-01 09:15:08 +05:30

mcp_defaults_test.go

fix(mcp): silence startup warning for unconfigured default servers (#563)

2026-07-08 08:57:56 +08:00

mcp_defaults.go

fix(mcp): silence startup warning for unconfigured default servers (#563)

2026-07-08 08:57:56 +08:00

mcp_merge_test.go

fix: harden MCP credential boundaries (#597)

2026-07-10 09:00:17 +08:00

mcp_merge.go

fix(config): enforce MCP trust boundary so project config cannot override user disable (#609)

2026-07-17 13:03:32 +08:00

paths_test.go

fix(config): use ~/.config on macOS and enter setup when no provider (#371) (#372)

2026-07-02 20:03:44 +08:00

paths.go

fix(config): use ~/.config on macOS and enter setup when no provider (#371) (#372)

2026-07-02 20:03:44 +08:00

process_posix.go

feat: add go provider config and tui foundations

2026-06-04 17:11:40 +05:30

process_windows.go

fix(windows): resolve absolute path for taskkill to prevent hijacking (#617)

2026-07-10 10:08:11 +08:00

redact.go

feat: add go provider config and tui foundations

2026-06-04 17:11:40 +05:30

resolve_mcp_exclude_project_test.go

feat: gate project-scoped hooks, plugins, and MCP servers behind workspace trust (#529)

2026-07-09 10:51:09 +08:00

resolve_skip_test.go

fix(config): skip an unresolvable non-active provider instead of crashing startup (#283)

2026-06-21 15:56:21 +05:30

resolver_test.go

fix(config): enforce MCP trust boundary so project config cannot override user disable (#609)

2026-07-17 13:03:32 +08:00

resolver.go

fix(config): enforce MCP trust boundary so project config cannot override user disable (#609)

2026-07-17 13:03:32 +08:00

stt_test.go

feat: voice dictation (speech-to-text) (#557)

2026-07-07 11:13:14 +08:00

swarm_config_test.go

feat(subagent): proactive specialist delegation + swarm execution fixes (#243)

2026-06-18 20:00:12 +05:30

types_test.go

Deferred (lazy) tool loading: tool_search + auto threshold for large MCP tool sets (#148)

2026-06-09 12:20:22 +05:30

types.go

fix: harden MCP credential boundaries (#597)

2026-07-10 09:00:17 +08:00

unknownfields.go

fix(config): surface unknown/typo'd config fields instead of silently dropping them (#645)

2026-07-13 21:52:44 +08:00

validate_test.go

fix(config): surface unknown/typo'd config fields instead of silently dropping them (#645)

2026-07-13 21:52:44 +08:00

validate.go

fix(config): surface unknown/typo'd config fields instead of silently dropping them (#645)

2026-07-13 21:52:44 +08:00

writer_test.go

fix(auth): persist OpenRouter API key after login (#595)

2026-07-08 23:04:57 +08:00

writer.go

fix(auth): persist OpenRouter API key after login (#595)

2026-07-08 23:04:57 +08:00