Rick Morgans 4a781b8cd8 MCP: --param-check checks calls to the running app (#9072) (#9073) ...

* claim: #9072

* MCP: --param-check checks calls to the running app (#9072)

`mcp --connect` (and `mcp` once it bridges to an app) took
`--param-check` and forwarded every call unchecked, while the app's own
session is always off. `Remote` now checks each `engine.execute` and
`engine.batch` against this server's command contracts before sending:
`strict` refuses a call, or a batch with such a step, without sending
anything, and `warn` adds `param_warnings` to the app's reply (each
step's result in a batch). A command with no contract here goes to the
app unchecked. `Auto` carries the headless session's level over when it
bridges to a late app. `batch_preflight::contracts` is the contract half
of the existing preflight, for a runner in another process.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-30 00:33:42 +00:00

..

solidcraft

Control token: a closing window removes only its own token and discovery files (#8794) (#8837)

2026-10-29 15:01:45 +00:00

solidcraft-cli

MCP: --param-check checks calls to the running app (#9072) (#9073)

2026-10-30 00:33:42 +00:00

solidcraft-web

Web: open tabs share settings changes, so one tab no longer undoes another's (#8644) (#8832)

2026-10-29 21:36:10 +00:00