Dustin Healy 87341c67c0 fix(mcp): carry apps flag through the request resolver and canonicalize resource-read auth ... resolveMCPAllowlists now returns appsEnabled from the merged tenant-scoped config, so a tenant/role/user override of mcpSettings.apps reaches the registry's per-request resolution and callTool attaches no UI resource for users whose tenant disabled apps. Authorize app-driven resource reads in the canonical (fully percent-decoded) space the server resolves and reject any relative path segment, so a percent-encoded traversal such as %2e%2e%2f can no longer match an advertised template. Exact resources/list matches are unaffected. Trim narrating comments across the MCP Apps changes so the code is self-documenting.		2026-06-29 00:52:58 -07:00
..
app
cache
config
db
models
server	fix(mcp): carry apps flag through the request resolver and canonicalize resource-read auth	2026-06-29 00:52:58 -07:00
strategies
test
utils
jest.config.js
jsconfig.json
package.json
typedefs.js