Shiju
6d496f540a
fix(supervisor-network): validate and normalize OPA matchers (#3373)
* fix(supervisor-network): normalize OPA query and MCP matchers
Lower nonempty raw query and MCP parameter strings to explicit glob
matchers while preserving empty scalar query deny behavior. Cover
cross-format configuration and authorization parity, gateway reload
retention and repair, and supervisor local-file startup.
Align the mocked parity harness with the Debian supervisor image and
sandbox-boundary manifest fields introduced by RFC 0012.
Signed-off-by: Shiju <shiju@nvidia.com>
* fix(supervisor-network): reject null MCP matcher maps
Require explicit MCP params values to be maps before tool-alias
normalization. Cover YAML and JSON startup validation, rejected reload
retention, and valid omitted, empty, and explicit matcher maps.
Document the map contract for allow and deny rules.
Signed-off-by: Shiju <shiju@nvidia.com>
---------
Signed-off-by: Shiju <shiju@nvidia.com>
2026-09-17 12:45:32 +00:00
..
2026-09-16 00:49:14 +00:00
2026-09-14 16:49:44 +00:00
2026-09-16 22:11:19 +00:00
2026-09-16 12:49:55 +00:00
2026-09-15 14:57:07 +00:00
2026-09-16 19:51:45 +00:00
2026-09-16 19:51:45 +00:00
2026-09-17 05:29:47 +00:00
2026-09-16 19:51:45 +00:00
2026-09-16 19:51:45 +00:00
2026-09-16 19:51:45 +00:00
2026-09-16 19:51:45 +00:00
2026-09-16 19:51:45 +00:00
2026-09-16 19:51:45 +00:00
2026-09-09 17:57:42 +00:00
2026-09-11 05:00:24 +00:00
2026-09-11 05:00:24 +00:00
2026-09-16 00:49:14 +00:00
2026-09-15 18:47:55 +00:00
2026-09-03 15:26:14 +00:00
2026-09-03 15:26:14 +00:00
2026-09-16 17:36:31 +00:00
2026-09-16 17:36:31 +00:00
2026-09-16 17:36:31 +00:00
2026-09-16 19:51:45 +00:00
2026-09-17 05:46:06 +00:00
2026-09-16 04:08:00 +00:00
2026-09-16 22:11:19 +00:00
2026-09-16 22:11:19 +00:00
2026-09-09 18:47:22 +00:00
2026-09-17 12:45:32 +00:00
2026-09-16 19:51:45 +00:00
2026-09-16 19:51:45 +00:00
2026-09-17 12:45:32 +00:00
2026-09-16 19:51:45 +00:00
2026-09-16 22:11:19 +00:00
2026-08-20 15:08:09 +00:00