Skip to content

feat: add Raw Model validation hook for package management tools#34

Merged
jeanmachuca merged 1 commit into
developmentfrom
feat/package-mcp-bridge
Jul 5, 2026
Merged

feat: add Raw Model validation hook for package management tools#34
jeanmachuca merged 1 commit into
developmentfrom
feat/package-mcp-bridge

Conversation

@jeanmachuca

Copy link
Copy Markdown
Member

Wires daemon-side validation for cognitiveos.package.* tool calls through the Raw Model.

  • internal/config/config.go: add RegistryURL field, package-mcp to default MCPBridges
  • internal/daemon/types.go: add PackageValidationParams, PackageManifestMetadata,
    PackageValidationResult, PackageRegistryManifest types
  • internal/daemon/raw_client.go: add ValidatePackageRequest() RPC call method
  • internal/daemon/mcp_lifecycle.go: add validatedNamespaces table, isToolValidated(),
    operationFromTool(), fetchManifestMetadata()
  • internal/daemon/handlers.go: wire validation check in toolLoop — intercepts validated
    tools, fetches registry metadata, calls Raw Model, forwards or denies

@jeanmachuca jeanmachuca merged commit ccdf62e into development Jul 5, 2026
1 check failed
jeanmachuca added a commit that referenced this pull request Jul 7, 2026
* fix: remove MCP-aware code from Raw Model client (#18)

cograw is a pure firmware GGUF guardrail with no knowledge of MCP tools.
- Remove ParseResponse, RegisterTool, UnregisterTool client methods
- Remove handleMCPInvoke handler and mcp_invoke dispatch
- Remove tool forwarding to cograw from MCP register/unregister
- Remove RegisteredTools/ServerTools dead code from MCPManager
- Move tool call parsing (@@tool.name()@@ regex) into daemon itself
- Remove ToolInfo, MCPInvokePayload types (ToolCall kept for daemon use)
- Simplify ValidatePrompt to take prompt only (no tools param)

* fix: origin validation for security/reset codes, seccomp/cgroups/chroot on MCP spawn, healthcheck loop, graceful shutdown handshake (#19)

* wire Wide Model lifecycle: handleWideModelLoad/Unload, output routing by content_type, MCP result feedback loop, shutdown actions (peripheral power-off/suspend/data wipe), StateIdleRequested, patchCount in status, idle timer startup sequence (#20)

* fix: origin validation for security/reset codes, seccomp/cgroups/chroot on MCP spawn, healthcheck loop, graceful shutdown handshake (#30)

* wire Wide Model lifecycle: handleWideModelLoad/Unload, output routing by content_type, MCP result feedback loop, shutdown actions (peripheral power-off/suspend/data wipe), StateIdleRequested, patchCount in status, idle timer startup sequence (#29)

* feat: add Raw Model validation hook for package management tools (#34)

* feat: multi-model routing — model registry, hot-swap, config-driven RawModelPath (#36)

* feat: multi-model routing — model registry, hot-swap, config-driven RawModelPath, system prompt merge

* fix: restore WideModelStatus struct with ModelID field (was accidentally removed in model registry refactor)

* fix: remove NoNewPrivileges for Go 1.23 compatibility
@jeanmachuca jeanmachuca deleted the feat/package-mcp-bridge branch July 7, 2026 03:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant