Repository navigation

feat(wren): serve a project-bound agent and governed MCP through a shared context layer - #2848

Open

goldmedal wants to merge 161 commits into

mainfrom

feat/serve-agent-context-layer

Open

feat(wren): serve a project-bound agent and governed MCP through a shared context layer#2848
goldmedal wants to merge 161 commits into
mainfrom
feat/serve-agent-context-layer

Commits on Nov 3, 2026
- feat(context-loader): add the MDL adapter that reads a Wren project into Warble's context projection
  
  goldmedal
  and
  claude
  committed
  105025c
- docs(wren): add the serve-agent example project and the declared-rule guide
  
  goldmedal
  and
  claude
  committed
  c1ecb9e
- feat(wren): serve a project-bound agent and governed MCP through a shared context layer
  
  goldmedal
  and
  claude
  committed
  bb76b2a
- ci(wren): run the agent service suites and lint them beside src
  
  goldmedal
  and
  claude
  committed
  ea2151b
- ci(context-loader): drop the checkout token and deny rustdoc warnings
  
  goldmedal
  and
  claude
  committed
  47d070f
- fix(wren): let a view body read its own CTEs
  
  goldmedal
  and
  claude
  committed
  75b2b07
- fix(wren): shadow a view by a CTE only where the CTE is visible
  
  goldmedal
  and
  claude
  committed
  801b0cc
- fix(wren): judge date-window coverage per alias and ignore preserved-side ON literals
  
  goldmedal
  and
  claude
  committed
  d0d256d
- fix(wren): redact denied columns from served rule bodies
  
  goldmedal
  and
  claude
  committed
  827b8e6
- fix(wren): end the task on an unknown model before a pending form error
  
  goldmedal
  and
  claude
  committed
  4435692
- fix(wren): judge each read of a covered model by the filters that restrict it
  
  goldmedal
  and
  claude
  committed
  31f21ff
- fix(wren): accept a row-number limit of one only as a top-level conjunct
  
  goldmedal
  and
  claude
  committed
  dd340ca
- fix(wren): refuse an ignored --warble and report an unreadable service config
  
  goldmedal
  and
  claude
  committed
  3956e8c
- docs(core): name every enforcement point of declared rules
  
  goldmedal
  and
  claude
  committed
  a503a5f
- docs(serve-agent): word the counts limits as the worker's brief, not a host guarantee
  
  goldmedal
  and
  claude
  committed
  55c2427
- fix(context-loader): treat CTE names as bound names, not table reads
  
  goldmedal
  and
  claude
  committed
  05e4971
- fix(context-loader): hang a view-backed cube off its view node
  
  goldmedal
  and
  claude
  committed
  b9db1b1
- fix(context-loader): fail on an unreadable directory entry instead of skipping it
  
  goldmedal
  and
  claude
  committed
  875ad0d
- fix(context-loader): apply the digest's dot-name rule to every source reader
  
  goldmedal
  and
  claude
  committed
  2df3fda
- fix(context-loader): read a view that has no sql.yml and report one with no statement
  
  goldmedal
  and
  claude
  committed
  f33318f
- fix(context-loader): keep per-cube metadata when the root cubes.yml is empty
  
  goldmedal
  and
  claude
  committed
  5805d24
- fix(context-loader): link cube members from parsed column references
  
  goldmedal
  and
  claude
  committed
  f7e48b3
- test(context-loader): pin the CTE sibling and case rules; document dot-named entries
  
  goldmedal
  and
  claude
  committed
  55d02d1
- docs(serve-agent): state the per-alias window rule and the policy-governed disclosure
  
  goldmedal
  and
  claude
  committed
  7e79627
- test: drop review-round prefixes from test names
  
  goldmedal
  and
  claude
  committed
  a4587ec
- fix(wren): validate declared predicates and bound governed query workers
  goldmedal
  committed
  224b517
- fix(wren): keep bounded IPC correlation and respect model provenance
  goldmedal
  committed
  0299442
- fix(context-loader): reject cyclic directory links across readers
  goldmedal
  committed
  a21df95
- test(wren): exercise host policy denial with published Cedar
  goldmedal
  committed
  8f2ac34
- fix(wren): bind exclusion and date proofs to each read
  goldmedal
  committed
  db69a09
- fix(wren): validate service boundaries and terminate host work
  goldmedal
  committed
  0e0f29c
- test(wren): require loader parity in service CI and align contracts
  goldmedal
  committed
  aa78d5a
- fix(wren): anchor source digests to directory descriptors
  goldmedal
  committed
  77f51d2
- docs(wren): clarify consumer lineage dialect limits
  goldmedal
  committed
  6270b01
- fix(wren): cancel authorization waits and close terminal IPC pools
  goldmedal
  committed
  42a7a72
- fix(context-loader): preserve consumer SQL provenance
  goldmedal
  committed
  24af19e
- fix(context-loader): scope consumer member lineage
  goldmedal
  committed
  e25bbde
- fix(context-loader): harden source traversal and lineage
  goldmedal
  committed
  77effe8
- fix(context-loader): preserve source entry errors
  goldmedal
  committed
  3fc4c3f
- fix(context-loader): classify source entries before opening
  goldmedal
  committed
  fa3192e
- test(context-loader): cover post-validation directory swaps
  goldmedal
  committed
  a277412
- fix(context-loader): stream source digests
  goldmedal
  committed
  22fe85c
- fix(context-loader): retain duckdb cte folding
  goldmedal
  committed
  7fb80fa
- fix(wren): ignore unused CTEs in declared exclusion proofs
  goldmedal
  committed
  1324742
- fix(wren): reject non-UTF8 managed source names
  goldmedal
  committed
  4a5ff68
- fix(wren): refuse qualified physical sources in governed stdio
  goldmedal
  committed
  3933383
- fix(wren): include IPC writes in cancellable call deadlines
  goldmedal
  committed
  515f781
- fix: preserve consumer query provenance
  goldmedal
  committed
  a1295a5
- fix: fold quoted output aliases
  goldmedal
  committed
  ecff43e
- fix(wren): restrict group exceptions to consumed scopes
  goldmedal
  committed
  de71195
- fix(wren): share consumed scopes with status rule checks
  goldmedal
  committed
  14b9156
- fix(wren): cap owned control writes independently
  goldmedal
  committed
  3bf3e9e
Commits on Nov 4, 2026
- fix(wren): bind default proofs to consuming rate and status reads
  goldmedal
  committed
  fac60ae
- fix(wren): preserve bound secrets and exact decimal results
  goldmedal
  committed
  f8a4d36
- fix(wren): bound complete context pages without losing selectors
  goldmedal
  committed
  1314399
- fix(examples): allow service replies within planner call timeout
  goldmedal
  committed
  22240cd
- fix: reject duplicate loader outputs
  goldmedal
  committed
  579b1cf
- fix(wren): reject post-window rate cardinality proofs
  goldmedal
  committed
  d624c7b
- docs(wren): retain the nested join exclusion limitation
  goldmedal
  committed
  6b0893a
- fix(wren): reject stale serve context definitions
  goldmedal
  committed
  33f49fd
- fix(wren): preserve SQL literal whitespace in context checks
  goldmedal
  committed
  ca2043c
- fix(wren): compare model semantics before serving
  goldmedal
  committed
  1969c7d
- fix(wren): contain context source builder exits
  goldmedal
  committed
  21bcabe
- test(wren): keep unverified view sources and artifact consistent
  goldmedal
  committed
  892f100
- test(wren): isolate identity and inspect consuming status paths
  goldmedal
  committed
  67c1727
- fix(wren): roll back failed service session and audit startup
  goldmedal
  committed
  0139c2b
- fix(wren): require rate proofs for every aggregated amount group
  goldmedal
  committed
  5fb0e0e
- fix: preserve nested join sources
  goldmedal
  committed
  81cdf38
- fix: reject metadata directories consistently
  goldmedal
  committed
  1562391
- fix(context-loader): trace relationship condition consumers
  goldmedal
  committed
  73f04eb
- fix(context-loader): trace dependent views
  goldmedal
  committed
  7900fc5
- fix(wren): classify physical sources before column qualification
  goldmedal
  committed
  4235446
- test(wren): retain conservative CTE source classification
  goldmedal
  committed
  1a6ad18
- fix: leave expression-only additivity unknown
  goldmedal
  committed
  edaa2b0
- fix: parse additivity expressions structurally
  goldmedal
  committed
  ce8b276
- docs(wren): explain conservative metric additivity
  goldmedal
  committed
  811da66
- fix(serve-agent): bind currency guards to consumed amount reads
  goldmedal
  committed
  6df7a52
- fix(serve-agent): retain confirmed scopes across clarifications
  goldmedal
  committed
  f93513a
- fix(context-loader): read model ref SQL files
  goldmedal
  committed
  27c6c8a
- fix(context-loader): accept camel ref SQL
  goldmedal
  committed
  d5d1b67
- fix(context-loader): validate output destinations
  goldmedal
  committed
  2c82cac
- fix(context-loader): preflight output writes
  goldmedal
  committed
  19926ad
- fix(context-loader): preserve cube hierarchies
  goldmedal
  committed
  ce8fa98
- fix(serve-agent): preserve outer join filter boundaries
  goldmedal
  committed
  44fbb0c
- test(serve-agent): await peer receipt before late-frame abort
  goldmedal
  committed
  5db9e6a
- fix(serve-agent): preserve consumed sources and enum domains
  goldmedal
  committed
  ac1c532
- fix(context-loader): preserve source identity
  goldmedal
  committed
  9fc0fb2
- fix(context-loader): capture coherent project sources
  goldmedal
  committed
  7b88c2e
- fix(context-loader): preserve absent source entries
  goldmedal
  committed
  b99c84c
- fix(serve-agent): preserve privacy and terminal query outcomes
  goldmedal
  committed
  b064be6
- fix(serve-agent): validate final snapshot and disambiguate context names
  goldmedal
  committed
  3229a69
- fix(governed-stdio): refuse undetermined declared defaults
  goldmedal
  committed
  8529236
- docs: clarify declared-rule structural verification limits
  goldmedal
  committed
  79289f4
- fix(context-loader): reject ambiguous consumer declarations
  goldmedal
  committed
  00caee8
- fix(context-loader): reject root-only native cubes
  goldmedal
  committed
  974c60f
- test(context-loader): make native cube fixture engine-readable
  goldmedal
  committed
  b86508b
- fix(context-loader): validate native cube mirrors
  goldmedal
  committed
  62ed075
- test(context-loader): isolate cube mirror differences
  goldmedal
  committed
  0d658c6
- fix: tighten declared FX rate preservation checks
  goldmedal
  committed
  4be2a7b
- fix: preserve only proven FX null-safe branches
  goldmedal
  committed
  c7ac145
- test(context-loader): expect native cube mirror validation
  goldmedal
  committed
  3a9d55e
- fix(serve-agent): tighten startup, metadata and timeout boundaries
  goldmedal
  committed
  f788719
- fix: require FX joins for each aggregated alias
  goldmedal
  committed
  29a464c
- fix: preserve FX diagnostics across alias checks
  goldmedal
  committed
  3e9194a
- fix(context-loader): preserve safe metric and output handling
  goldmedal
  committed
  84e3f41
- fix(context-loader): trace qualified cube calculations
  goldmedal
  committed
  d607666
- test(planner): supply required reply timeout in payload fixture
  goldmedal
  committed
  60cad2a
- fix(serve-agent): scope consumed sources and preserve exact results
  goldmedal
  committed
  7c1b234
- fix(serve-agent): stop controlled delivery after an audit failure
  goldmedal
  committed
  acb069e
- fix(context-loader): preserve lineage and declaration diagnostics
  goldmedal
  committed
  0ccb494
- fix: validate direct FX bounds and status scopes
  goldmedal
  committed
  6a4045a
- fix: preserve safe FX cast and date bounds
  goldmedal
  committed
  4949b85
- fix(planner): keep trace files private on every write
  goldmedal
  committed
  54a76a4
- fix(read-only): share consumed CTE scope traversal
  goldmedal
  committed
  376f8f5
- fix: stage qualify exclusions after aggregation
  goldmedal
  committed
  b6b66be
- fix(context-loader): align native schema handling
  goldmedal
  committed
  fa3dbaf
- fix(context-loader): match schema integer coercion
  goldmedal
  committed
  c46aeae
- fix(agent): validate thinking values and omit model-derived summary labels
  goldmedal
  committed
  36c1f4c
- test(agent): synchronize executor thread exit before cleanup assertion
  goldmedal
  committed
  4e70179
- fix(agent): bound tool admission and validate context exposure
  goldmedal
  committed
  6eaf592
- fix(context-loader): ignore SQL literals in lineage fallback
  goldmedal
  committed
  6c7855c
- fix(context-loader): reject flat legacy native sources
  goldmedal
  committed
  b82549c
- fix(context-loader): lex SQL lineage fallback safely
  goldmedal
  committed
  f89e888
- fix(context-loader): preserve mirrored v1 native sources
  goldmedal
  committed
  5a47efb
- fix(context-loader): align fallback and v1 mirrors
  goldmedal
  committed
  fb345cb
- fix(context-loader): preserve non-v1 root view behavior
  goldmedal
  committed
  19f6157
- fix(context-loader): preserve backtick identifiers
  goldmedal
  committed
  92b7c58
- fix(agent): bind startup inputs and budget metadata delivery
  goldmedal
  committed
  336d65a
- fix(serve): reject post-aggregate qualify proofs
  goldmedal
  committed
  e36927e
- fix(serve): keep rate proofs per amount alias
  goldmedal
  committed
  a66e91e
- docs(context-loader): clarify planner and mirror inputs
  goldmedal
  committed
  9048003
- fix(agent-ipc): bound shutdown of callbacks and helpers
  goldmedal
  committed
  29e0ed0
- docs(agent): clarify callback and runtime cleanup boundaries
  goldmedal
  committed
  14b1c03
- fix: cancel final delivery and reject unsupported legacy policy
  goldmedal
  committed
  8ec33f1
- fix(serve): respect scoped SQL identifiers
  goldmedal
  committed
  4ca7c19
- fix(context-loader): preserve correlated lineage
  goldmedal
  committed
  abd9245
- fix(context-loader): scope correlated query aliases
  goldmedal
  committed
  23bca6f
- fix(context-loader): preserve nested alias shadowing
  goldmedal
  committed
  dcd476c
- test: align planner fixtures with safe trace files
  goldmedal
  committed
  3b549ce
- fix(serve): validate metadata selection before startup
  goldmedal
  committed
  080cb31
- fix(context-loader): retain malformed catalog descriptions
  goldmedal
  committed
  77b7c37
- fix(serve): preserve SQL gate contracts
  goldmedal
  committed
  a31e182
- fix(serve): retain contributing projection sources
  goldmedal
  committed
  368caf7
- test: separate scripted metadata startup from policy checks
  goldmedal
  committed
  ed61976
- fix(serve): preserve clarification context and replace traces safely
  goldmedal
  committed
  3c3be52
- fix: bound tool result write allowance
  goldmedal
  committed
  a616094
- fix(serve): preserve per-consumer SQL evidence
  goldmedal
  committed
  9c0256f
- fix(serve): require complete key joins
  goldmedal
  committed
  7461043
- fix(serve): fail closed on ambiguous FX consumers
  goldmedal
  committed
  9a151c0
- fix(serve): identify nested FX branch consumers
  goldmedal
  committed
  f2b4e15
- fix(serve): unwrap nested FX branches
  goldmedal
  committed
  ad1d161
- test: make IPC deadline check deterministic
  goldmedal
  committed
  d61ee44
- style: format aggregation key guard
  goldmedal
  committed
  f935602
- fix: deny late IPC tool calls
  goldmedal
  committed
  801d775
- fix: bound only denial IPC replies
  goldmedal
  committed
  3054f21
- test(context-loader): support CRLF rule fences
  goldmedal
  committed
  760b3d1
- test(context-loader): preserve CRLF denylist rules
  goldmedal
  committed
  c76839a
- test(context-loader): preserve CRLF knowledge rules
  goldmedal
  committed
  dd56286
- fix(serve): close denied cube and declaration envelope gaps
  goldmedal
  committed
  6cb58a2
- fix(context-loader): reject misplaced default declarations
  goldmedal
  committed
  e73de06
- test(agent): stabilize audit redaction assertion
  goldmedal
  committed
  49047e2

Commits

Commits on Nov 3, 2026

Commits on Nov 4, 2026