Fix mounted MCP CLI restricted-bash allowlists across agentic engines (including codex/crush) and preserve CLI-first prompt guidance#26974

Merged

pelikhan merged 20 commits into

mainfrom

copilot/aw-failures-fix-safeoutputs-permission

Apr 18, 2026

Commits on Apr 18, 2026

Initial plan
Copilot
authored
fix: align copilot safeoutputs noop guidance and CLI allowlist

Copilot
and
pelikhan
authored
chore: plan follow-up for mounted mcp cli allowlist

Copilot
and
pelikhan
authored
fix: allow all mounted mcp clis in copilot shell allowlist

Copilot
and
pelikhan
authored
fix: cover all mounted mcp clis in restricted bash allowlist

Copilot
and
pelikhan
authored
refactor: centralize mounted mcp cli allowlist data derivation

Copilot
and
pelikhan
authored
chore: plan engine-wide mcp cli follow-up

Copilot
and
pelikhan
authored
fix: apply mounted mcp cli bash allowlist across engines

Copilot
and
pelikhan
authored
fix: polish shared mounted mcp cli allowlist helpers

Copilot
and
pelikhan
authored
chore: validate recompile request

Copilot
and
pelikhan
authored
Merge remote-tracking branch 'origin/main' into copilot/aw-failures-fix-safeoutputs-permission

Copilot
and
pelikhan
authored
fix: add mounted MCP CLI PATH support for crush and validate codex/crush coverage

Copilot
and
pelikhan
authored
test: pass workflowData into copilot tool args consistency test

Copilot
and
pelikhan
authored
fix: add host.docker.internal mapping to mcp gateway docker command

Copilot
and
pelikhan
authored
chore: plan merge main and recompile

Copilot
and
pelikhan
authored
Merge remote-tracking branch 'origin/main' into copilot/aw-failures-fix-safeoutputs-permission

Copilot
and
pelikhan
authored
revert: undo 73c7f82 gateway host mapping change

Copilot
and
pelikhan
authored
test: refresh wasm goldens after revert

Copilot
and
pelikhan
authored
chore: plan merge main and recompile

Copilot
and
pelikhan
authored
Merge remote-tracking branch 'origin/main' into copilot/aw-failures-fix-safeoutputs-permission

Copilot
and
pelikhan
authored

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Fix mounted MCP CLI restricted-bash allowlists across agentic engines (including codex/crush) and preserve CLI-first prompt guidance#26974

Fix mounted MCP CLI restricted-bash allowlists across agentic engines (including codex/crush) and preserve CLI-first prompt guidance#26974
pelikhan merged 20 commits into
mainfrom
copilot/aw-failures-fix-safeoutputs-permission

Commits on Apr 18, 2026

Initial plan

fix: align copilot safeoutputs noop guidance and CLI allowlist

chore: plan follow-up for mounted mcp cli allowlist

fix: allow all mounted mcp clis in copilot shell allowlist

fix: cover all mounted mcp clis in restricted bash allowlist

refactor: centralize mounted mcp cli allowlist data derivation

chore: plan engine-wide mcp cli follow-up

fix: apply mounted mcp cli bash allowlist across engines

fix: polish shared mounted mcp cli allowlist helpers

chore: validate recompile request

Merge remote-tracking branch 'origin/main' into copilot/aw-failures-fix-safeoutputs-permission

fix: add mounted MCP CLI PATH support for crush and validate codex/crush coverage

test: pass workflowData into copilot tool args consistency test

fix: add host.docker.internal mapping to mcp gateway docker command

chore: plan merge main and recompile

Merge remote-tracking branch 'origin/main' into copilot/aw-failures-fix-safeoutputs-permission

revert: undo 73c7f82 gateway host mapping change

test: refresh wasm goldens after revert

chore: plan merge main and recompile

Merge remote-tracking branch 'origin/main' into copilot/aw-failures-fix-safeoutputs-permission