This is an automated email from the ASF dual-hosted git repository.
luigidemasi pushed a change to branch fix/security-model-verification-153-158
in repository https://gitbox.apache.org/repos/asf/camel-kit.git
omit 26b2f4bc Fix #156: verify and correct the process side-effect inventory
omit 58fb578c Fix #158: verify Knowledge boundaries and enforce offline
models
omit 5befd5c5 Fix #157: confine generated writes and catalog extraction
omit f4e4f7ac Fix #155: grant only manifest-listed Claude MCP tools
omit 03cdfaeb Fix #154: confine and bound graph parser inputs and deadlines
add 380be630 Fix #154: confine and bound graph parser inputs and deadlines
add fdb8166e Fix #155: grant only manifest-listed Claude MCP tools
add 11404902 Fix #157: confine generated writes and catalog extraction
add 7d34b9fb Fix #158: verify Knowledge boundaries and enforce offline
models
add 92226242 Fix #156: verify and correct the process side-effect inventory
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (26b2f4bc)
\
N -- N -- N refs/heads/fix/security-model-verification-153-158
(92226242)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
CHANGELOG.md | 6 ++
docs/modules/ROOT/pages/agents.adoc | 12 ++--
docs/modules/ROOT/pages/graph.adoc | 11 +++-
docs/modules/ROOT/pages/knowledge.adoc | 5 ++
docs/security-model.md | 32 +++++++----
docs/security-model.yaml | 19 +++++--
docs/security-verification.md | 33 ++++++++---
.../camel/kit/catalog/CatalogDownloader.java | 5 ++
.../camel/kit/generator/AntigravityGenerator.java | 13 ++---
.../camel/kit/generator/AtomicFileWriter.java | 13 ++++-
.../camel/kit/generator/ClaudeGenerator.java | 11 +++-
.../apache/camel/kit/generator/CodexGenerator.java | 27 +++------
.../kit/generator/GeneratedAssetPreflight.java | 39 +++++++++++++
.../org/apache/camel/kit/service/InitService.java | 21 +++----
.../main/resources/templates/claude/settings.json | 48 +---------------
.../camel/kit/catalog/CatalogDownloaderTest.java | 28 ++++++++++
.../camel/kit/generator/AtomicFileWriterTest.java | 12 ++++
.../camel/kit/generator/CodexGeneratorTest.java | 4 +-
.../kit/generator/ShippedAssetStructureTest.java | 15 -----
.../kit/service/InitWriteConfinementTest.java | 40 +++++++++++++
.../camel/kit/graph/parser/BizTalkParser.java | 17 ++++--
.../apache/camel/kit/graph/parser/GraphParser.java | 65 +++++++++++++---------
.../camel/kit/graph/parser/MuleXmlFlowParser.java | 12 ++--
.../camel/kit/graph/parser/XmlRouteParser.java | 15 +++--
.../camel/kit/graph/GraphInputBoundaryTest.java | 52 ++++++++++++++++-
.../kit/knowledge/embedding/OfflineTokenizer.java | 5 +-
.../camel/kit/knowledge/mcp/OfflineModelsTest.java | 17 +++++-
27 files changed, 395 insertions(+), 182 deletions(-)
create mode 100644
kit/camel-kit-core/src/main/java/org/apache/camel/kit/generator/GeneratedAssetPreflight.java
