BobSong-dev opened a new pull request, #7669: URL: https://github.com/apache/shenyu/pull/7669
## Background The Agent Gateway currently aggregates MCP tools, but cannot expose resources from local providers or remote MCP servers through the same request-scoped entry. This draft adds the resources part of the OSPP scope without expanding the merged tools-only PR or depending on other unmerged PRs. ## Changes - Add `resources/list`, `resources/templates/list` and `resources/read` for explicit local providers and managed remote servers; - Intersect trusted `resourceGrants` with rule-level `allowedResources`, independently of tool permissions. Admin validates resource grants before saving; - Prefix remote permission names with `server.name` and expose reversible `mcp-resource://server/...` identifiers. Resource URIs are identifiers, not caller-selected HTTP or file destinations; - Reuse the existing request-owned transport, fixed service credentials and generation leases. Hot updates preserve in-flight reads; cancellation releases only the owning request; - Keep remote resource discovery disabled by default. Operators must explicitly enable `shenyu.plugins.agent.gateway.aggregation.resources-enabled`; - Add regression tests and document configuration, limits and compatibility. ## Contract and draft scope Inbound remains `2026-07-28`; outbound remains `2025-06-18`. No SDK upgrade is included. Lists are complete and permission-filtered; inbound cursors are rejected. Templates support simple named variables, not unrestricted RFC6570. Subscriptions, list-changed notifications, completion and prompts are not included. Existing tools-only metrics and spans are not presented as resource telemetry. Please keep this PR in draft while the resources contract and implementation are reviewed. ## Verification - Windows/JDK 17: targeted Maven Wrapper `clean verify` across Admin, Agent Gateway, Starter and dependencies: **654 tests / 35 suites**, 0 failures, errors or skipped tests; all 38 reactor modules passed Checkstyle and RAT; - Linux RISC-V64 under QEMU/JDK 17: targeted Maven Wrapper `clean verify` across Agent Gateway, Starter and dependencies: **620 tests / 33 suites**, 0 failures, errors or skipped tests; all 15 reactor modules passed Checkstyle and RAT. Admin is not included in this run; - Owned Admin/H2 → WebSocket → gateway → two loopback MCP servers: **20 checks passed** for JSON/SSE discovery and reads, authorization, rule updates, same-ID request isolation, invalid configuration, timeout/disconnect cancellation, generation pinning and cleanup; - Frozen source and test-report checks passed; `git diff --check` passed. A subsequent README clarification changed documentation only. These are scoped local results, not full-project tests or GitHub CI results. Javadoc was skipped. The owned network harness is not a new OpenCode/model run, native RISC-V validation or a complete bootstrap distribution build. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
