5270aa5a6e
* feat: add bank-scoped validation to engine methods and HTTP handlers Add validate_bank_read/validate_bank_write hooks to all bank-scoped engine methods so the operation validator can enforce per-bank API key restrictions. Add OperationValidationError handling to HTTP handlers and MCP tools to return proper 403 responses. Add allowed_bank_ids field to RequestContext. * Add OperationValidationError handling to mental model GET and DELETE endpoints |
||
|---|---|---|
| .. | ||
| builtin | ||
| __init__.py | ||
| base.py | ||
| context.py | ||
| http.py | ||
| loader.py | ||
| mcp.py | ||
| operation_validator.py | ||
| tenant.py | ||