39129440229
87%

Ran 18 Oct 2026 12:58PM UTC

Jobs 3

Files 38

Run time 1min

Badge

Embed ▾

Committed 18 Oct 2026 12:57PM UTC coverage: 83.672% (+0.3%) from 83.409%

Build # 39129440229

Build Type

push

github

Committed by

web-flow

Commit Message

fix(core): reject policy file values with the wrong shape (#409)

_load_policy_file() only checked that the YAML parses. The readers then
iterate list-valued keys directly, so a value of the wrong type was
misread instead of rejected:

- a lone string is applied one character at a time: `deny: risk:destructive`
  denies nothing and `allow: list_*` allows every tool (fail open), and
  `namespaces: ml-team-dev` allows `m`, `l`, ... but not `ml-team-dev`
- `read_only: "false"` reads as True
- an empty `policy:`, `deny:` or `personas:` section, a top-level list, or
  a non-string persona `inherit` crashed startup with a raw TypeError or
  AttributeError

Validate the parsed document once at load time. A wrong shape raises a
RuntimeError naming the file and the key, extending the fail-closed
handling #285 gave unparseable files. A single string gets a hint
showing the list form. Empty sections are normalized to mean the same
as leaving them out; an empty `namespaces:` still means no restriction.

Fixes #405

Signed-off-by: ABHINAVGARG05 <abhichhrp@gmail.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Coverage Stats

2639 of 3154 relevant lines covered (83.67%)

2.51 hits per line

Coverage Regressions

Lines	Coverage	∆	File
1	99.36	0.3%	core/policy.py

Jobs

ID	Job ID	Ran	Files	Coverage
1	python-3.12 - 39129440229.1	18 Oct 2026 12:58PM UTC	38	83.67	GitHub Action Run
2	python-3.10 - 39129440229.2	18 Oct 2026 12:58PM UTC	38	83.67	GitHub Action Run
3	python-3.11 - 39129440229.3	18 Oct 2026 12:58PM UTC	38	83.67	GitHub Action Run

kubeflow / mcp-server / 39129440229
87%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 39129440229

kubeflow / mcp-server / 39129440229 87%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 39129440229

kubeflow / mcp-server / 39129440229
87%

README BADGES
x