3 Commits

Author	SHA1	Message	Date
Jacob Magar	94850333e8	fix(safety): add stop_array to DESTRUCTIVE_ACTIONS, add error propagation test ... stop_array can cause data loss for running containers/VMs that depend on array shares — requires confirm=True like other destructive mutations. - Add stop_array to DESTRUCTIVE_ACTIONS and desc_map in array.py - Update safety audit KNOWN_DESTRUCTIVE[array] to include stop_array - Add stop_array negative/positive tests (test_array.py, safety tests) - Add test_snapshot_wraps_bare_exception to test_live.py (bare Exception from subscribe_once is wrapped by tool_error_handler into ToolError) 748 tests passing	2026-03-15 20:02:33 -04:00
Jacob Magar	0d4a3fa4e2	fix(live): validate log_tail path against allowlist, move guards before error handler ... Add _ALLOWED_LOG_PREFIXES allowlist check to log_tail (mirrors storage.py pattern) to prevent path traversal attacks. Move path/required guards before tool_error_handler context so validation errors raise cleanly. Add two tests: ToolError propagation and invalid path rejection.	2026-03-15 19:08:43 -04:00
Jacob Magar	675a466d02	feat(live): add unraid_live tool with 11 subscription snapshot actions ... Creates unraid_mcp/tools/live.py with SNAPSHOT_ACTIONS (9 one-shot reads) and COLLECT_ACTIONS (2 streaming collectors), plus tests/test_live.py with 6 passing tests. Registers register_live_tool in server.py, bringing the total to 12 tools.	2026-03-15 18:56:14 -04:00