refactor: route query authorization through one ExecutionGate + add macOS test CI gate by datlechin · Pull Request #1481 · TableProApp/TablePro

fix(safe-mode): standardize read-only denial message to hyphenated form

datlechin

committed

build: add refactor health audit script

datlechin

committed

feat(safe-mode): add ExecutionGate query authorization core

datlechin

committed

fix(change-tracking): group undo registration when not event-grouped

datlechin

committed

fix(sidebar): use native system colors for table row icons and text

datlechin

committed

test(sync): skip CloudKit soft-dependency suite when host is iCloud-entitled

datlechin

committed

fix(safe-mode): standardize read-only label and save message to hyphenated form

datlechin

committed

fix(ai-chat): detect SQL language when code starts with indented comment lines

datlechin

committed

ci: add blocking macOS test gate, serial with a quarantine list for headless-incompatible suites

datlechin

committed

refactor(coordinator): route editor query execution through ExecutionGate

datlechin

committed

fix(coordinator): gate structure DDL so read-only and safe mode apply to schema changes

datlechin

committed

fix(coordinator): gate maintenance, create-table, and column reorder through ExecutionGate

datlechin

committed

refactor(coordinator): route data-grid save through ExecutionGate

datlechin

committed

refactor(coordinator): route sidebar changes, table-tab exec, and EXPLAIN through ExecutionGate

datlechin

committed

refactor(mcp): route MCP safe-mode checks through ExecutionGate with confirmation pre-clear

datlechin

committed

refactor(ai-chat): route AI query and destructive tools through ExecutionGate

datlechin

committed

refactor(safe-mode): remove SafeModeGuard now that all callers use ExecutionGate

datlechin

committed

refactor(coordinator): remove orphaned dangerous-query dialogs superseded by the gate

datlechin

committed

fix(safe-mode): treat no-WHERE DELETE and per-statement batches as destructive

datlechin

committed

fix(coordinator): surface denial when saving sidebar truncate/delete changes

datlechin

committed

docs(changelog): note safe-mode behavior changes from the execution gate

datlechin

committed

refactor: drop unused backstop audit and dangling mobile SafeModeGuard reference

datlechin

committed

Merge remote-tracking branch 'origin/main' into refactor/execution-gate

datlechin

committed

fix(mcp): preclear safe-mode confirmation for execute_query and export_data so external clients don't block on a host dialog

datlechin

committed

test(mcp): raise stdio transport inbound failsafe to 10s to stop timing flake under load

datlechin

committed

fix(mcp): scope safe-mode capabilities per tool so export_data cannot run write or destructive queries

datlechin

committed

test(ai-chat): verify slash-command transient-state reset with /help so it doesn't depend on a configured AI provider

datlechin

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

refactor: route query authorization through one ExecutionGate + add macOS test CI gate - #1481

refactor: route query authorization through one ExecutionGate + add macOS test CI gate#1481
datlechin merged 27 commits into
mainfrom
refactor/execution-gate

Commits on May 29, 2026

fix(safe-mode): standardize read-only denial message to hyphenated form

build: add refactor health audit script

feat(safe-mode): add ExecutionGate query authorization core

fix(change-tracking): group undo registration when not event-grouped

fix(sidebar): use native system colors for table row icons and text

test(sync): skip CloudKit soft-dependency suite when host is iCloud-entitled

fix(safe-mode): standardize read-only label and save message to hyphenated form

fix(ai-chat): detect SQL language when code starts with indented comment lines

ci: add blocking macOS test gate, serial with a quarantine list for headless-incompatible suites

refactor(coordinator): route editor query execution through ExecutionGate

fix(coordinator): gate structure DDL so read-only and safe mode apply to schema changes

fix(coordinator): gate maintenance, create-table, and column reorder through ExecutionGate

refactor(coordinator): route data-grid save through ExecutionGate

refactor(coordinator): route sidebar changes, table-tab exec, and EXPLAIN through ExecutionGate

refactor(mcp): route MCP safe-mode checks through ExecutionGate with confirmation pre-clear

refactor(ai-chat): route AI query and destructive tools through ExecutionGate

refactor(safe-mode): remove SafeModeGuard now that all callers use ExecutionGate

refactor(coordinator): remove orphaned dangerous-query dialogs superseded by the gate

fix(safe-mode): treat no-WHERE DELETE and per-statement batches as destructive

fix(coordinator): surface denial when saving sidebar truncate/delete changes

docs(changelog): note safe-mode behavior changes from the execution gate

refactor: drop unused backstop audit and dangling mobile SafeModeGuard reference

Merge remote-tracking branch 'origin/main' into refactor/execution-gate

fix(mcp): preclear safe-mode confirmation for execute_query and export_data so external clients don't block on a host dialog

test(mcp): raise stdio transport inbound failsafe to 10s to stop timing flake under load

fix(mcp): scope safe-mode capabilities per tool so export_data cannot run write or destructive queries

test(ai-chat): verify slash-command transient-state reset with /help so it doesn't depend on a configured AI provider