Tags · SISL-UIC/hoop

1.122.0

feat(mssql): native guardrails support (hoophq#1630)

* feat(mssql): native guardrails support (flag-gated)

Enforce guardrails on native MSSQL (TDS) protocol sessions, which were
previously refused fail-closed because the proxy could not evaluate
rules. Behind the new beta.mssql_native_guardrails feature flag
(default on):

- gateway: sessionSupportsGuardRails allows a guarded native MSSQL
session when the org's flag is on, and keeps refusing it when off.
- agent: processMSSQLProtocol forwards the connection's guardrail rules
to the libhoop MSSQL proxy (which validates SQLBatch and RPC
sp_executesql/prepare/prepexec statements and blocks violations).

The flag defaults on; enforcement lives in the agent proxy, so agents
must be upgraded alongside the gateway (older agents run the session
unguarded) — documented on the flag and in the gateway comment.

Output data masking for MSSQL remains out of scope (follow-up).

Adds an integration test that blocks and allows queries against a real
SQL Server for both the SQLBatch and sp_executesql paths, and updates
the guardrails gate unit tests to be flag-aware.

Requires the paired libhoop change (hoophq/libhoop#96).

Closes DEP-69

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

* fix(mssql): refuse native sessions with output guardrail rules (review)

Native MSSQL enforces input guardrails only (result-set masking is not yet
implemented). Admitting a connection whose rules include output rules would
run them silently unenforced, so refuse it fail-closed at session open. Web
Exec, which enforces output rules via the db-exec redactor, is exempt.

Adds an e2e test proving the dynamic-exec parameter bypass is blocked
against a real SQL Server, and a unit test for the output-rule detector.

Part of DEP-69.

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

* fix(mssql): remove agent flag race, persist mid-session guardrail info (review)

Second round of review fixes:

- agent: stop re-checking beta.mssql_native_guardrails on the agent before
forwarding rules. The gateway is the sole admission authority (it only
opens the session when the org flag is on and refuses output-ruled
connections), so the agent now always forwards the rules it was sent. This
removes a feature-flag sync race that could open an unguarded proxy if the
agent had not yet received the flag update.
- gateway: persist guardrail violation metadata from native protocol error
replies (MSSQL and PG connection writes), not only on SessionClose. A
native guardrail block keeps the session open, so the matched-rule info was
previously discarded. UpdateSessionGuardRailsInfo appends, so violations
accumulate on the session record.

Part of DEP-69.

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

* test(mssql): gateway integration test for output-rule admission refusal (review)

Add a gateway integration test proving a native MSSQL session on a connection
with output guardrail rules is refused fail-closed (the TDS proxy enforces
input rules only). Adds postMSSQLConnection and createOutputGuardrailForConnection
harness helpers.

Part of DEP-69.

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

* feat(mssql): gate native guardrails on agent capability (fail-closed rollout)

Close the mixed-version fail-open: enforcement of native MSSQL guardrails
lives in the agent, so the gateway must not admit a guarded native MSSQL
session to an agent that cannot enforce it.

- The agent now advertises its capabilities in the gRPC connect metadata
(agent-capabilities), including mssql_native_guardrails.
- The gateway resolves the selected agent's stream at admission and refuses
the session fail-closed unless it advertises the capability. An older agent
omits it and is refused, never run unguarded — so beta.mssql_native_guardrails
can safely default on across a rolling upgrade.

Reuses the existing gRPC agent metadata channel and agent-stream registry
(the prior capability mechanism was websocket/agentrs-only, for RDP, and did
not cover the Go gRPC agent that runs the MSSQL proxy).

Adds a gateway integration test that a guarded native MSSQL session is refused
when the agent does not advertise the capability, and unit tests for the
capability list/parser.

Part of DEP-69.

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

* fix(mssql): advertise guardrails capability only when libhoop enforces it

The agent previously advertised mssql_native_guardrails unconditionally, so a
build linked against the OSS/noop libhoop (or a libhoop whose MSSQL proxy is a
passthrough) would falsely claim support and the gateway would admit a session
it cannot enforce.

- Derive the advertised capability from the linked libhoop
(libhoop.SupportsMSSQLGuardRails): the noop build returns false, so such an
agent advertises nothing and the gateway keeps the session fail-closed.
- Move capability-list construction from common/proto into the agent (which
links libhoop); common/proto keeps only the token constants and the parser.
- Document the fail-closed behaviors (dynamic execution, unsupported parameter
types, output rules) on the feature flag.

Part of DEP-69.

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

* test(mssql): cover capable-agent admission and old-agent refusal (review)

Add a positive gateway integration test that a native MSSQL guarded session on
a capability-advertising agent passes admission (guards against a routing or
metadata regression silently failing every guarded session closed), and switch
the fail-closed test to a capability-less agent starter. The harness DialAgent
now advertises the native MSSQL guardrails capability (faithful to a current
agent linked against the enforcing libhoop); dialAgentWithoutCapabilities stands
in for an older agent.

Part of DEP-69.

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

* test(mssql): use the real gateway guardrail JSON shape in e2e (qodo)

The MSSQL integration fixture injected guardrail rules as an array of
{id,name,input_rules,output_rules} objects, but the gateway ships a single
object with top-level input_rules/output_rules (see encodeGuardRailRules). Use
that exact shape so the e2e exercises the real gateway->agent payload.

Part of DEP-69.

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

* refactor(mssql): drop native guardrails flag, scope PG audit revert

Address maintainer review on hoophq#1620:

- Remove the beta.mssql_native_guardrails feature flag entirely. Native MSSQL
guardrails are now driven purely by whether the connection has guardrail
rules configured, exactly like Postgres/MySQL. libhoop stays the sole
authority: it enforces input rules and fails closed at proxy construction
for anything it cannot evaluate. Drops the flag catalog entry, the
dropNativeMSSQLGuardRails gate and its unit test, and flag-referencing docs.
- Revert the PGConnectionWrite audit change back to origin/main (error-message
rewrite only); keep violation-metadata persistence on the new
MSSQLConnectionWrite case, where it is needed because a native MSSQL block
keeps the session open rather than carrying the info on SessionClose.

DEP-69.

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

* fix(mssql): ship only configured guardrail rules

Drop empty direction placeholders before forwarding guardrails and remove unrelated protocol residue.

Fixes #DEP-69

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

* test(mssql): add JDBC guardrail integration

Exercise the production TCP client proxy with Microsoft JDBC metadata, query, and post-block traffic. Generate the pinned driver classpath in CI and isolate test transport packets across serialization boundaries.

Fixes #DEP-69

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

* fix(mssql): skip empty guardrail metadata

Avoid database writes when decoded guardrail metadata contains no violations.

Fixes #DEP-69

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

* ci: pin paired libhoop revision

Resolve same-named libhoop branches once so integration jobs test one exact commit and only missing branches fall back.

Fixes #DEP-69

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

* ci: block unmerged paired dependencies

Keep paired libhoop integration coverage while exposing a separate exact-commit merge gate for safe cross-repository merge ordering.

Fixes #DEP-69

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

* test(mssql): isolate listener address lookup

Fixes #DEP-69

🤖 Generated with Mister Maluco

Co-Authored-By: MisterMal <teskeslab@lucasteske.dev>

---------

Co-authored-by: MisterMal <teskeslab@lucasteske.dev>

Jul 27, 2026
9797cd4
zip
tar.gz

1.121.3

[DEP-77] add the default valeu to the analyzer and some libhoop chang…

…es (hoophq#1644)

* fix default value on frotend

* fix(webapp): block data masking edit form on failed rule fetch to prevent overwriting rule with defaults

Jul 27, 2026
675b16f
zip
tar.gz

1.121.2

EVL-104: unify webapp_v2 snackbars on showSnackbar, remove @mantine/n…

…otifications (hoophq#1638)

* EVL-104: unify webapp_v2 snackbars on showSnackbar, remove @mantine/notifications

webapp_v2 had two toast systems running at once: the sonner-based
showSnackbar (migrated from the CLJS app, top-right, v1 visual) and
Mantine @mantine/notifications (bottom-right, different visual).

- Migrate all 33 notifications.show() call sites (10 files) to
  showSnackbar
- Switch Roles/Configure from the CLJS-bridge snackbar to the local
  showSnackbar (the CLJS Toaster is unmounted on React-only routes,
  so bridged toasts could be silently lost) and drop the bridge method
- Remove the <Notifications /> provider, its styles import, and the
  @mantine/notifications dependency
- Update CLAUDE.md, COMPONENTS.md and CONTEXT_MIGRATION.md accordingly

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* EVL-104: fix import grouping in CommandPalette (@/ before relative)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Jul 27, 2026
7788296
zip
tar.gz

1.121.1

EVL-102: Migrate Jira integration to a Jira Templates setup page in w…

…ebapp_v2 (hoophq#1634)

* chore: add team Claude Code setup (.claude package + MCP servers)

- .claude/: shared settings (permissions, hooks, gofmt-on-edit), fix-ticket
  and test-plan skills, team README with the worktree flow
- .mcp.json: Linear + Figma MCP servers (root file un-ignored)
- CLAUDE.md: Team AI Workflow section
- .gitignore: version .claude/ selectively (worktrees and local settings
  stay ignored)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* EVL-102: add Jira Templates service, store and helpers in webapp_v2

Extends the list-only jiraTemplates service with template CRUD, org
integration get/create/update and the Jira Assets object search. Adds a
page-local zustand store (DataMasking status-enum pattern) and the form
helpers ported from the legacy CLJS implementation, minus its payload
leaks (selected/timestamp UI keys no longer reach the API).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* EVL-102: add Jira Templates page with Templates and Configuration tabs

Runbooks-Setup-style layout: header + tabs, synced with ?tab= so the
sidebar can deep-link the Configuration tab. Templates tab covers the
integration-not-configured promotion gate, empty state, list with
delete confirmation and free-plan limit banner. Configuration tab
absorbs the legacy /settings/jira form (POST on first save, PUT after).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* EVL-102: add Jira template create/edit form and routes

Mirrors the legacy form sections: basic info, workflow transition
(including skip_transition_on_nonzero_exit_code, which the legacy UI
stored but the form now exposes as a switch), resource-role
multi-select, preset/custom mapping tables sharing one rules array,
manual prompts and CMDB rules. CMDB Value becomes a searchable asset
picker (GET /integrations/jira/assets/objects) once the row has an
Object Type ID, storing the object name; it degrades to plain text on
lookup errors. Routes registered above the /* catch-all.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* EVL-102: point sidebar and command palette at the React Jira page

Integrations > Jira now deep-links /jira-templates?tab=configuration;
adds a Jira Templates quick-access entry to the command palette.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* EVL-102: remove legacy Jira templates and Jira settings CLJS pages

Deletes the four panels (:jira-templates-panel, :create-jira-template-
panel, :edit-jira-template-panel, :settings-jira-panel), their bidi
routes, the admin-surface views under jira_templates/ and
integrations/jira/, the sidebar entries and the jira-templates
promotion. Prunes the now-orphaned admin CRUD events (create/update/
delete/get-by-id, active-template subs, selected-connections
hydration) whose success handlers navigated to the removed bidi route.
Keeps every runtime consumer intact: prompt_form, loading modal,
cmdb_error, submit-template/CMDB events, jira-integration->get and the
:jira-templates->list sub used by webclient and configure-role. The
configure-role "Go to JIRA Integration" callout now links the React
route directly.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* EVL-102: update migration docs for the Jira pages

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* EVL-102: show the feature promotion before the tabbed page

When the org has no Jira integration, the full-page promotion now
replaces the header + tabs entirely (FullBleed), matching how other
features gate (e.g. Live Data Masking) — instead of rendering inside
the Templates tab. Its primary action and the sidebar deep-link open
the page directly on the Configuration tab.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* EVL-102: address review — drop session.verb, persist promotion, redirect /settings/jira

- Remove session.verb from the preset mapping options: the gateway's
  loadDefaultPresetFields never resolves it, so templates saved with it
  failed Jira issue creation at runtime (Qodo finding).
- Persist the promotion gate in localStorage
  (jira-templates-promotion-seen), mirroring the legacy Runbooks Setup
  behavior: after the primary action is clicked once the promotion no
  longer replaces the page.
- Once the promotion is dismissed and the integration is still missing,
  the Templates tab shows an empty state with a Configure Jira
  Integration CTA (review suggestion) instead of the promotion.
- Redirect the absorbed /settings/jira URL to
  /jira-templates?tab=configuration so old bookmarks keep working
  (Qodo finding).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Jul 27, 2026
febbd38
zip
tar.gz

PreviousNext

Navigation Menu

Uh oh!

1.125.1

1.125.0

1.124.0

1.123.0

1.122.2

1.122.1

1.122.0

1.121.3

1.121.2

1.121.1

Uh oh!

Tags: SISL-UIC/hoop