Context
Memo 152 / PRD-022, work item E-07 (F17=A). The private call leaf (PRD-021) loaded through core Pipeline.load without passing library resolution bases, so a private schema's requiredLibraries did not resolve through the Memo-150 chain the normal call path uses.
Change
PrivateCommand.call now computes the ordered resolution chain CLI-side — [ allowedLibrariesBase, cliBase, schemaDir ] (same chain as HandlerResolver) — and passes it to Pipeline.load as resolveBases[]. core stays env-free (it receives the paths, reads no config). An unresolvable requiredLibrary fails loud with LIB-001 under strict:true; the silent Pipeline "default allowlist" fallback was already removed on the core side (D-06). No-Silent-Defaults.
Tests
Two fixtures + suite: a resolvable allowlisted library (zlib) is injected into the handler and the tool runs; an unresolvable library fails loud with LIB-001; source assertion that the resolveBases chain is computed CLI-side.
Also bumps the flowmcp-core pin to the hardened SecurityScanner commit (E-06).
Context
Memo 152 / PRD-022, work item E-07 (F17=A). The
private callleaf (PRD-021) loaded through corePipeline.loadwithout passing library resolution bases, so a private schema'srequiredLibrariesdid not resolve through the Memo-150 chain the normal call path uses.Change
PrivateCommand.callnow computes the ordered resolution chain CLI-side —[ allowedLibrariesBase, cliBase, schemaDir ](same chain asHandlerResolver) — and passes it toPipeline.loadasresolveBases[]. core stays env-free (it receives the paths, reads no config). An unresolvablerequiredLibraryfails loud withLIB-001understrict:true; the silent Pipeline "default allowlist" fallback was already removed on the core side (D-06). No-Silent-Defaults.Tests
Two fixtures + suite: a resolvable allowlisted library (
zlib) is injected into the handler and the tool runs; an unresolvable library fails loud withLIB-001; source assertion that the resolveBases chain is computed CLI-side.Also bumps the flowmcp-core pin to the hardened SecurityScanner commit (E-06).