chore: isolate public repo from internal MCP connectors (HOT-15476) - #1735
Open
marcin-kordas-hoc wants to merge 1 commit into
Open
Conversation
Handsoncode's 2026-08-03 AI usage policy update (HOT-15476) requires that AI sessions never mix Poufne/Ograniczone company data (ClickUp, Gmail, Slack, Fireflies, Google Drive/Calendar) with anything that can reach a public destination. This repo's origin/upstream both point straight at the public github.com/handsontable/hyperformula with no private staging, so the isolation has to be enforced at the tool-permission level instead. - .claude/settings.json: deny the account-level claude.ai MCP connector tool patterns (ClickUp/Gmail/Slack/Fireflies/Google Drive/Calendar) so a Claude Code session working in this directory cannot reach them even though they may be connected at the account level. Verified live: the connectors dropped out of the running session the moment this file was written. - .gitignore: stop tracking .infisical.json (Infisical workspaceId — infra inventory, personal-private-repos-only per Handsoncode's classification matrix) and the personal/local parts of .claude/ (settings.local.json, worktrees/, scheduled_tasks.lock), while keeping settings.json trackable since it's the repo-wide guardrail.
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Context
Handsoncode's 2026-08-03 AI usage policy update (HOT-15476, due 2026-08-14) extends the Information Security Policy with rules for AI tool usage: a 4-tier data classification (Public/Internal/Confidential/Restricted) and a requirement that AI sessions never mix Confidential/Restricted company data with anything that can reach a public destination.
This repo's
origin/upstreamboth point directly at the publicgithub.com/handsontable/hyperformula, and this Claude Code account also carries claude.ai cloud MCP connectors (ClickUp, Gmail, Slack, Fireflies, Google Drive, Google Calendar) that attach to any project directory regardless of which repo is checked out. There was no technical control preventing a session in this repo from also reaching those connectors.Changes
.claude/settings.json(new, committed so it applies to anyone working in this repo): denies the MCP tool patterns for those six connectors, so a Claude Code session here cannot reach them even if connected at the account level. Verified live — writing this file immediately dropped those connectors' tools from the active session..gitignore:.infisical.json(contains an InfisicalworkspaceId— infrastructure inventory, which Handsoncode's data-classification matrix keeps out of shared/public repos).claude/(settings.local.json,worktrees/,scheduled_tasks.lock) while keepingsettings.jsonitself trackable, since that's the guardrail this PR adds.No behavior change to HyperFormula itself — this is tooling/process hygiene only.
Note
Low Risk
Tooling and ignore-list only; HyperFormula behavior is unchanged and the changes reduce accidental exposure of internal MCP or secrets in a public repo.
Overview
Policy guardrails for AI work in the public HyperFormula repo — no library/runtime changes.
A new
.claude/settings.jsonis committed so anyone opening this repo in Claude Code gets a shared permissions.deny list for six claude.ai MCP integrations (ClickUp, Gmail, Google Calendar/Drive, Slack, Fireflies). Sessions here cannot invoke those tools even when the account still has them connected elsewhere..gitignorenow excludes.infisical.json(workspace linkage / infra inventory) and personal Claude paths (settings.local.json,worktrees/,scheduled_tasks.lock) while leavingsettings.jsontrackable as the team-wide control.Reviewed by Cursor Bugbot for commit d07ea18. Bugbot is set up for automated code reviews on this repo. Configure here.