2 Commits

Include renames

Author	SHA1	Message	Date
mathiasandClaude Opus 5.5	4a1abafd8f	fix(ingestion): build /mcp's bearer and the metrics wrap inside buildMux ... /mcp's bearer was built in main.go and the buildMux tests used stubs, so dropping it would have kept CI green. buildMux now takes the MCP handler and wraps it with the same BearerMiddleware and credential as the REST API. "/mcp" and "GET /metrics" left the public allowlist, so passing either as a public route is refused. buildMux also registers GET /metrics and returns the metrics-wrapped handler, so main passes its result to ListenAndServe unchanged. Flip-tested: registering /mcp unwrapped turns TestBuildMuxRefusesMCPWithoutAValidToken red, and dropping the metrics wrap turns the four metrics tests red. Comments now claim only what is tested. The ListenAndServe line and the symlink tripwire wiring in main (#154 comment) are still untested and tracked in #182. Closes #154 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-05 16:41:33 +02:00
mathias	c0be5c473c	fix(ingestion): bump mcp-chassis to v0.7.1; log auth rejections; label refused REST requests by route (#181) ... Closes #155 Reviewed by pr-gatekeeper: #181 (comment) (block, round 1) and re-review at e05a13a (approve). Co-authored-by: Mathias <mthbqv@gmail.com>	2026-10-05 14:40:20 +00:00