4 Commits

Include renames

Author	SHA1	Message	Date
mathiasandClaude Opus 5.5	4c7fcb6bdc	test(ingestion): /mcp's JWT validator and resource_metadata; narrow comments ... PR #183 review (comment 15474): - TestBuildMuxAnswers503ToAJWTOnMCPWhileTheIssuerIsUnresolved: building /mcp's middleware with a nil validator turns it red. - TestBuildMuxMCP401CarriesResourceMetadataInWWWAuthenticate: building it with resourceMetadataURL "" turns it red. - main.go, routes.go and the testMux comment now say exactly what is untested: main's restAuth fields and public map passed to buildMux, and ListenAndServe (hyperguild#182). Stale public-route list in the TestBuildMuxDoesNotWrapPublicRoutes comment corrected. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-05 16:41:33 +02:00
mathiasandClaude Opus 5.5	4a1abafd8f	fix(ingestion): build /mcp's bearer and the metrics wrap inside buildMux ... /mcp's bearer was built in main.go and the buildMux tests used stubs, so dropping it would have kept CI green. buildMux now takes the MCP handler and wraps it with the same BearerMiddleware and credential as the REST API. "/mcp" and "GET /metrics" left the public allowlist, so passing either as a public route is refused. buildMux also registers GET /metrics and returns the metrics-wrapped handler, so main passes its result to ListenAndServe unchanged. Flip-tested: registering /mcp unwrapped turns TestBuildMuxRefusesMCPWithoutAValidToken red, and dropping the metrics wrap turns the four metrics tests red. Comments now claim only what is tested. The ListenAndServe line and the symlink tripwire wiring in main (#154 comment) are still untested and tracked in #182. Closes #154 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-05 16:41:33 +02:00
mathias	c0be5c473c	fix(ingestion): bump mcp-chassis to v0.7.1; log auth rejections; label refused REST requests by route (#181) ... Closes #155 Reviewed by pr-gatekeeper: #181 (comment) (block, round 1) and re-review at e05a13a (approve). Co-authored-by: Mathias <mthbqv@gmail.com>	2026-10-05 14:40:20 +00:00
mathias	cfe3f24e25	fix(ingestion): authenticate the REST API; confine ingest paths to brain/raw/ (#149) (#152) ... Co-authored-by: Mathias <mthbqv@gmail.com>	2026-10-03 14:38:07 +00:00