mathias
0 Followers · 0 Following
  • Joined on 2026-03-27
Repositories
11
 Projects Packages Public Activity Starred Repositories
mathias opened issue mathias/skills#49 2026-09-16 10:37:35 +00:00
Add a committed loop-autonomy contract + fingerprint dedupe to the CAD loop skills
mathias opened issue mathias/skills#48 2026-09-15 11:01:32 +00:00
Ship the MCP-reminder counter-hook from the plugin — it exists on koala only, and is mitigation not enforcement
mathias opened issue mathias/skills#47 2026-09-15 09:26:12 +00:00
Considered and declined: renaming the plugin MCP servers to brain-local / gitea-local / infra-local
mathias pushed tag v0.17.0 to mathias/hyperguild 2026-09-15 06:10:02 +00:00
mathias pushed to main at mathias/hyperguild 2026-09-15 06:10:02 +00:00
25b79f057e feat(claudewatcher): exclude whole project directories from ingestion
mathias closed issue mathias/mcp-chassis#5 2026-09-14 20:40:17 +00:00
cad and sa-token-poc still pin v0.5.0 and inherit the boot-race that cost three outages
mathias commented on issue mathias/mcp-chassis#5 2026-09-14 20:40:13 +00:00
cad and sa-token-poc still pin v0.5.0 and inherit the boot-race that cost three outages

Closed. cad bumped and deployed; sa-token-poc retired rather than bumped.

cad — done

v0.11.0 on mcp-chassis v0.7.1, /readyz wired to validator.Ready, infra v1.37.0 repoints…

mathias commented on issue mathias/mcp-chassis#5 2026-09-14 20:21:06 +00:00
cad and sa-token-poc still pin v0.5.0 and inherit the boot-race that cost three outages

cad done and deployed. sa-token-poc is blocked on something this issue did not anticipate.

cad — v0.11.0, live

  • go.mod → mcp-chassis v0.7.1
  • /readyz added, wired to…
mathias commented on issue mathias/mcp-chassis#1 2026-09-14 19:00:02 +00:00
auth: JWKS cache refresh interval is hardcoded at 1h

Done in v0.7.0 — WithRefreshInterval(d), defaulting to 1h.

Option 1, as recommended here

Variadic option — NewJWTValidator(ctx, issuer, aud, opts ...Option) with `WithRefreshI…

mathias commented on issue mathias/gitea-mcp#60 2026-09-14 18:59:46 +00:00
Auth path is silent on success — can't tell PAT pass-through from JWT fallback in logs

Done. v0.15.0 here, mcp-chassis v0.7.0/v0.7.1 underneath.

All three paths now announce themselves on success:

INFO mcp auth accepted auth_path=passthrough caller=alice    …
mathias commented on issue mathias/gitea-mcp#58 2026-09-14 18:59:26 +00:00
Misleading auth log: static_token_mismatch reported for token_type: "jwt" when the JWT validator is unavailable

Fixed in mcp-chassis v0.7.0, consumed here in v0.15.0.

The fix is the one this issue asked for

Reserve static_token_mismatch for token_type: "static". Never let a JWT path…

mathias pushed tag v0.15.0 to mathias/gitea-mcp 2026-09-14 18:59:06 +00:00
mathias pushed to main at mathias/gitea-mcp 2026-09-14 18:59:06 +00:00
e1e9a2e30e feat(auth): every accepted request names the path that granted it
mathias closed issue mathias/gitea-mcp#58 2026-09-14 18:59:06 +00:00
Misleading auth log: static_token_mismatch reported for token_type: "jwt" when the JWT validator is unavailable
mathias closed issue mathias/gitea-mcp#60 2026-09-14 18:59:06 +00:00
Auth path is silent on success — can't tell PAT pass-through from JWT fallback in logs
mathias pushed to main at mathias/mcp-chassis 2026-09-14 18:58:35 +00:00
c0b8b26d03 feat(auth): export Fingerprint for servers with their own accepted path
mathias pushed tag v0.7.1 to mathias/mcp-chassis 2026-09-14 18:58:35 +00:00
mathias pushed to main at mathias/mcp-chassis 2026-09-14 18:57:54 +00:00
29e461e108 feat(auth): name the path that granted access, and stop blaming the caller
mathias pushed tag v0.7.0 to mathias/mcp-chassis 2026-09-14 18:57:54 +00:00
mathias closed issue mathias/mcp-chassis#1 2026-09-14 18:57:54 +00:00
auth: JWKS cache refresh interval is hardcoded at 1h