mathias
0 Followers · 0 Following
  • Joined on 2026-03-27
Repositories
11
 Projects Packages Public Activity Starred Repositories
mathias opened issue mathias/mcp-chassis#5 2026-09-14 18:11:08 +00:00
cad and sa-token-poc still pin v0.5.0 and inherit the boot-race that cost three outages
mathias closed issue mathias/mcp-chassis#3 2026-09-14 18:10:45 +00:00
chore: rename Go module path gitea.d-ma.be → git.d-ma.be (do first — downstream dependency)
mathias commented on issue mathias/mcp-chassis#3 2026-09-14 18:10:40 +00:00
chore: rename Go module path gitea.d-ma.be → git.d-ma.be (do first — downstream dependency)

Already done — go.mod line 1 reads module git.d-ma.be/mathias/mcp-chassis, and every consumer (cad, gitea-mcp, sa-token-poc) requires that path. Verified against HEAD 3257364.

Fixed…

mathias commented on issue mathias/gitea-mcp#57 2026-09-14 18:10:27 +00:00
JWT validator init is one-shot at startup — IdP unavailable during co-boot degrades auth permanently and silently

Fixed and live. v0.14.0, commits aaaa4b4 + 09bde6d.

Filed 2026-07-17. It recurred 2026-09-07 (mcp-chassis#4) and again 2026-09-14, that time running six days before anyone noticed —…

mathias commented on issue mathias/mcp-chassis#4 2026-09-14 18:09:59 +00:00
A JWT validator that fails to construct is indistinguishable from "no JWT auth" — one boot-time 502 disables OAuth permanently

Fixed and deployed. mcp-chassis v0.6.0, commit 3257364.

It recurred on 2026-09-14 — a third time, running six days before anyone noticed. That one was found by chance while gathering…

mathias pushed tag v0.14.0 to mathias/gitea-mcp 2026-09-14 18:06:20 +00:00
mathias pushed to main at mathias/gitea-mcp 2026-09-14 18:06:19 +00:00
09bde6df8a fix(health): /healthz answers now, and /readyz takes a degraded pod out
aaaa4b4d64 fix(lint): reflect.Ptr -> reflect.Pointer, unblocking task check
Compare 2 commits »
mathias closed issue mathias/gitea-mcp#57 2026-09-14 18:06:19 +00:00
JWT validator init is one-shot at startup — IdP unavailable during co-boot degrades auth permanently and silently
mathias pushed to main at mathias/mcp-chassis 2026-09-14 18:04:02 +00:00
3257364f23 fix(auth): a validator whose issuer is down at boot is built anyway
mathias closed issue mathias/mcp-chassis#4 2026-09-14 18:04:02 +00:00
A JWT validator that fails to construct is indistinguishable from "no JWT auth" — one boot-time 502 disables OAuth permanently
mathias pushed tag v0.6.0 to mathias/mcp-chassis 2026-09-14 18:04:02 +00:00
mathias commented on issue mathias/skills#46 2026-09-11 09:12:06 +00:00
Every release leaves main's HEAD with zero CI runs, so CIHeadUncovered fires forever and can never clear

Reopened. 6838baa implements option 2 and my commit message said "Closes #46", which auto-closed it. **That was wrong — option 2 satisfies one of the three "Done when" criteria, not all…

mathias reopened issue mathias/skills#46 2026-09-11 09:11:48 +00:00
Every release leaves main's HEAD with zero CI runs, so CIHeadUncovered fires forever and can never clear
mathias pushed to main at mathias/skills 2026-09-11 09:11:20 +00:00
6838baa071 fix(ci): gate the release-bump commit — nothing has ever tested it
mathias closed issue mathias/skills#46 2026-09-11 09:11:20 +00:00
Every release leaves main's HEAD with zero CI runs, so CIHeadUncovered fires forever and can never clear
mathias opened issue mathias/skills#46 2026-09-11 08:37:40 +00:00
Every release leaves main's HEAD with zero CI runs, so CIHeadUncovered fires forever and can never clear
mathias opened issue mathias/skills#45 2026-09-08 19:45:07 +00:00
task doctor: assert build-Go >= GOROOT for every Go analysis tool the gate invokes
mathias pushed to main at mathias/skills 2026-09-08 19:34:44 +00:00
1328dcd8f3 feat(doctor): report golangci-lint built with a Go older than GOROOT
mathias commented on issue mathias/mcp-chassis#1 2026-09-08 09:28:36 +00:00
auth: JWKS cache refresh interval is hardcoded at 1h

Same constructor, and the API-shape decision here is the same one

This issue and #4 both change NewJWTValidator / NewMultiJWTValidator in auth/jwt.go, and both are about the validator's…

mathias opened issue mathias/mcp-chassis#4 2026-09-08 09:03:24 +00:00
A JWT validator that fails to construct is indistinguishable from "no JWT auth" — one boot-time 502 disables OAuth permanently