2 Commits

Author	SHA1	Message	Date
Tarik Moussa	b4fbd7930e	feat(config): wrap credentials in SecretStr (audit S-4) ... database_url, migration_database_url, mcp_auth_token and the mathpix app id/key are now pydantic SecretStr, so they render as '**********' in any repr/log/traceback instead of leaking the plaintext credential. Consumers (db.get_conn, cli.migrate, mcp._require_http_token, mathpix.extract_formulas) call .get_secret_value() at the point of use. Tests updated to the SecretStr type. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-15 21:32:13 +02:00
Tarik Moussa	b803811701	feat(mcp): FastMCP server exposing read-only KB tools (stdio) ... Implements F-14: thin FastMCP wrapper over existing codex domain modules. Seven read-only tools: search, ask, wiki_read, wiki_list, discover_leads, provenance_verify, synthesis_browse. All optional-feature tools degrade gracefully to {"error": "feature not available"} instead of crashing. Adds mcp[cli]>=1.0 dependency and codex-mcp console_script entry-point. 28 new tests across test_server, test_search, test_readonly, test_graceful, test_http_auth — all green; 0 regressions in existing 172 tests. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-14 08:55:49 +02:00