2 Commits

Author	SHA1	Message	Date
Tarik Moussa	d29dcf2fb5	fix(mcp): disable DNS rebinding protection for LAN HTTP transport ... FastMCP defaults to DNS rebinding protection (allowed_hosts=localhost only), which rejects requests from the Mac (192.168.178.82) to the Jetson (192.168.178.103:8765). Security is already provided by Bearer token auth in _TokenAuth middleware and UFW restricting port 8765 to trusted LAN IPs, making host-header validation redundant in this deployment context. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-14 14:55:29 +02:00
Tarik Moussa	b803811701	feat(mcp): FastMCP server exposing read-only KB tools (stdio) ... Implements F-14: thin FastMCP wrapper over existing codex domain modules. Seven read-only tools: search, ask, wiki_read, wiki_list, discover_leads, provenance_verify, synthesis_browse. All optional-feature tools degrade gracefully to {"error": "feature not available"} instead of crashing. Adds mcp[cli]>=1.0 dependency and codex-mcp console_script entry-point. 28 new tests across test_server, test_search, test_readonly, test_graceful, test_http_auth — all green; 0 regressions in existing 172 tests. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-14 08:55:49 +02:00