3 Commits

Author	SHA1	Message	Date
Tarik Moussa	77f9d79da0	fix(mcp): real cited bibkeys in wiki_read + constant-time token compare ... - C-3 (MED): wiki_read returned 'sources' = [concept_slug] (a placeholder), not the cited sources. Now parses the page's inline [BibKey #loc] citations and returns the actual set of cited bibkeys. - S-2 (LOW): _TokenAuth compared the Bearer header with != (length/equality timing side-channel). Use secrets.compare_digest for constant-time comparison. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-15 16:34:28 +02:00
Tarik Moussa	d29dcf2fb5	fix(mcp): disable DNS rebinding protection for LAN HTTP transport ... FastMCP defaults to DNS rebinding protection (allowed_hosts=localhost only), which rejects requests from the Mac (192.168.178.82) to the Jetson (192.168.178.103:8765). Security is already provided by Bearer token auth in _TokenAuth middleware and UFW restricting port 8765 to trusted LAN IPs, making host-header validation redundant in this deployment context. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-14 14:55:29 +02:00
Tarik Moussa	b803811701	feat(mcp): FastMCP server exposing read-only KB tools (stdio) ... Implements F-14: thin FastMCP wrapper over existing codex domain modules. Seven read-only tools: search, ask, wiki_read, wiki_list, discover_leads, provenance_verify, synthesis_browse. All optional-feature tools degrade gracefully to {"error": "feature not available"} instead of crashing. Adds mcp[cli]>=1.0 dependency and codex-mcp console_script entry-point. 28 new tests across test_server, test_search, test_readonly, test_graceful, test_http_auth — all green; 0 regressions in existing 172 tests. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-14 08:55:49 +02:00