MCP remote endpoint: deploy mcp/ over Streamable HTTP (Cloudflare Worker or k3s) + link from app #57

Closed

EduarD3V wants to merge 0 commits from issue/46-mcp-remote-endpoint-deploy-mcp into bullet-develop

EduarD3V commented

2026-10-15 08:44:01 +02:00

Owner

Branch merged into bullet-develop during integration. Closing — rolling PR #48 carries the work to main.

EduarD3V added 7 commits

2026-10-15 08:44:05 +02:00

fix(mcp): repoint engine imports after the app moved to the repo root (Refs #46 ) b4f9f7fd34

The #26 restructure put the app at src/, leaving mcp/ importing ../../web/src/lib —
every mcp/ test and the build failed on the merge base.

feat(mcp): remote Streamable-HTTP transport, k3s deploy bits, remote design section (Refs #46 ) 8be1756d95

- src/http.ts: Web-standard fetch handler, POST /mcp, bearer token re-checked per
  request, stateless transport (one per request), body cap from AUTOFIRME_MCP_MAX_BYTES
- src/surface.ts: the three tool registrations, shared by the stdio and HTTP entries
- src/server-http.ts: Node adapter; refuses to start without AUTOFIRME_MCP_TOKEN
- test/http.test.ts: credential matrix + real MCP client over a socket, signature
  verified with openssl cms -verify
- mcp/Containerfile, mcp/deploy/k3s.yaml, README + docs/MCP-DESIGN.md remote section
- fix: engine imports pointed at a web/ directory that the #26 restructure removed

feat(ui): MCP endpoint settings — stored preference, copyable URL, token hint (Refs #46 ) a6897453da

Help-menu entry opens a dialog with the deployed server's /mcp address (one field,
one copy button) and its bearer token, persisted in this browser like the theme.
The app never sends either value anywhere; the hint says so in ES and EN.

test: recognize xmlsec1 1.3.x verdict wording in the oracle helper (Refs #46 ) 7a0f6bd885

review: map every non-OK xmlsec verdict to FAIL in the oracle (Refs #46 ) 8d71027933

fix(review): regression test for every xmlsec verdict wording in the oracle (Refs #46 ) ee2bd310da

Reviewer finding #1: 8d710279 fixed the inverted mapping (non-OK verdicts
printed OK under pre-1.3 wording) but shipped no test. Pin the full
verdict matrix — 1.3.x 'Verification status:', 'status:' prefix, bare
OK/FAIL line, no-verdict error — with spawnSync stubbed, so the oracle
stays correct regardless of the xmlsec1 build installed.

Verified red against the pre-fix mapping, green after.

fix(review): stop PBKDF2 UI tests flaking under parallel load (Refs #46 ) 633018bcae

Reviewer finding #2: findByRole('alert') in the wrong-PIN test (and a
CertPicker waitFor observed on rerun) raced testing-library's 1 s async
default — PKCS#12 unlock/sealing runs PBKDF2 with 250k iterations and
exceeds it when vitest parallelizes files. Set asyncUtilTimeout 15 s
once in src/test-setup.ts instead of per-call. Three full suite runs
now pass 148/148; previously failed 2 of 3.

EduarD3V referenced this pull request

2026-10-15 08:44:07 +02:00

MCP remote endpoint: deploy mcp/ over Streamable HTTP (Cloudflare Worker or k3s) + link from app #46

~~EduarD3V referenced this pull request 2026-10-15 08:44:13 +02:00~~

bullet: integrated work for human review #48

EduarD3V closed this pull request

2026-10-15 08:46:40 +02:00