Split MCP and admin settings #25

Merged

pti merged 4 commits from feat/admin-auth-boundary into main 2026-07-23 12:35:08 +02:00

Conversation 0 Commits 4 Files changed 30 +592 -160

pti commented 2026-07-22 17:30:51 +02:00

Owner

Copy link

Split config into top-level mcp and admin boundaries. Require a distinct admin token, deny tokenless admin access, protect Guix policy configs, keep wraptool_info current after reloads, and add the WebAuthn admin design. Validated with go test ./... and go vet ./...

Split config into top-level mcp and admin boundaries. Require a distinct admin token, deny tokenless admin access, protect Guix policy configs, keep wraptool_info current after reloads, and add the WebAuthn admin design. Validated with go test ./... and go vet ./...

pti added 2 commits 2026-07-22 17:30:52 +02:00

feat(config)!: split MCP and admin settings ... 07a43c1d8a

Move MCP transport settings to mcp and operator UI settings to admin.\n\nBREAKING CHANGE: replace server with mcp and server.web with admin.\nAn enabled admin UI now requires a token distinct from the MCP token.

fix(info): report tools added on reload ... 0557307015

The info handler captured CLI tool names at startup, leaving reload-added tools absent from introspection status. Read the registrar's synchronized live tool set for each request.

pti added 1 commit 2026-07-22 17:36:06 +02:00

fix(up): protect container-writable config ... 0fc33a1d5a

Validate the active config outside every container workspace before server startup, and validate token-file relationships immediately after provisioning. Document the breaking configuration migration.

pti added 1 commit 2026-07-22 17:44:01 +02:00

test(webui): deny MCP token rule edits ... ec14a9671d

Cover the direct rule CRUD path alongside capability approval and document handling of the transitional click-through token in server logs.

pti merged commit 4de94c764c into main 2026-07-23 12:35:07 +02:00

pti referenced this pull request from a commit 2026-07-23 12:35:09 +02:00

Merge pull request 'Split MCP and admin settings' (#25) from feat/admin-auth-boundary into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

pti/wraptool!25

No description provided.