5 Commits

Author	SHA1	Message	Date
overseer	ce1c0a175f	docs: admin OAuth scope caps in SKILL.md	2026-06-25 13:13:31 +00:00
overseer	289c6b9300	refactor: public OAuth MCP at /mcp (readonly path is alias) ... - OAuth read+write on /mcp; API key on /mcp still full internal tools (LAN) - /readonly/mcp and /oauth/mcp remain OAuth aliases - OAuth metadata and connector_url point to /mcp - README + Traefik template: route Host without blocking /mcp	2026-06-25 12:45:59 +00:00
overseer	12b60ee8c7	feat: unified OAuth MCP connector (read+write on /readonly/mcp) ... Scope-gated tools on one Streamable HTTP URL; /oauth/mcp alias. Reconnect Claude once with ctxd.read ctxd.write.	2026-06-25 12:44:01 +00:00
overseer	e3567f649f	fix: OAuth write MCP via SSE; require container recreate after build ... - Route public write at GET /write/sse and POST /write/messages (ctxd.write) - Always require write token on /write/messages (was optional) - Remove debug tracing; document SSE write surface in SKILL.md - Add scripts/test_write_mcp.py for local OAuth write smoke test	2026-06-25 12:38:50 +00:00
overseer	fc1a2f5103	feat: PostgreSQL migration, OAuth write MCP, Streamable HTTP, env-driven config, admin UI, landing page ... - Migrate database from SQLite to PostgreSQL 16 (dual-backend with SQLite fallback) - Add Streamable HTTP MCP transport (replaces SSE): /readonly/mcp, /write/mcp, /mcp - Add OAuth ctxd.write scope and public write MCP surface - Add ctxd.write token validation (write-scoped tokens only on /write/mcp) - Add env-driven configuration (.env file with env var precedence over ctxd.yaml) - Add PostgreSQL to docker-compose.yml with healthcheck - Add psycopg dependency, migration script (SQLite → PostgreSQL) - Add admin UI: projects tab with typed-confirm delete, user management (list/manage subtabs) - Add OAuth client management: create, list, revoke (UI, CLI, API) - Add user active/inactive lifecycle (PATCH/DELETE APIs) - Add public landing page with themed login form (cookie-based session) - Add get_client_guide MCP tool (locked LLM-CLIENT.MD in ctxd-docs project) - Add DELETE /projects/<id> endpoint with cascading deletes - Add project_delete to db.py with FK ON DELETE SET NULL for audit_log - Add cookie-based session auth (ctxd_session cookie on login) - Add landing.html (public host) vs ui.html (internal dashboard) - Add schema_sqlite.sql for SQLite fallback - Add auth_password.py (PBKDF2-SHA256 password hashing) - Add .env.example template with all documented env vars - Add README.md with full setup, config, API, CLI, and troubleshooting docs - Add SKILL.md (canonical LLM client guide, lives in project root) - Update Traefik template: route everything except /mcp - Update OAuth discovery: advertise ctxd.write scope, /readonly/mcp resource - Update Hermes MCP config: /mcp endpoint with Bearer header - Remove DB-level audit_log triggers (conflict with FK ON DELETE SET NULL) - Remove SSE transport code (replaced by Streamable HTTP) - Untrack __pycache__ and data/ctxd.db from git	2026-06-24 22:50:54 +00:00