gensokyo-dev ba73ccafd3 fix(mcp): classify HTTP binds from native address facts ...

Classify loopback from the actual bound IP only, then add the configured name to the Host/Origin allowlist. Remove DNS-name classification and the default/fallback that substituted configuration for binding evidence.

Validate the TCP address once before URL/allowlist consumers, preserve IPv4 and IPv6 alias behavior, and add negative controls for localhost names bound to non-loopback IPv4 and IPv6 addresses.

2026-10-19 14:05:23 +00:00

..

nodeHttpBridge.test.ts

fix(mcp): cancel a streamed body once, including for a reply that closed before the route resolved

2026-10-18 18:52:38 -07:00

nodeHttpBridge.ts

fix(mcp): cancel response sources across all write failures

2026-10-19 13:39:40 +00:00

NodeHttpRequestOwner.ts

fix(mcp): retain HTTP response cleanup and reject pipelining

2026-10-19 13:13:13 +00:00

serveStreamableHttp.test.ts

fix(mcp): classify HTTP binds from native address facts

2026-10-19 14:05:23 +00:00

serveStreamableHttp.ts

fix(mcp): classify HTTP binds from native address facts

2026-10-19 14:05:23 +00:00

streamableHttpListenError.ts

feat(mcp): serve the MCP server over streamable HTTP

2026-10-17 21:05:10 -07:00