feat: L0 transport — MCP caller, server, error taxonomy, auth (Track 3)#18

Merged

MichielDean merged 25 commits into

mainfrom

track3/transport

May 19, 2026

Commits on May 18, 2026

feat(transport): Phase 1+2 — AdcpHttpClient and error taxonomy

MichielBugherJelli
and
Copilot
committed
feat(transport): Phase 3 — AgentConfig, auth types, and token resolver

MichielBugherJelli
and
Copilot
committed
feat(transport): Phase 4 — MCP caller, connection manager, version envelope

MichielBugherJelli
and
Copilot
committed
feat(transport): Phase 5 — AdcpClient with generic callTool dispatch

MichielBugherJelli
and
Copilot
committed
feat(server): add MCP server-side transport (AdcpPlatform SPI + builder)

MichielBugherJelli
and
Copilot
committed
test(testing): add integration tests for server builder and client

MichielBugherJelli
and
Copilot
committed

Commits on May 19, 2026

fix(transport): audit fixes for security, thread safety, and correctness

MichielBugherJelli
and
Copilot
committed
fix(security): comprehensive security hardening across transport layer

MichielBugherJelli
and
Copilot
committed
fix(transport): comprehensive audit fixes for correctness and API design

MichielBugherJelli
and
Copilot
committed
fix(transport): final audit fixes — locale, CRLF, resource leak, cause chain

MichielBugherJelli
and
Copilot
committed
fix(security): second security audit — SSRF bypass, DoS cap, info leak

MichielBugherJelli
and
Copilot
committed
fix(transport): third code audit — MCP spec compliance, correctness, API design

MichielBugherJelli
and
Copilot
committed
fix(security): fourth adversarial audit — cache isolation, stream leak, DoS cap

MichielBugherJelli
and
Copilot
committed
fix(transport): fifth adversarial audit — lock contention, OOM guard, retry logic

MichielBugherJelli
and
Copilot
committed
fix(transport): prevent unbounded keyLocks growth on token rotation

MichielBugherJelli
and
Copilot
committed
fix(transport): sixth adversarial audit — lock race, close race, error leak

MichielBugherJelli
and
Copilot
committed
fix(transport): seventh adversarial audit — striped semaphores, request timeout, error sanitization

MichielBugherJelli
and
Copilot
committed
fix: address bokelley PR review findings and fix CI lockfiles

MichielBugherJelli
and
Copilot
committed
fix: guard MCP integration test behind ADCP_MCP_SERVER_URL

MichielBugherJelli
and
Copilot
committed
docs: add cosign as a build prerequisite

MichielBugherJelli
and
Copilot
committed
fix: address remaining bokelley review findings (M4, N4, N5, N6)

MichielBugherJelli
and
Copilot
committed
test(server): add handleToolCall unit tests for B6 completeness

MichielBugherJelli
and
Copilot
committed
fix: add null guard on AdcpClient.callTool args parameter

MichielBugherJelli
and
Copilot
committed
feat(adcp): add per-instance adcpVersion string API with cross-major validation (#19)

authored
fix(transport): address B1 DNS pinning regression from bokelley review

MichielBugherJelli
and
Copilot
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: L0 transport — MCP caller, server, error taxonomy, auth (Track 3)#18

feat: L0 transport — MCP caller, server, error taxonomy, auth (Track 3)#18
MichielDean merged 25 commits into
mainfrom
track3/transport

Commits on May 18, 2026

feat(transport): Phase 1+2 — AdcpHttpClient and error taxonomy

feat(transport): Phase 3 — AgentConfig, auth types, and token resolver

feat(transport): Phase 4 — MCP caller, connection manager, version envelope

feat(transport): Phase 5 — AdcpClient with generic callTool dispatch

feat(server): add MCP server-side transport (AdcpPlatform SPI + builder)

test(testing): add integration tests for server builder and client

Commits on May 19, 2026

fix(transport): audit fixes for security, thread safety, and correctness

fix(security): comprehensive security hardening across transport layer

fix(transport): comprehensive audit fixes for correctness and API design

fix(transport): final audit fixes — locale, CRLF, resource leak, cause chain

fix(security): second security audit — SSRF bypass, DoS cap, info leak

fix(transport): third code audit — MCP spec compliance, correctness, API design

fix(security): fourth adversarial audit — cache isolation, stream leak, DoS cap

fix(transport): fifth adversarial audit — lock contention, OOM guard, retry logic

fix(transport): prevent unbounded keyLocks growth on token rotation

fix(transport): sixth adversarial audit — lock race, close race, error leak

fix(transport): seventh adversarial audit — striped semaphores, request timeout, error sanitization

fix: address bokelley PR review findings and fix CI lockfiles

fix: guard MCP integration test behind ADCP_MCP_SERVER_URL

docs: add cosign as a build prerequisite

fix: address remaining bokelley review findings (M4, N4, N5, N6)

test(server): add handleToolCall unit tests for B6 completeness

fix: add null guard on AdcpClient.callTool args parameter

feat(adcp): add per-instance adcpVersion string API with cross-major validation (#19)

fix(transport): address B1 DNS pinning regression from bokelley review