Skip to content

v0.5.0 — P4 Remote hardening & delivery

Choose a tag to compare

View all tags
@yuens1002 yuens1002 released this 13 Jun 12:55
v0.5.0
783459e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • Per-request rate limiting on the HTTP transport: fixed-window per-IP, configurable via RATE_LIMIT_RPM env var (default 60 rpm), returns 429 on excess. Exempt: /health. Rate limit applied before auth to guard against unauthenticated floods.
  • Audit logging on the HTTP transport: each /mcp request logs {ts, ip, method, toolName} to stderr in JSON. Captured by Railway deploy logs.
  • send_report tool — run any report (monthly-reconciliation, schedule-c, schedule-e) and email it as markdown via Resend. Requires RESEND_API_KEY + RESEND_FROM env vars; fails fast with a clear message if either is missing. Same parameter contract as generate_report. Completes P4 delivery.
  • docs/DEPLOYING.md — step-by-step Railway + Neon production-branch + Resend setup guide; env var reference table.
Assets 2
Loading