MCP 2025-06-18 server katika / mcp (majibu yasiyo ya kawaida ya HTTP, JSON)
Ujumbe mmoja wa JSON-RPC kwa POST: kuanzisha, ping, zana / orodha, zana / simu; Taarifa na majibu jibu 202; Kupata na DELETE jibu 405. Mwili husomwa baada ya si...
Vifaa / bomba la simu - sera, idhini, mipaka, idempotency, kukimbia kavu, taint, ukaguzi
Kuingia kwa idempotency iliyohifadhiwa inajibiwa kabla ya mpangaji kusoma tena (SP05-T11-order); wito uliokubaliwa katika kukimbia bado majibu ya uwezo na ukagu...
Vifaa wito ukaguzi, 180 siku uhifadhi purge na ukaguzi wa ndani kusoma
Shughuli ya kuingiza ni kuokoa ya kuhifadhi (REQUIRES NEW), imeanza na Imefanywa ndani ya kukamata mwandishi, kwa hivyo hakuna kushindwa kwa ukaguzi kufikia sim...
Kuonekana kwa chombo kwa haki, programu, PHI, dari ya hatari,taint, uwezo na mkataba
Lango la uwezo linahifadhi jibu la router kwa kila mwanachama (SP04 filter 10 nyembamba wagombea na Sera za upatikanaji wa wanachama), zinazuia kushindwa kupata...
Sera ya Mkataba, idhini, lango la ufikiaji na wapokeaji wa nje
Sera ya mkataba inakusanya idhini na mipaka ya SP03 (kushindwa kufungwa wakati Kukataliwa, kukataliwa au bila kizuizi kilichotatuliwa; idhini zinaundwa na kusom...
Simu za Downstream na kikao cha simu, mteja wa ndani, pumzika
Huduma za Kamo zinaitwa kupitia mlango wa BFF mwenyewe kwa huduma (* au Tumia OTK moja, na mwenyeji wa nafasi ya kazi ya org, waigizaji / viongozi wa kukimbia /...
Idempotency, mipaka, kukimbiataint, kiwango cha ukomo na OTK minting juu ya Redis
Vidokezo vya zana, wajenzi wa schema na validator, Usajili
Muundo katika schema chombo ni pembejeo untrusted: zana ext * kubeba yao Mfumo wa seva ya MCP. Moja ya Java haiwezi kukusanya ni kushoto juu (na kukataa kwenye ...
Template ya huduma - Boot 3.3.4, vipengele vya ndani vilivyohifadhiwa, hakuna ratiba
Hakuna sifa za kuishi katika maombi.yml defaults
Mipangilio ya maendeleo ya ndani ilibeba nenosiri la database ya OWNER (${DB PASSWORD: <literal>), na huduma ya apiservice / huduma ya usalama pia siri ya mtand...
Kukataa kutoa STDIO kwa config isiyoorodheshwa, na kukataa kuunganisha SSE /HTTP moja kwenye mtandao wa nguzo
Ulinzi kwa kina pamoja na kujitolea kwa AIService ambayo inafunga haki ya AiMcpController ukaguzi na STDIO kukataa katika chanzo: huduma hii ni moja kwamba kwel...
Uchunguzi wa maisha juu ya /actuator / afya / maisha, sio jumla ya DB- know
Jumla /actuator / afya ni pamoja na kiashiria cha DataSource, hivyo kuanzisha upya database kushindwa liveness juu ya kila pod mara moja na kuanzisha upya nzima...
Kutoa uhusiano wa Hikari sasa kwamba kuunganisha YSQL
Mkuu wa Mkoa asisitiza tena mikutano ya Kwa mfano, *** Kwa hivyo uhusiano wa programu ya bure sio tena kila mmoja ana nyuma ya database. Hifadhi ya pool kiwango...
Kukubali indexes ya picha ya OCI wakati wa kutatua digest iliyojengwa [skip ci]
Picha zinasukumwa kama indexes ya picha ya OCI, kwa hivyo kuuliza Usajili wa moja Picha inaonyesha tu jibu la 404, digest ilirudi tupu na hundi kushindwa kuwa w...
Kuanza wakati wa kujenga sawa majani majani pods juu ya digest zamani [skip ci]
Hatua ya rollout ilijaribu kuchunguza upya kwa kulinganisha Maoni ya picha kabla na baada ya kuweka picha. “Ni wazi kuwa Tayari ametumia k8s/deployment.yaml (pi...
Jaribu kuweka kwa digest, si kwa tag
Ahadi ya awali inaacha "kuweka picha" kuwa kimya hakuna-op. Hii inathibitisha kuwa matokeo: baada ya rollout, tag ni kutatuliwa kwa digest katika Usajili na Vio...
Ujenzi wa mradi huo haukuleta chochote na uliripoti mafanikio
Picha ni tagged na SHA ahadi, hivyo kujenga upya ahadi hiyo kuzalisha Mfano wa picha sawa. "Kuweka picha" kisha hakuna mabadiliko, Kufukuzwa ni kamwe kuguswa, '...
Say why this one cannot be scaled yet
McpServerManager runs each MCP server as a child process of THIS pod and tracks them in in-memory maps; McpHealthMonitor writes what it finds there into a SHARE...
Let a rollout finish what the old pod was doing
Deploys replaced the only pod of each service with nothing to catch the requests in flight. Three settings, applied across the fleet: - preStop sleeps 10s befo...
Pin kamo-shared-library 1.6.0
The library moved to 1.6.0 while every consumer stayed on 1.5.0. Consumer CI builds the library from a fresh clone into a cold ~/.m2 and ci-settings.xml mirrors...
Refuse MCP tool execution for a tenant that handles PHI
executeTool forwards operator-supplied arguments to an operator-typed URL and can spawn a stdio process, with no allowlist, no SSRF guard and no destination aud...
Size the pod above its own JVM heap ceiling [skip ci]
The image starts the JVM with -XX:MaxRAMPercentage=70 -XX:+AlwaysPreTouch, so the heap alone may take 70% of the container limit and pre-touch keeps every commi...
Declare the object-storage secret the ConfigMap no longer carries
The MinIO key was moved out of the ConfigMap into the minio-app-credentials secret, but the envFrom that supplies it was only ever applied to the live deploymen...
Stop shipping a shared credential as a config default
The platform's shared password was baked in as the fallback for DB_PASSWORD and MINIO_ROOT_PASSWORD, so it lived in this repo and in the built image as well as ...
Rebuild against shared-library @Lob LONGVARCHAR fix
Hibernate's PostgreSQL dialect read @Lob String columns as OIDs via getLong(). Affects notes, contacts, calendar, OAuth tokens, IMAP passwords, email campaign b...
Point at YugabyteDB and use PostgreSQLDialect
CockroachDB has been replaced by YugabyteDB. Connection strings move from cockroachdb-public:26257 to yb-tserver-service:5433, and the Hibernate dialect from **...
Retry the shared-library build, which the LAN uplink keeps corrupting
Three builds died today on "Tag mismatch" pulling a jar — and the mirror added an hour ago did not help, because kbservice, mcpgatewayservice and ragservice hit...
Mirror Maven Central through the Google GCS copy
Every Docker stage starts from a cold ~/.m2 and refetches the whole dependency tree, so Central sees the full weight of every concurrent service build. It answe...
Harden the kubectl download against flaky egress [skip ci]
dl.k8s.io over the runner's egress intermittently drops mid-transfer: curl: (56) OpenSSL SSL_read: decryption failed or bad record mac which fails the deploy ...
Constant-time internal-auth secret compare (timing oracle)
Replace String.equals with MessageDigest.isEqual so response latency cannot leak the X-Internal-Auth shared secret byte-by-byte. Fleet-wide sweep of the copy-pa...
Use cluster MinIO service DNS; drop deprecated WireGuard/CGNAT IPs and retired k2m1/k0m1
Migrate to k1m1 (clone+registry+kubeconfig from k1m1, drop k2m1, simple kubectl install)
Bump for kamo-shared-library 1.5.0 snapshot refresh (M2 programs catalog)
Scope concurrency to build jobs, not Kubernetes deploys
Workflow-level concurrency serialized the whole pipeline (including kubectl rollouts). Move the group to the build job only so deploy jobs from different runs c...
Rebuild for kamo-shared-library update (remove OrganizationType, add isTopLevel)
Rebuild for kamo-shared-library update (remove OrganizationType, add isTopLevel)
Rebuild for kamo-shared-library update (CREATE_CHILD_ORG right + apply-to flags)
Pulls the new RoleRightType.CREATE_CHILD_ORG (id 131), the three apply-to flags on ChildOrgSecurityModel, the two 13-arg service overloads, and the AppliedModel...
Rebuild for kamo-shared-library update (appConfig upsert-only fix)
Pulls the hardened **************** that no longer deletes appConfig rows whose service types are absent from the caller's payload — prevents silent data loss w...
Rebuild for kamo-shared-library update (effective-feature resolver)
Picks up the new AppliedModelEnforcementService methods (computeAvailabilitiesMap, isAppEffectivelyEnabled, getEffectivelyEnabledAppTypes, computeEffectiveFeatu...
Rebuild for kamo-shared-library update (applied-model enforcement + appConfigs + isPrivate)
Triggers a rebuild so this service pulls the updated kamo-shared-library containing AppliedModelEnforcementService, ChildOrgSecurityModelAppConfig entity, Servi...
Rebuild for kamo-shared-library update (runtime force rules + DEFAULT fallback in MemberRightsAppliedService)
Triggers a rebuild so this service picks up the updated **************** that applies template force rules and DEFAULT-template fallbacks on top of the existing...
Rebuild for kamo-shared-library update (master model, default role templates, force-rule resolver)
Triggers a rebuild so this service pulls the new kamo-shared-library revision containing Organization.branchTypeID, Organization.masterModelID, ****************...
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.