Skip to content

Fix verification report findings#101

Merged
mkreyman merged 1 commit intomasterfrom
fix/verification-report-fixes
Apr 13, 2026
Merged

Fix verification report findings#101
mkreyman merged 1 commit intomasterfrom
fix/verification-report-fixes

Conversation

@mkreyman
Copy link
Copy Markdown
Owner

Summary

Fixes issues found by independent verification agent:

  • H2: Discovery endpoint showed npm_version: "0.0.0" — Dockerfile now copies mcp-server/package.json so compile-time read works
  • M1: /swagger returned 404 — added redirect to /swaggerui
  • M2: Route discovery listed /api/openapi instead of /api/v1/openapi — fixed path
  • STH signing crash: TenantKeys returned base64-encoded keys to :crypto.sign which expects raw bytes — added base64 decode

Also seeded genesis audit chain entry and triggered STH computation for the eCommerce Friendly tenant.

Test plan

  • 2263 tests pass
  • /swagger redirects to /swaggerui
  • Route discovery shows /api/v1/openapi
  • Discovery endpoint shows real npm version after deploy
  • STH endpoint returns signed data (not 404)

🤖 Generated with Claude Code

…key decode

- Copy mcp-server/package.json into Docker build so the discovery
  endpoint reads the real npm version instead of falling back to 0.0.0
- Add /swagger → /swaggerui redirect for discoverability
- Fix route discovery: /api/openapi → /api/v1/openapi (correct path)
- Fix TenantKeys: base64-decode private keys from Fly secrets before
  passing to :crypto.sign (keys are stored as base64 by FlyAdapter.set)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@mkreyman mkreyman merged commit 278c1e9 into master Apr 13, 2026
6 checks passed
@mkreyman mkreyman deleted the fix/verification-report-fixes branch April 13, 2026 04:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant