- ae4cc78 Fix flaky MCP tools/call schema-validation timeout under load: decouple validation compute budget from the structural-traversal wall-clock deadline by James Bognar · 3 hours ago master
- 4fa746f Fix Eclipse/SonarLint warnings: CachingHttpServletResponse resource suppression, javadoc refs, unused import/field, serialVersionUID, dead debugBodyCap by James Bognar · 3 hours ago
- 89d90ec READY-394: Make ReadinessState lifecycle-owned instead of a JVM-global singleton by James Bognar · 3 hours ago
- d45900b READY-381: Bind OAuth introspection results to the expected audience/resource by James Bognar · 3 hours ago
- af84870 READY-383: Don't union roles across distinct principals in AuthFilterChain by James Bognar · 3 hours ago
- 00e039c READY-385: Bound remote SAML metadata fetch size (1 MiB cap) by James Bognar · 3 hours ago
- 0219941 READY-384: Remove the MCP DCR requireSecure(false) plaintext escape hatch by James Bognar · 7 hours ago
- 69fca6f READY-382: Enforce HTTPS-or-loopback on the OidcDiscoveryClient issuer by James Bognar · 7 hours ago
- ad28481 READY-395: Don't mount unauthenticated /info and /loggers actuator endpoints by default by James Bognar · 7 hours ago
- 694bed1 READY-388/391: Bound Protobuf LEN fields by maxLength and reject overlong varints by James Bognar · 7 hours ago
- e3adb83 READY-363: Fix RestContext annotationWork init-ordering NPE in framework-bean memoizers by James Bognar · 7 hours ago
- 1b22e38 READY-379: Bind SAML assertions to the request ACS recipient (bearer subject-confirmation) by James Bognar · 7 hours ago
- 18e68d8 READY-387: Enforce declared document-length bounds in the BSON parser by James Bognar · 7 hours ago
- 4c63c6a READY-393: Reject CR/LF and control chars in multipart part name/filename/content-type by James Bognar · 7 hours ago
- bd08d89 TODO-397: Add injectable LoginStateStore SPI for multi-node OIDC login state by James Bognar · 8 hours ago
- ac39eb9 READY-386: Add aggregate decompression budget to the Parquet parser by James Bognar · 8 hours ago
- eed5513 READY-380: Require exact OAuth scope match in MCP resource server by James Bognar · 8 hours ago
- b0c2630 READY-378: Fail closed when SAML assertions lack a NotOnOrAfter bound by James Bognar · 8 hours ago
- 4ebe17d TODO-372: Decouple REST debug single-signal side effects (372a + 372b) by James Bognar · 11 hours ago
- 7052d58 Point push.py starter verify paths at the apache sibling clones. by James Bognar · 12 hours ago
- f6dd664 TODO-370: Harden REST debug logging against secret disclosure (secure-by-default no-dump) by James Bognar · 13 hours ago
- 809cb84 TODO-368: JUL/Spring control plane for REST debug logging by James Bognar · 15 hours ago
- 760164b REST debug 329 follow-ups: quick wins + revised specs by James Bognar · 27 hours ago
- 00970c6 TODO-362: redesign NG RestClient debug logging onto RichLogger by James Bognar · 31 hours ago
- 7dd925c TODO-366: consolidate REST-server debug on RichLogger by James Bognar · 31 hours ago
- 40fa637 TODO-365: rename commons Logger to RichLogger by James Bognar · 33 hours ago
- 18a39c0 TODO-329: Drive REST debug logging via java.util.logging levels by James Bognar · 2 days ago
- 8d1e9c5 Make JSON-schema regex validation interruptible so a tripped MCP DoS-guard reclaims its worker thread (TODO-359) by James Bognar · 3 days ago
- f293236 Measure MCP schema-safety compute budget as thread CPU time; add view-mixin responseProcessor auto-fold opt-in; FreeMarker object-wrapper + fluent ConfigItem.setValue by James Bognar · 3 days ago
- fc4d147 Add fluent Config.entry(key) builder as an additive alternative to the 6-arg set() (TODO-350 B-config-2) by James Bognar · 3 days ago
- 21a2891 Fix remaining Section A docs gaps, BinaryFormat byte[] handling, GitControl SecretStore adoption, README refresh (TODO-350/352/353/354) by James Bognar · 3 days ago
- 043f374 Add a JDK-only SecretStore SPI + juneau-secret-keychain module (TODO-356); fix ObjectPaginator bare-position pagination (TODO-357) by James Bognar · 3 days ago
- 15914a5 Add pluggable query-protocol adapters over the ObjectTools query engine (TODO-355) by James Bognar · 3 days ago
- b9cd914 Secure ObjectIntrospector by default, dedupe HtdocMixin/StaticFilesMixin, add 27 marshaller facade variants (TODO-351 Section B) by James Bognar · 4 days ago
- 014158e TODO-351 B-client-4: remove empty juneau-sc-client module (10.0 breaking-change window) by James Bognar · 4 days ago
- a8ee404 TODO-351 B-restserver-4: standardize debug enablement vocab on always/never/conditional (drop true/false aliases; 10.0 breaking-change window); harden embedded-HttpServer client-classic coverage tests against -T1C parallel starvation (explicit executor) by James Bognar · 4 days ago
- 4588677 TODO-351 B-marshall-4: rename XmlFormat.ELEMENTS to FREEFORM (10.0 breaking-change window) by James Bognar · 4 days ago
- 32713af TODO-351 B-marshall-2/3: rename marshall.swap framework SPI package to swap.spi; rename swap.spi Builder to PojoBuilder (10.0 breaking-change window) by James Bognar · 4 days ago
- 2e1d7af TODO-351: add 9 additive APIs + full @Remote/@RemoteOp classic↔NG parity (Section B of the docs-sweep); fix @StringCtor null-context NPE; JDT cleanup; doc updates by James Bognar · 4 days ago
- 16b6f5a Fix JDK 25 test flush fragility in juneau-rest-client-classic; bump Micrometer to 1.15.12 (CVE-2026-40984); restore coverage.py --by-module by James Bognar · 4 days ago
- df39c5f Add --docs-only mode and Apache identity gate to scripts/push.py by James Bognar · 4 days ago
- 4ed8549 Docs/javadoc cleanup + rest header of(...) factories + MCP/rest-common doc clarifications by James Bognar · 5 days ago
- bdf3e21 Coverage backfill, dead-code/latent-bug cleanup, and docs module-inventory audit by James Bognar · 5 days ago
- 9969df0 Align juneau-rest-client family tests to repo conventions; clarify MCP duplex Mcp-Name contract; add HTT-aware coverage waiver to coverage.py by James Bognar · 6 days ago
- c6a5995 10.0 backlog: extract neutral OAuth-flow module + marshall/MCP/tooling fixes by James Bognar · 6 days ago
- 824234c Harden HTML widget rendering and tidy security test comments by James Bognar · 6 days ago
- bf1bf84 TODO-342: retry idempotent HTTP requests once on stale connection by James Bognar · 6 days ago
- 0fd2124 Fix flaky Jetty redirect test, reword TODO refs, harden gpg resolution by James Bognar · 6 days ago
- 710af3d Security hardening + SonarLint/JDT cleanup + Sonar/push tooling by James Bognar · 8 days ago
- 67da236 MCP: SonarLint/JDT cleanup, sealed dispatch result, MRTR replay+arg-hash, error-code fixes by James Bognar · 9 days ago
- 0427dd8 Merge pull request #369 from apache/dependabot/maven/opensaml.version-5.2.3 by James Bognar · 10 days ago
- 8386f3a Merge pull request #368 from apache/dependabot/maven/com.nimbusds-oauth2-oidc-sdk-11.38.2 by James Bognar · 10 days ago
- 0dacdf6 Merge pull request #367 from apache/dependabot/maven/spring.version-4.1.0 by James Bognar · 10 days ago
- 05a103a Merge pull request #366 from apache/dependabot/maven/org.apache.httpcomponents.core5-httpcore5-5.4.3 by James Bognar · 10 days ago
- f09b167 ci: clean workspace before checkout to stop stale surefire reports marking builds UNSTABLE by James Bognar · 10 days ago
- 3ff2f9d OAuth 2.1-secured variant of the MCP example (juneau-examples-mcp) by James Bognar · 10 days ago
- 4bee9c9 First-party runnable MCP example module (juneau-examples-mcp) + v2 client/server ergonomic conveniences by James Bognar · 11 days ago
- a24312b MCP 2026-07-28 MRTR requestState replay-cache + argument-hash sealing (TODO-333) by James Bognar · 11 days ago
- bc3d4ca Fix intermittent JsonValueSafety schema-traversal deadline race under CI load by James Bognar · 11 days ago
- 1aa0111 MCP 2026-07-28 client-side MRTR auto-resume ergonomics (TODO-326) by James Bognar · 11 days ago
- bb04918 MCP 2026-07-28 MRTR principal-bound requestState AAD (TODO-325) by James Bognar · 11 days ago
- 1c35f35 MCP 2026-07-28 MRTR requestState principal seam for AeadRequestStateCodec (TODO-312f F4, unblocks TODO-325) by James Bognar · 11 days ago
- 49492c7 MCP 2026-07-28 OAuth 2.1 authorization: client acquisition + server resource-server + DCR/scope step-up (TODO-312f); v1 resource-not-found error code (TODO-332) by James Bognar · 11 days ago
- 1dd9ea5 MCP 2026-07-28 MRTR requestState KeyProvider SPI (TODO-324) by James Bognar · 12 days ago
- 8eea1d7 MCP 2026-07-28 v2 config consolidation + Spring Boot integration + SubscriptionPump race fix (TODO-330, TODO-319) by James Bognar · 12 days ago
- af90f77 MCP 2026-07-28 subscriptions/listen server->client push (TODO-312c8) by James Bognar · 12 days ago
- e99d7f8 Fix intermittent MCP 2026-07-28 schema-validation timeout under load (TODO-328 follow-up) by James Bognar · 13 days ago
- f823a56 Add missed unit test coverage for MCP sampling + elicitation beans (TODO-328) by James Bognar · 13 days ago
- 3c67b8a MCP 2026-07-28 sampling + elicitation (TODO-328) by James Bognar · 13 days ago
- 995dc12 MCP 2026-07-28 MRTR wire fixtures + end-to-end client integration (TODO-318 phases 4-6) by James Bognar · 13 days ago
- 806bd36 MCP 2026-07-28 MRTR / input_required server-side dispatch (TODO-318) by James Bognar · 13 days ago
- 2bd89de MCP client stack: neutral core + v1/v2 adapters + SSE/duplex seams (TODO-312e) by James Bognar · 2 weeks ago
- 4355f23 perf: re-baseline MCP module timings for TODO-312c4 resource-template + completion tests by James Bognar · 2 weeks ago
- b9383df MCP 2026-07-28 _meta wire-compliance + distributed trace-context propagation (TODO-312c3) by James Bognar · 2 weeks ago
- 0989a0a MCP resource-template reads + completion/complete across both revisions by James Bognar · 2 weeks ago
- c28f3f5 MCP 2026-07-28 cache hints (SEP-2549) + v2 resources/templates/list by James Bognar · 2 weeks ago
- e658c2d feat: MCP structured tool output across both revisions (2025-06-18 + 2026-07-28) by James Bognar · 2 weeks ago
- d672627 feat: add MCP 2026-07-28 revision server (new bean + adapter modules) by James Bognar · 2 weeks ago
- dc908df build: exclude juneau-microservice-examples from the BOM completeness guard by James Bognar · 2 weeks ago
- fa50bb3 chore: remove unused imports in MCP 2025-06-18 adapter/tests; ignore /.superpowers/ by James Bognar · 3 weeks ago
- 8d5c2b0 docs: fix stale MCP javadoc example referencing removed setServerInfo API by James Bognar · 3 weeks ago
- 20056e8 build: re-baseline MCP module test timings after the re-layering split by James Bognar · 3 weeks ago
- 0ac1ac4 test: cover MCP 2025-06-18 wire content/role branches, mark HTT for unreachable throws by James Bognar · 3 weeks ago
- cbf22b1 build: fail the build if the MCP core gains a per-revision dependency by James Bognar · 3 weeks ago
- e8dacf9 feat: reject tool schemas the 2025-06-18 wire format cannot represent by James Bognar · 3 weeks ago
- 96b51db test: cover the capabilities hook's auto-derive and override paths on both integration paths by James Bognar · 3 weeks ago
- 0315378 refactor: make juneau-rest-server-mcp revision-neutral by James Bognar · 3 weeks ago
- 7e4ca74 test: add the permanent fake-McpRevision architecture acceptance test by James Bognar · 3 weeks ago
- 3420e01 refactor: replace McpDispatcher/Mcp with the McpRevision SPI by James Bognar · 3 weeks ago
- d9f866b build: add empty juneau-rest-server-mcp-2025-06-18 adapter module by James Bognar · 3 weeks ago
- 4d3b7ad feat: add the McpRevision SPI surface (exchange, error kinds, param utils) by James Bognar · 3 weeks ago
- 10cd81b feat: add revision-neutral MCP tool/prompt/resource spec and outcome types by James Bognar · 3 weeks ago
- aeba30d feat: add revision-neutral MCP value types (schema, role, content blocks) by James Bognar · 3 weeks ago
- 0d52781 refactor: rename juneau-bean-mcp to juneau-bean-mcp-2025-06-18 by James Bognar · 3 weeks ago
- e09b9fe feat: add JsonRpcResponse.notification/ok/errorResponse static helpers by James Bognar · 3 weeks ago
- 3bd3f54 refactor: extract JSON-RPC envelope beans into juneau-bean-jsonrpc by James Bognar · 3 weeks ago
- 1791928 build: add empty juneau-bean-jsonrpc module for the JSON-RPC envelope extraction by James Bognar · 3 weeks ago
- 47428cf test: capture MCP JSON-RPC characterization fixtures against pre-refactor behavior by James Bognar · 3 weeks ago
- 3a82287 Add @ConfigProperties prefix-scoped config binding with RestContext pilot (TODO-311) by James Bognar · 3 weeks ago
- 5e62aea Fix stale Javadoc examples in EncoderSet/ObjectMerger/ObjectIntrospector (TODO-297 / READY-306) by James Bognar · 3 weeks ago