pdftract/crates/pdftract-cli/src/mcp
jedarden c7acac5d1f feat(pdftract-4li3d): implement security constraints for serve mode
- Add startup banner with NO AUTH warning
- Add --max-decompress-gb CLI flag (default 1 GB)
- Add hard cap for --max-upload-mb at 4096 MB (4 GiB)
- Add max_decompress_gb form field parsing
- Update CLI help text with security model documentation
- Add comprehensive security model docs to serve.rs rustdoc

This implements the security constraints required by the bead:
- No built-in authentication (deploy behind reverse proxy)
- No file-path parameters (multipart upload only)
- Hard caps to prevent integer overflow
- Visible security warnings at startup

Closes: pdftract-4li3d
2026-05-26 18:47:51 -04:00
..
framing feat(pdftract-3s2i): implement Phase 5.5.2 validation filter 2026-05-24 04:57:17 -04:00
tools feat(pdftract-4li3d): implement security constraints for serve mode 2026-05-26 18:47:51 -04:00
auth.rs feat(pdftract-3s2i): implement Phase 5.5.2 validation filter 2026-05-24 04:57:17 -04:00
bind.rs feat(pdftract-3s2i): implement Phase 5.5.2 validation filter 2026-05-24 04:57:17 -04:00
http.rs feat(pdftract-3h9xo): implement threads JSON output + schema integration 2026-05-25 13:40:15 -04:00
mod.rs feat(pdftract-mcp): add MCP server implementation changes 2026-05-23 03:09:56 -04:00
root.rs feat(pdftract-3s2i): implement Phase 5.5.2 validation filter 2026-05-24 04:57:17 -04:00
server.rs feat(pdftract-5boxq): implement audit-log FILE flag with NDJSON writer + middleware 2026-05-25 05:14:06 -04:00
stdio.rs feat(pdftract-5boxq): implement audit-log FILE flag with NDJSON writer + middleware 2026-05-25 05:14:06 -04:00