jedarden/pdftract
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
pdftract/tests/fixtures/classifier/scientific_paper
History
jedarden 660a9401ef feat(pdftract-59zz): implement MCP bearer token ingress channels and TH-03 enforcement 
Implements secure MCP bearer-token ingress channels and TH-03 startup abort
enforcement per plan lines 874, 915-921, 922-924.

## Changes
- Add `--auth-token-file PATH` flag (RECOMMENDED channel)
- Add `PDFTRACT_MCP_TOKEN` env var support
- Reject `--auth-token VALUE` unless `PDFTRACT_INSECURE_CLI_TOKEN=1`
- Enforce TH-03: require token for non-loopback bind addresses (exit 78)
- Loopback exemption for 127.0.0.0/8 and ::1/128

## Files
- crates/pdftract-cli/src/mcp/auth.rs: Token resolution with priority order
- crates/pdftract-cli/src/mcp/bind.rs: TH-03 bind security check
- crates/pdftract-cli/src/mcp/server.rs: MCP server entry point
- crates/pdftract-cli/src/mcp/mod.rs: Module exports
- crates/pdftract-cli/src/main.rs: CLI arguments
- crates/pdftract-cli/Cargo.toml: Add secrecy, tempfile dependencies

## Acceptance Criteria
- ✅ --auth-token-file PATH flag implemented
- ✅ PDFTRACT_MCP_TOKEN env var resolved
- ✅ --auth-token VALUE rejected (exit 64) unless PDFTRACT_INSECURE_CLI_TOKEN=1
- ✅ mcp --bind ADDR with non-loopback ADDR and no token: aborts with exit 78
- ✅ mcp --bind ADDR with loopback ADDR and no token: succeeds
- ✅ mcp --bind ADDR with token: succeeds regardless of address
- ⏸️ Inspector token: Phase 7.9 (not yet implemented)
- ⏸️ TH-03 test: separate bead

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-18 02:47:54 -04:00
..
01.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
02.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
03.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
04.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
05.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
06.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
07.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
08.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
09.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
10.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
11.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
12.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
13.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
14.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
15.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
16.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
17.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
18.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
19.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
20.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
21.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
22.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
23.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
24.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
25.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
26.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
27.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
28.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
29.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
30.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
31.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
32.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
33.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
34.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
35.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
36.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
37.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
38.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
39.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
40.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
41.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
42.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
43.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
44.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
45.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
46.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
47.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
48.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
49.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
50.pdf test(classifier): add 200-document labeled corpus for Phase 5.6 2026-05-17 07:16:02 -04:00
scientific_paper feat(pdftract-59zz): implement MCP bearer token ingress channels and TH-03 enforcement 2026-05-18 02:47:54 -04:00