• v0.4.0 907d62a545

    fix(mcp): resolve 17 code review findings + php route('login') fix
    Some checks failed
    CI / test (push) Failing after 2s

    Ghost released this 2026-03-21 23:13:03 +00:00 | 188 commits to dev since this release

    Go (17 findings from Codex sweep):

    • CRITICAL: bare type assertion panic in tools_metrics.go
    • CRITICAL: webviewInstance data race — added webviewMu mutex
    • CRITICAL: swallowed Glob error in agentic/ingest.go
    • HIGH: 9 nil-pointer dereferences on resp.StatusCode across agentic/
    • HIGH: swallowed os.Open/os.Create errors in dispatch, queue, resume
    • HIGH: hardcoded ~/Code/host-uk/core paths replaced with s.workspaceRoot()
    • HIGH: wsServer/wsAddr data race — added wsMu to Service struct
    • MEDIUM: ChannelSend stdout guard for non-stdio transports
    • MEDIUM: readPlan discarded underlying error
    • MEDIUM: TCP session IDs now unique per connection (RemoteAddr)
    • LOW: SPDX typo in brain/provider.go

    PHP (route('login') fix):

    • Replace route('login') with url('/login') in 4 MCP files
    • route('login') fails on mcp.* subdomains where no login route exists
    • url('/login') resolves correctly on any domain

    Co-Authored-By: Virgil virgil@lethean.io

    Downloads