post: commit a65a528 in bojemoi

content/posts/commits/2026-06-18-commit-a65a528.md

@@ -0,0 +1,70 @@
+---
+title: "[bojemoi] fix(pipeline): nuclei timeout, MCP StreamableHTTP, UZI payload & target filtering"
+date: 2026-06-18T22:59:29+02:00
+draft: false
+tags: ["commit", "bojemoi", "main"]
+categories: ["Git Activity"]
+summary: "Commit a65a528 par Betty dans bojemoi"
+author: "Betty"
+---
+
+## Commit `a65a528`
+
+| | |
+|---|---|
+| **Repository** | bojemoi |
+| **Branch** | `main` |
+| **Author** | Betty |
+| **Hash** | `a65a528dd2558740b1e1a4481a63b7e835cce5b8` |
+
+
+### Description
+
+nuclei-api:
+- Add -timeout 5 / -max-host-error 30 / -retries 1 to nuclei cmd
+- Align subprocess timeout with request.timeout param (was hardcoded 1800s)
+
+nuclei-worker:
+- Disable Ollama enrichment (OLLAMA_ENABLED=false) — phi3:mini hallucinated
+  apache tags on nginx hosts; extract_tags() is deterministic and correct
+
+uzi:
+- Filter non-hosting targets: purpose != client AND is_hosting = true
+- Fix _web_only detection: exclude SSH ports (22/2222) so SSH+web hosts
+  use reverse payloads instead of bind (bind blocked by target firewall)
+
+mcp-server:
+- Migrate SSE transport → StreamableHTTPSessionManager (MCP SDK 1.27.2)
+- Fix OAuth discovery failure in new Claude Code versions
+- Update .mcp.json: url /mcp/, type http
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+
+### Files Changed
+
+```
+M	.claude/agent-memory/infra-daily-monitor/MEMORY.md
+M	.claude/agent-memory/pipeline/MEMORY.md
+M	.mcp.json
+M	alert-agent/alert_agent/webhook.py
+M	borodino/thearm_uzi
+M	mcp-server/server.py
+M	samsonov/nuclei_api/main.py
+M	stack/40-service-borodino.yml
+M	volumes/prometheus/rules/alert_rules.yml
+```
+
+### Diff Summary
+
+```
+ .claude/agent-memory/infra-daily-monitor/MEMORY.md | 64 ++++++++++++++++++++--
+ .claude/agent-memory/pipeline/MEMORY.md            | 45 ++++++++++-----
+ .mcp.json                                          |  4 +-
+ alert-agent/alert_agent/webhook.py                 | 10 ++--
+ borodino/thearm_uzi                                |  8 ++-
+ mcp-server/server.py                               | 49 +++++++++--------
+ samsonov/nuclei_api/main.py                        | 12 ++--
+ stack/40-service-borodino.yml                      |  4 +-
+ volumes/prometheus/rules/alert_rules.yml           | 10 ----
+ 9 files changed, 143 insertions(+), 63 deletions(-)
+```