--- title: "[bojemoi] fix(pipeline): nuclei timeout, MCP StreamableHTTP, UZI payload & target filtering" date: 2026-06-18T22:59:29+02:00 draft: false tags: ["commit", "bojemoi", "main"] categories: ["Git Activity"] summary: "Commit a65a528 par Betty dans bojemoi" author: "Betty" --- ## Commit `a65a528` | | | |---|---| | **Repository** | bojemoi | | **Branch** | `main` | | **Author** | Betty | | **Hash** | `a65a528dd2558740b1e1a4481a63b7e835cce5b8` | ### Description nuclei-api: - Add -timeout 5 / -max-host-error 30 / -retries 1 to nuclei cmd - Align subprocess timeout with request.timeout param (was hardcoded 1800s) nuclei-worker: - Disable Ollama enrichment (OLLAMA_ENABLED=false) — phi3:mini hallucinated apache tags on nginx hosts; extract_tags() is deterministic and correct uzi: - Filter non-hosting targets: purpose != client AND is_hosting = true - Fix _web_only detection: exclude SSH ports (22/2222) so SSH+web hosts use reverse payloads instead of bind (bind blocked by target firewall) mcp-server: - Migrate SSE transport → StreamableHTTPSessionManager (MCP SDK 1.27.2) - Fix OAuth discovery failure in new Claude Code versions - Update .mcp.json: url /mcp/, type http Co-Authored-By: Claude Sonnet 4.6 ### Files Changed ``` M .claude/agent-memory/infra-daily-monitor/MEMORY.md M .claude/agent-memory/pipeline/MEMORY.md M .mcp.json M alert-agent/alert_agent/webhook.py M borodino/thearm_uzi M mcp-server/server.py M samsonov/nuclei_api/main.py M stack/40-service-borodino.yml M volumes/prometheus/rules/alert_rules.yml ``` ### Diff Summary ``` .claude/agent-memory/infra-daily-monitor/MEMORY.md | 64 ++++++++++++++++++++-- .claude/agent-memory/pipeline/MEMORY.md | 45 ++++++++++----- .mcp.json | 4 +- alert-agent/alert_agent/webhook.py | 10 ++-- borodino/thearm_uzi | 8 ++- mcp-server/server.py | 49 +++++++++-------- samsonov/nuclei_api/main.py | 12 ++-- stack/40-service-borodino.yml | 4 +- volumes/prometheus/rules/alert_rules.yml | 10 ---- 9 files changed, 143 insertions(+), 63 deletions(-) ```