[bojemoi] fix(pipeline): nuclei timeout, MCP StreamableHTTP, UZI payload & target filtering

Commit a65a528

Description

nuclei-api:

• Add -timeout 5 / -max-host-error 30 / -retries 1 to nuclei cmd
• Align subprocess timeout with request.timeout param (was hardcoded 1800s)

nuclei-worker:

• Disable Ollama enrichment (OLLAMA_ENABLED=false) — phi3:mini hallucinated apache tags on nginx hosts; extract_tags() is deterministic and correct

uzi:

• Filter non-hosting targets: purpose != client AND is_hosting = true
• Fix _web_only detection: exclude SSH ports (22/2222) so SSH+web hosts use reverse payloads instead of bind (bind blocked by target firewall)

mcp-server:

• Migrate SSE transport → StreamableHTTPSessionManager (MCP SDK 1.27.2)
• Fix OAuth discovery failure in new Claude Code versions
• Update .mcp.json: url /mcp/, type http

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

Files Changed

Diff Summary