Restore MCP cross-origin protection after go-sdk v1.6.0 bump

The go-sdk v1.6.0 release no longer applies a default
CrossOriginProtection when the field is nil in StreamableHTTPOptions,
silently removing Origin header verification. Wrap the streamable
handler with http.NewCrossOriginProtection().Handler(...) (the
recommended replacement, since the SDK field is deprecated).

Also regenerate gqlgen resolvers to track v0.17.90.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

pkg/server/api/connect/v1/audit_log_resolvers.go

@@ -3,7 +3,7 @@ package connect_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/connect/v1/base_resolvers.go

@@ -3,7 +3,7 @@ package connect_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/connect/v1/identity_resolvers.go

@@ -3,7 +3,7 @@ package connect_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/connect/v1/invitation_resolvers.go

@@ -3,7 +3,7 @@ package connect_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/connect/v1/membership_resolvers.go

@@ -3,7 +3,7 @@ package connect_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/connect/v1/oauth2_resolvers.go

@@ -3,7 +3,7 @@ package connect_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/connect/v1/organization_resolvers.go

@@ -3,7 +3,7 @@ package connect_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/connect/v1/personal_api_key_resolvers.go

@@ -3,7 +3,7 @@ package connect_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/connect/v1/profile_resolvers.go

@@ -3,7 +3,7 @@ package connect_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/connect/v1/saml_resolvers.go

@@ -3,7 +3,7 @@ package connect_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/connect/v1/scim_resolvers.go

@@ -3,7 +3,7 @@ package connect_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/connect/v1/session_resolvers.go

@@ -3,7 +3,7 @@ package connect_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/access_review_campaign_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/asset_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/audit_log_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/audit_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/base_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/connector_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/control_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/cookie_banner_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/cookie_consent_record_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/data_protection_impact_assessment_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/document_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/electronic_signature_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/evidence_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/file_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/framework_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/mailing_list_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/measure_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/obligation_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/organization_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/processing_activity_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/rights_request_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/risk_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/task_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/trust_center_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/vendor_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/viewer_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/console/v1/webhook_resolvers.go

@@ -3,7 +3,7 @@ package console_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/mcp/v1/v1_handler.go

@@ -68,10 +68,11 @@ func NewMux(logger *log.Logger, proboSvc *probo.Service, iamSvc *iam.Service, ac
 			Logger:     nil, // TODO put logger here
 		},
 	)
+	protectedHandler := http.NewCrossOriginProtection().Handler(handler)
 
 	r := chi.NewMux()
 	r.Use(authn.NewAPIKeyMiddleware(iamSvc, tokenSecret))
-	r.Handle("/", RequireAPIKeyHandler(logger, handler))
+	r.Handle("/", RequireAPIKeyHandler(logger, protectedHandler))
 
 	logger.Info("MCP server initialized successfully")
 

pkg/server/api/trust/v1/auth_resolvers.go

@@ -3,7 +3,7 @@ package trust_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/trust/v1/base_resolvers.go

@@ -3,7 +3,7 @@ package trust_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/trust/v1/mailing_list_resolvers.go

@@ -3,7 +3,7 @@ package trust_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/trust/v1/nda_resolvers.go

@@ -3,7 +3,7 @@ package trust_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/trust/v1/organization_resolvers.go

@@ -3,7 +3,7 @@ package trust_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"

pkg/server/api/trust/v1/trust_center_resolvers.go

@@ -3,7 +3,7 @@ package trust_v1
 // This file will be automatically regenerated based on the schema, any resolver
 // implementations
 // will be copied through when generating and any unknown code will be moved to the end.
-// Code generated by github.com/99designs/gqlgen version v0.17.87
+// Code generated by github.com/99designs/gqlgen version v0.17.90
 
 import (
 	"context"