fix(httpapi): decode percent-encoded server id in handleGetServerLogs

Closes the daemon server-side half of the namespaced-name log fix (Codex
review round 3 on PR #604): the client now encodes the name, but the handler
read chi.URLParam("id") raw, so %2F reached the lookup un-decoded. Route it
through decodePathParam (matching handleAddFromRegistry) + router regression
test proving /servers/io.github.evidai%2Fpolymarket-guard/logs decodes.

Related #598

Author: Dumbris

internal/httpapi/server.go

@@ -2678,7 +2678,10 @@ func (s *Server) handleGetGlobalTools(w http.ResponseWriter, r *http.Request) {
 // @Failure 500 {object} contracts.ErrorResponse "Internal server error"
 // @Router /api/v1/servers/{id}/logs [get]
 func (s *Server) handleGetServerLogs(w http.ResponseWriter, r *http.Request) {
-	serverID := chi.URLParam(r, "id")
+	// chi routes on RawPath, so a namespace/name server id (e.g.
+	// io.github.evidai/polymarket-guard) arrives percent-encoded. Decode it
+	// before lookup, matching handleAddFromRegistry (MCP-1111 / #598).
+	serverID := decodePathParam(chi.URLParam(r, "id"))
 	if serverID == "" {
 		s.writeError(w, r, http.StatusBadRequest, "Server ID required")
 		return

internal/httpapi/server_logs_decode_test.go

@@ -0,0 +1,48 @@
+package httpapi
+
+import (
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+	"go.uber.org/zap/zaptest"
+
+	"github.com/smart-mcp-proxy/mcpproxy-go/internal/contracts"
+)
+
+// capturingLogsController records the serverID the logs handler forwards, so the
+// test can assert it was percent-decoded before lookup.
+type capturingLogsController struct {
+	*MockServerController
+	gotServerID string
+}
+
+func (c *capturingLogsController) GetServerLogs(serverID string, _ int) ([]contracts.LogEntry, error) {
+	c.gotServerID = serverID
+	return []contracts.LogEntry{}, nil
+}
+
+// TestGetServerLogs_SlashServerIDUnescaped reproduces the daemon-backed half of
+// MCP-1111 / #598: official-registry server ids are namespace/name and chi routes
+// on RawPath, so the {id} param arrives percent-encoded
+// (io.github.evidai%2Fpolymarket-guard). handleGetServerLogs must url.PathUnescape
+// it before lookup, otherwise `mcpproxy upstream logs io.github.evidai/polymarket-guard`
+// targets the literal encoded name and never finds the server.
+func TestGetServerLogs_SlashServerIDUnescaped(t *testing.T) {
+	logger := zaptest.NewLogger(t).Sugar()
+	controller := &capturingLogsController{MockServerController: &MockServerController{}}
+	server := NewServer(controller, logger, nil)
+
+	req := httptest.NewRequest(http.MethodGet, "/api/v1/servers/io.github.evidai%2Fpolymarket-guard/logs?tail=10", http.NoBody)
+	w := httptest.NewRecorder()
+	server.ServeHTTP(w, req)
+
+	require.Equal(t, http.StatusOK, w.Code, "logs request should succeed; body=%s", w.Body.String())
+	var resp contracts.APIResponse
+	require.NoError(t, json.Unmarshal(w.Body.Bytes(), &resp))
+	assert.Equal(t, "io.github.evidai/polymarket-guard", controller.gotServerID,
+		"server id must be percent-decoded before lookup")
+}