Security hardening: MCP token-gate/SSRF, tracing scrub, local-router timeout - #44

Merged

electron-rare merged 9 commits into

fix/security-hardening-mcp-tracing

Jun 1, 2026

Commits on May 31, 2026

feat(mcp): token-gate and SSRF guard for http
electron-rare
committed
2e922b7
fix(local-router): time-box non-streaming chat()
electron-rare
committed
0be2417
fix(tracing): scrub secrets in meta.json and errors
electron-rare
committed
4d5e27e
fix(cli): keep React import for classic JSX
electron-rare
committed
d0293bf
fix(local-router): harden tool-call extraction
electron-rare
committed
b3cfb12
fix(local-router): cache reclaim and health ping isolation
electron-rare
committed
770b329
fix(storage): restrict conversation history to 0600
electron-rare
committed
31c25eb
chore(branding): finish non-breaking isaac rebrand
electron-rare
committed
e0101e6
fix(mcp): close IPv4-mapped IPv6 SSRF bypass
electron-rare
committed
1990405