James Yang 8cfd5b5bfe Gate workspace MCP config behind WorkspaceTrustStore. ...

Untrusted repos must not define stdio MCP servers that spawn at session open. Skip <.coworker/mcp.json> until the workspace is trusted, matching allowed_commands consent.

Fixes #213

2026-07-26 17:41:56 -04:00

..

__init__.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

client.py

port aisuite#380: slack installer pre-add, mcp oauth quarantine, automation toast, e2e fixes

2026-07-21 12:56:36 -07:00

config.py

Gate workspace MCP config behind WorkspaceTrustStore.

2026-07-26 17:41:56 -04:00

oauth.py

fix: harden local trust boundaries (shell allowlist, MCP OAuth loopback, WS ingestion)

2026-07-24 01:41:05 +05:00

tools.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00