James Yang 8cfd5b5bfe Gate workspace MCP config behind WorkspaceTrustStore. ...

Untrusted repos must not define stdio MCP servers that spawn at session open. Skip <.coworker/mcp.json> until the workspace is trusted, matching allowed_commands consent.

Fixes #213

2026-07-26 17:41:56 -04:00

..

__init__.py

OpenWorker: initial import

2026-07-21 11:09:41 -07:00

app.py

security: harden Slack approval handling

2026-07-24 22:33:13 -07:00

manager.py

Gate workspace MCP config behind WorkspaceTrustStore.

2026-07-26 17:41:56 -04:00

run.py

security: complete local access protections

2026-07-24 18:44:39 -07:00