jubnl 4ad1ccf5dd fix(oauth): gate scope selection UI to DCR clients only ... Settings-created clients have fixed scopes chosen at creation time and should show a read-only scope list on the consent screen. Only DCR-registered clients expose the interactive checkbox UI for user-controlled scope selection.		2026-04-10 06:03:52 +02:00
..
public	chore(CRLF): normalize index.html line endings to LF	2026-04-05 04:35:17 +02:00
scripts	feat: add encryption key migration script and document it in README	2026-04-01 09:35:32 +02:00
src	fix(oauth): gate scope selection UI to DCR clients only	2026-04-10 06:03:52 +02:00
tests	security(oauth): harden OAuth 2.1/MCP implementation (Critical + High + Medium findings)	2026-04-10 02:03:27 +02:00
.env.example	feat(mcp): add MCP_MAX_SESSION_PER_USER env var and document it everywhere	2026-04-06 00:09:22 +02:00
package-lock.json	feat(mcp): introduce OAuth 2.1 auth and enforce addon gating	2026-04-09 22:25:58 +02:00
package.json	chore: bump version to 2.9.12 [skip ci]	2026-04-09 15:48:10 +00:00
reset-admin.js	Stabilize core: better-sqlite3, versioned migrations, graceful shutdown	2026-03-22 17:52:24 +01:00
tsconfig.json	some fixes	2026-03-30 06:59:24 +02:00
vitest.config.ts	refactor(mcp): replace direct DB access with service layer calls	2026-04-04 18:12:53 +02:00