3 Commits

Include renames

Author	SHA1	Message	Date
decoluaandCursor	f8b73faf5d	feat(cowork): re-enable Claude Cowork with preset-only stdio MCP ... Restore Cowork feature while closing the RCE vector: drop user-defined stdio commands so only hard-coded preset plugins (browsermcp) may spawn. Custom MCP now accepts remote URL only. Routes stay gated to localhost. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-08 15:35:37 +07:00
decolua	468c61b2ac	Added new models for Claude Opus 4.8 and GPT 5.4 Mini. ... Disabled Cowork	2026-05-29 17:36:27 +07:00
decolua	8f4d29caa4	# v0.4.30 (2026-05-11) ... ## Features - MCP stdio→SSE bridge: expose local stdio MCP plugins over SSE (api/mcp/[plugin]/sse, /message) - Dynamic Linux cert resolution + NSS DB injection (Debian/Arch/Fedora/openSUSE, Chrome/Chromium/Firefox incl. snap) (#1010) - Cowork tool: expanded settings UI & API - GitBook docs (DocsContent, DocsLayout) ## Fixes - OAuth callback postMessage scoped to expected origins (CWE-1385) (#998) - Re-enable TLS verification on DNS-bypass fetch (CWE-295) (#998) - Normalize `developer` role → `system` for OpenAI-format providers (Deepseek, Groq, …) (#1011, closes #773) - Respect `PORT` env in internal model-test fetch (#1014) - Dropdown text readability in dark theme on usage page (#997) ## Improvements - Refactor Claude CLI spoof headers into shared constant - Tool deduper utility in open-sse handlers	2026-05-12 09:19:50 +07:00