Dustin Healy 3de0512e21 feat: rate-limit /api/mcp/app-tool-call per user ... Adds mcpAppToolCallLimiter (60 req/min per user) to prevent DoS amplification through the MCP app iframe tool-call proxy. Follows the same express-rate-limit + limiterCache + logViolation pattern as toolCallLimiter.		2026-06-23 19:22:25 -07:00
..
controllers	fix(mcp): harden sandbox security and fix stale closures, error states	2026-06-23 18:35:27 -07:00
middleware	feat: rate-limit /api/mcp/app-tool-call per user	2026-06-23 19:22:25 -07:00
routes	feat: rate-limit /api/mcp/app-tool-call per user	2026-06-23 19:22:25 -07:00
services	🔐 fix: Honor Admin-Panel MCP Allowlist Overrides Without Restart (#13814)	2026-06-17 20:14:53 -04:00
utils	🛟 fix: Auto-Recover from Stale Service Worker Assets After Deploys (#13686)	2026-06-11 11:57:06 -04:00
cleanup.js	🧹 refactor: Tighten Config Schema Typing and Remove Deprecated Fields (#12452)	2026-03-29 01:10:57 -04:00
experimental.js	🛟 fix: Auto-Recover from Stale Service Worker Assets After Deploys (#13686)	2026-06-11 11:57:06 -04:00
index.js	📒 feat: Audit Log Backend for SystemGrant Assign and Revoke Events (#13087)	2026-06-18 15:42:33 -04:00
index.metrics.spec.js	⚖️ feat: Add Operational Prometheus Metrics (#13265)	2026-05-22 20:47:41 -04:00
index.spec.js	⚙️ refactor: lazy-load React Query Devtools (#13639)	2026-06-10 13:06:20 -04:00
socialLogins.js	⏳ feat: Make OpenID Token Reuse Window Configurable (#13546)	2026-06-06 15:15:58 -04:00
socialLogins.spec.js	⏳ feat: Make OpenID Token Reuse Window Configurable (#13546)	2026-06-06 15:15:58 -04:00
telemetry.js	📡 feat: Add Backend OpenTelemetry Tracing (#12909)	2026-05-14 09:08:55 -04:00
telemetry.spec.js	📡 feat: Add Backend OpenTelemetry Tracing (#12909)	2026-05-14 09:08:55 -04:00