Stable MCP security update: local chat forwarding is disabled until a supported workspace-scoped authentication handoff is available. Explicit workspace/listener configuration and matching workspace identity are required for status probing; redirects are rejected. Advisory approval/receipt tools and existing stable protocols remain available.
Only package version and the standalone bridge changed from published 0.2.2. Source is preserved on a dedicated stable branch; its packed artifact is byte-identical to npm 0.2.3. The beta main branch remains separate.
Validation: 48 source and packed tests, plus 49 tests on the reconstructed public source snapshot. Package boundary and secret scans passed. Existing pinned/cached installations must update.