mirror of
https://github.com/morluto/rea.git
synced 2026-11-02 21:06:04 +00:00
Addresses the third automated review round: loopback is classified from the address the listener bound with the configured name added to the Host and Origin allowlist; scoped IPv6 literals are refused before binding and a URL that cannot be formed closes the listener; listener errors reach onerror only after a successful bind; the MCP runtime keeps its factory owner as the single owner of instance cleanup through `closeInstance: false`. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>