Commit history for src/server/mcp
- Make OAuth refresh rotation a single transaction that fails if the grant was revoked meanwhile.46fc255⌁taigrr committed
- Rotate OAuth access tokens in place and revoke refresh tokens and delegations with a delete trigger, so every revocation path (Settings, API, password change) cuts agents off; filter pushed events per subscription.9ead1ba⌁taigrr committed
- Harden MCP after review: atomic code and refresh redemption with reuse revocation, area-scoped event delivery, delegation bound to its parent token, write-gated claims, and bounded streams and bodies.60f8c74⌁taigrr committed
- Add MCP end-to-end tests covering OAuth, permission denials, session resume, WebSockets and concurrent claims; stop advertising default scopes so clients request their own.3dd84a4⌁taigrr committed
- Add an MCP server at /mcp with OAuth 2.1, repo/PR/issue/CI tools, and per-repo agent coordination hubs.9ef03c9⌁taigrr committed
