2 Commits

Author	SHA1	Message	Date
jamesread	e013ec0f88	chore: all HTTP requests now come with a context, timeout, etc.	2026-07-28 23:08:20 +01:00
jamesread	422044317c	security: GHSA-xpxj-f2fm-rqch (HIGH) bound OAuth2 state map growth ... Sweep expired OAuth2 state entries, cap the map at 10000 entries, and remove stale state on failed callback validation. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-07-07 14:26:37 +01:00