whisper-money/resources
Víctor Falcón fcf5e6e46f refactor(mcp): address review feedback
- Keep PR1 strictly read-only: drop the scope selector, the read_write
  request rule and mcp:write granting from the UI/controller (the write scope
  returns with the write tools in PR2). Removes a token that could be minted
  over-privileged with a false "can edit data" UI promise.
- Gate via User::canUseFeature(PlanFeature::McpAccess) instead of hasProPlan()
  directly, matching the existing feature-gating convention.
- Confirm token rotation behind an AlertDialog (it breaks connected clients),
  matching revoke; drop the silent on-load clipboard auto-copy.
- Give the data-egress disclaimer a destructive variant for visual weight.
- Extract the duplicated token-ownership check; document the controller-reuse
  coupling and the shared-tenant space-scoping model; fix ListSpaces N+1 and a
  duplicate output key.
2026-07-17 15:32:10 +02:00
..
css fix(charts): improve contrast for chart colors 9-10 (#614) 2026-06-30 10:28:03 +00:00
js refactor(mcp): address review feedback 2026-07-17 15:32:10 +02:00
views feat(encryption): commands to warn and remove inactive encrypted-data accounts (#633) 2026-07-03 15:57:04 +00:00