2 Commits

Author	SHA1	Message	Date
Hongming Wang	a61dadde43	fix(security): GLOBAL memory delimiter spoofing + pin MCP npm version ... SAFE-T1201 (#807): Escape [MEMORY prefix in GLOBAL memory content on write to prevent delimiter-spoofing prompt injection. Content stored as "[_MEMORY " so it renders as text, not structure, when wrapped with the real delimiter on read. SAFE-T1102 (#805): Pin @molecule-ai/mcp-server@1.0.0 in .mcp.json.example. Prevents supply-chain attacks via unpinned npx -y. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-18 11:09:24 -07:00
Hongming Wang	fccf15681b	chore: final cleanup — remove internal tooling, gitignore local config ... Removed: - docs/.vitepress/ + package.json — docs site config belongs in Molecule-AI/docs - scripts/bridge/ — internal Claude Code bridge server - scripts/claude-code-bridge.py — internal agent bridge - scripts/dedup_settings_hooks.py, verify_settings_hooks.py — internal maintenance Gitignored: - .mcp.json → .mcp.json.example (local MCP config, users create their own) - test-results/ — ephemeral build artifacts Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-18 00:52:30 -07:00