Andrey Antukh b9bb62b497

🐛 Block MCP REPL server in multi-user mode and decouple its host (#11632) ...

The unauthenticated REPL server started in --multi-user mode whenever DEVENV or REPL_ENABLE was set, unlike developer tools which are already blocked there. Gate its creation behind shouldStartReplServer, mirroring the developer tools policy, so it never starts with --multi-user. Give it a dedicated PENPOT_MCP_REPL_HOST knob defaulting to localhost so it no longer inherits the main server 0.0.0.0 bind in Docker, keep the devenv script on 0.0.0.0, and document and test the new behavior. Closes #11631 AI-assisted-by: muse-spark-1.3-contributor

2026-09-22 12:17:59 +02:00

..

common

⬆️ Update devenv dependencies (#11790)

2026-09-22 10:22:31 +02:00

plugin

⬆️ Update devenv dependencies (#11790)

2026-09-22 10:22:31 +02:00

server

🐛 Block MCP REPL server in multi-user mode and decouple its host (#11632)

2026-09-22 12:17:59 +02:00