feat(telemetry): one-time opt-out beacon + banner Settings deep-link (MCP-2482)#684

Merged

Dumbris merged 8 commits into

mainfrom

feat/mcp-2482-telemetry-optout-beacon

Jun 15, 2026

Commits on Jun 15, 2026

feat(telemetry): one-time opt-out beacon + banner Settings deep-link (MCP-2482)
Dumbris
committed
fix(telemetry): route opt-out beacon through service endpoint (fix CodeQL SSRF)
Dumbris
committed
fix(telemetry): validate opt-out beacon URL (scheme/host) to clear CWE-918
Dumbris
committed
fix(telemetry): pin opt-out beacon host to clear CWE-918 (host allowlist guard)
Dumbris
committed
fix(telemetry): inline opt-out beacon host guard (CWE-918 barrier shape)
Dumbris
committed
fix(telemetry): explicit-equality host guard for opt-out beacon (CWE-918)
Dumbris
committed
fix(telemetry): address Codex review — env-resolved gate, opt-out race, CLI guards (MCP-2482)
Dumbris
committed
Merge origin/main into telemetry-optout-beacon (resolve Settings.vue)

Dumbris
and
claude
committed