The control server listens on 127.0.0.1, which host processes (and, in a Flatpak with network
access, the host network) can reach. Each --control launch now generates a random token, writes it
to control-<port>.token in the FigCraft config folder (user-readable only) and requires the first
line of every connection to authenticate with it. figcraft-cli mcp --attach reads the file and
authenticates on every (re)connect; --attach-token FILE names another path, such as a Flatpak's
sandbox config folder. The app disables the channel if it can't write the token.
* E21: require release font coverage and stabilize capture deadline tests
* E21: separate capture, IME and field-save regression phases
* M0: correct the migration qualification reference
* M-egui037: document input lifecycle and UI regression contracts
* M0: correct egui 0.37 status docs and stabilize join-code regression
---------
Co-authored-by: Dylan M. Taylor <dylan@dylanmtaylor.com>
Co-authored-by: Codebuff <noreply@codebuff.com>
Dylan M. Taylor
Brandon ThomasandClaude Opus 5.5