feat(security): default worker to localhost-only binding

BREAKING: Worker now binds to 127.0.0.1 by default. Set CLAUDE_MEM_WORKER_HOST=0.0.0.0 for remote access.
2025-12-11 22:01:31 +08:00
parent b39cf84730
commit b8a9f366e7
22 changed files with 156 additions and 116 deletions
@@ -6,6 +6,7 @@ export const DEFAULT_SETTINGS = {
  CLAUDE_MEM_MODEL: 'claude-haiku-4-5',
  CLAUDE_MEM_CONTEXT_OBSERVATIONS: '50',
  CLAUDE_MEM_WORKER_PORT: '37777',
+  CLAUDE_MEM_WORKER_HOST: '127.0.0.1',

  // Token Economics (all true for backwards compatibility)
  CLAUDE_MEM_CONTEXT_SHOW_READ_TOKENS: 'true',