finsliparn

The server primarily executes local `bun test` and `git` commands. Arguments for these commands are either fixed or constructed internally from session data (UUIDs, iteration numbers), significantly reducing the risk of command injection through user input. File system operations are generally constrained to the `.finsliparn` directory within the project root. No direct 'eval' or similar dangerous functions are observed. The core operation relies on trusted local tools. The security model largely depends on the trustworthiness of the code being iterated on and the environment it runs in. The use of Git worktrees provides isolation for iterations, preventing accidental corruption of the main branch during refinement. There is no indication of hardcoded secrets or arbitrary network exposure beyond the standard Model Context Protocol (MCP) IPC.