Prevent an attacker-controlled auth-config full value from being used as the Linear toolkit base_url, which could cause OAuth bearer tokens to be forwarded to an attacker host during proxy execution.
Description
Replace the templated {{full}} base URL with the fixed https://api.linear.app in packages/db/misc/thermos_data/registry.seed.sql for the active LINEAR toolkit row to ensure proxy requests resolve to the real Linear API.
Testing
Ran a small validation script (python3 - <<'PY' ... PY) to assert the active LINEAR seed row now has https://api.linear.app, and ran git diff --check; both checks passed.
@kaavee315checks…codex/fix-linear-proxy-oauth-token-exfiltration → master1 files · +1 −1updated 1w ago