[BigDataDZ]

本PR的原始功能修复已进入最新main87c2966：原始修复提交已通过git merge-base --is-ancestor验证，相关核心文件及回归测试已核对。后续MCP运行时调整保留了配置缓存及Origin校验。当前PR头多出的上游同步/基线冲突处理不构成尚未合入的独立功能，因此关闭，避免重复审阅；分支与提交保留。

---

原始说明：
MCP configuration normalization discarded allowedOrigins even though HTTP admission checked that field. Saving an Origin allowlist therefore left requests unrestricted. Persist allowedOrigins and include an independently cloned empty default. Preserve malformed entries in nonempty lists so the existing origin matcher rejects them rather than silently broadening access; explicit [] retains the existing unrestricted behavior. Move defaults/factory into configDefaults.js while retaining public exports and lowering configValues from 44 to 34 lines. Three regressions failed before the fix. Real SQLite configuration and authenticated HTTP initialization tests exercise synchronous/async-only persistence, denied/missing origins, allowed origin, cache reset, malformed entries and explicit clearing. Focused 19/19; full suite 751 passed, 15 skipped, 0 failed; eval fixtures 14/14 (two judge results pending). Independent review approved. Architecture retains 30 existing errors; no baseline increases. Includes validated prerequisites through #66. Native MySQL persistence acceptance, PostgreSQL/browser acceptance and both Docker configurations passed in CI. The online unit step passed; the job remains red at the existing architecture guard and online eval is skipped. 本次邮件/审阅反馈核查后的更新：已合入当前main e19d784，解决上游合并#49–#54后产生的config/size-baseline.json冲突。冲突处理逐项取较低值，未提高任何已有基线；业务代码由Git自动合入。 当前head：6af367688106c5fa1a46f9c3ef7b532d59a505f0。本地定向验证：ℹ tests 58; ℹ pass 56; ℹ fail 0; ℹ skipped 2。跳过项未计为通过。远端CI已重新触发，结果以最新Checks为准，规模门禁尚未宣称全绿。 已再次对齐新发布的main5385ed3（V1.2.0/#76）。逐项保留较低基线，并修复上游基线JSON漏逗号（独立修复#77）；未提高已有数值。当前head：f194f6d03950081d878190232f5e9dbc373d1b79。本地定向验证：ℹ tests 41; ℹ pass 40; ℹ fail 0; ℹ skipped 1。跳过项未计为通过。 新主分支全量诊断本身有5个失败；此前零失败结果不再代表当前上游。完整CI以最新Checks为准，未宣称全绿。