taigrrSecurity: INT-A12 rate-limit and meter every MCP method incl. initialize/listen/resources/prompts; INT-A13 per-token subscriber slots; INT-A14 untrusted PR/CI content as delimited data, human-confirmed approve/merge, no merge automation from unconfirmed agent approvals; INT-A23 structural audit redaction; INT-A24 OAuth code/client/refresh sweeps in runMcpCron + live-refresh grant counting; INT-A30 session id in query only for WebSocket upgrade; INT-A34 agent tokens always expire; migration 0022
4a198ca ·
- ..
- actions.ts
- admin-writes.test.ts
- admin-writes.ts
- agents.ts
- credential.ts
- editor.ts
- git.ts
- hosting.ts
- http.ts
- issues.ts
- mergefix.ts
- org-delete.ts
- orgs.ts
- platform.ts
- pull-review.ts
- pull-writes.test.ts
- pull-writes.ts
- pulls.test.ts
- pulls.ts
- repos.ts
- router.ts
- runners.ts
- security-advisories.ts
- security.ts
- settings.ts
- usage.ts
- user.ts
- webhooks.ts