taigrrSecurity: INT-A12 rate-limit and meter every MCP method incl. initialize/listen/resources/prompts; INT-A13 per-token subscriber slots; INT-A14 untrusted PR/CI content as delimited data, human-confirmed approve/merge, no merge automation from unconfirmed agent approvals; INT-A23 structural audit redaction; INT-A24 OAuth code/client/refresh sweeps in runMcpCron + live-refresh grant counting; INT-A30 session id in query only for WebSocket upgrade; INT-A34 agent tokens always expire; migration 0022
4a198ca ·
- ..
- api.ts
- blob-read.ts
- container-admin.ts
- container-api.ts
- container-config.ts
- container-do.ts
- container-meter.ts
- host.ts
- http.ts
- origin-check.test.ts
- origin-check.ts
- origin.ts
- preview-headers.test.ts
- preview-headers.ts
- raw.d.ts
- room-agents.ts
- room-api.ts
- room-awareness.ts
- room-client.ts
- room-files.ts
- room-presence.ts
- room-send.ts
- room.ts
- session.ts
- workbench-boot.js
- workbench.ts
- write-guard.ts