taigrrSecurity: INT-A12 rate-limit and meter every MCP method incl. initialize/listen/resources/prompts; INT-A13 per-token subscriber slots; INT-A14 untrusted PR/CI content as delimited data, human-confirmed approve/merge, no merge automation from unconfirmed agent approvals; INT-A23 structural audit redaction; INT-A24 OAuth code/client/refresh sweeps in runMcpCron + live-refresh grant counting; INT-A30 session id in query only for WebSocket upgrade; INT-A34 agent tokens always expire; migration 0022
4a198ca ·
- ..
- advertise-filter.ts
- artifacts-call.ts
- artifacts-health.ts
- artifacts.ts
- commit-graph.ts
- diff.ts
- force-push.ts
- hidden-refs.ts
- history.ts
- inflate.ts
- merge.ts
- merge3.ts
- objects.ts
- pack.ts
- pktline.ts
- proxy.ts
- pull-bridge.ts
- reachable.ts
- ref-advertisement.test.ts
- ref-advertisement.ts
- ref-sync-protocol.ts
- ref-sync.ts
- refs.ts
- relay.ts
- snapshot.ts
- store.ts
- tree-path.test.ts
- tree-path.ts
- upload-pack.ts
- web-commit.ts
- writer.ts