Block a user
auth: JWKS cache refresh interval is hardcoded at 1 hour
auth: no rate limiting on authentication failures
auth: no rate limiting on authentication failures
Mis-located. BearerMiddleware (cited internal/auth/bearer.go:22-42) moved to the shared mcp-chassis module in 658f4ba (auth/bearer.go). The unthrottled fall-through 401 is there, not in…
auth: JWKS cache refresh interval is hardcoded at 1 hour
Mis-located. The cited internal/auth/jwt.go:44 left this repo in 658f4ba — the JWKS validator now lives in the shared mcp-chassis module (auth/jwt.go, NewJWTValidator). The hardcoded…
auth: no rate limiting / timing defence on Bearer auth failures
auth: JWKS cache refresh interval is hardcoded at 1h
feat: add issue_edit tool (update issue title/body)
feat: close claude.ai-surface gaps — direct-to-main write, PR create/merge, owner repo listing
Item #1 (direct-to-main write) is the priority — fresh repro 2026-06-02
Confirming item #1 from another claude.ai session today. While committing an S5 spike handoff doc to infra (`docs/supe…
feat: close claude.ai-surface gaps — direct-to-main write, PR create/merge, owner repo listing
feat: add issue_edit tool (update issue title/body)
Validate the core hypothesis: MVP pass-rate dataset + fast-model kill-date
chore: track crush.json in dotfiles repo
Update (2026-05-29): After reviewing mathias/dma-cli, this issue may be closeable.
dma code init (internal/wizard/crush.go) is the canonical tool for writing crush.json. It fetches the…
chore: gate #25 and #29 on routing bootstrap + fast-model validation (30-day hold)
chore: track crush.json in dotfiles repo
feat(skills): add dream skill