Commit history for src/server/git/proxy.ts
- Second-pass fixes: per-IP rate limits for scratch pushes, quota refusal after disable/expiry/report handling, guarded claim rollback with metering moved only on success, early tee cancel, meter on upstream errors, rate-limit before reading uploads, registrable-domain cookies on custom domains4b1b29b⌁taigrr committed
- Reject oversized scratch pushes cleanly by buffering to the cap, attribute scratch pushes to the scratch actor, and only force host-only cookies on shared sites-domain hosts8c8edf6⌁taigrr committed
- Add git-push scratch sites, MCP site tools, per-site usage metering and host-only user cookies27c0729⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
7f485b4⌁
29c0655⌁
30ac374⌁
- Merge roadmap/security: signatures, secret scanning, code scanning, advisories, dependency graphbad844a⌁taigrr committed
5d880bf⌁
- real git forgebcc398c⌁taigrr committed