Commit history for src
- Make OAuth refresh rotation a single transaction that fails if the grant was revoked meanwhile.46fc255⌁taigrr committed
- Rotate OAuth access tokens in place and revoke refresh tokens and delegations with a delete trigger, so every revocation path (Settings, API, password change) cuts agents off; filter pushed events per subscription.9ead1ba⌁taigrr committed
- Harden MCP after review: atomic code and refresh redemption with reuse revocation, area-scoped event delivery, delegation bound to its parent token, write-gated claims, and bounded streams and bodies.60f8c74⌁taigrr committed
- Add MCP end-to-end tests covering OAuth, permission denials, session resume, WebSockets and concurrent claims; stop advertising default scopes so clients request their own.3dd84a4⌁taigrr committed
- Add an MCP server at /mcp with OAuth 2.1, repo/PR/issue/CI tools, and per-repo agent coordination hubs.9ef03c9⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
- fixup ui bugsff2db5e⌁taigrr committed
- Index code on first search and after import or fork, and sync every branch and tag from an import's source.dfd86a2⌁taigrr committed
0809367⌁
- Retry transient Artifacts reads, return readable download errors, and reserve page names.4762231⌁taigrr committed
- Show uploaded profile pictures everywhere and allow changing them from the profile page.54b389c⌁taigrr committed
- Skip email when no verified sender is configured and keep pending imports alive through transient Artifacts errors.67eb2a4⌁taigrr committed
- Merge roadmap/pulls: in-Worker merges, suggestions, auto-merge, merge queue, CODEOWNERS0beb9c3⌁taigrr committed
- Merge roadmap/issues: milestones, projects, discussions, reactions, attachments, templates9bdef7f⌁taigrr committed
- Merge roadmap/security: signatures, secret scanning, code scanning, advisories, dependency graphbad844a⌁taigrr committed
- Merge roadmap/lfs: Git LFS on R29090367⌁taigrr committed