Commit history
- fixup stacks, fns5858d70⌁taigrr committed
425a731⌁
- Add legal pages, signup terms acceptance, self-service account deletion and data export so the public forge meets launch compliance basics; PostHog runs cookieless so no cookie banner is needed.abe2e9c⌁taigrr committed
- Harden email replies, editor container billing and lifecycle, MCP merge/approval confirmation, GitHub pull mirrors and BYOK keys (INT-P2..P21)fa13453⌁taigrr committed
- Reject web and REST settings writes on archived repositories while keeping removals, revokes and make-private available.6c13c42⌁taigrr committed
- Require fork PR approval on push unless author, head owner and pusher are all trusted; record every rerun's parent95f19f9⌁taigrr committed
- Harden CI quota, preview trust, action archives, cache quota and log masking (CI-P1..P11)c5d0250⌁taigrr committed
- Gate remaining admin REST writes on archived repos, hide owner runners from repo admins on the web, and make the last-owner guard atomic.61438e0⌁taigrr committed
- Refuse the unsubscribe key fallback without SECRETS_KEY (DEPLOY-P10) and update the self-host guide for bootstrap-token admin setup.eed5d63⌁taigrr committed
- Harden production deploys: config split with boot assertions, admin bootstrap, security headers, error maskinga76edca⌁taigrr committed
- Fix pre-deploy authz findings: transfers need admin on both accounts, archived and scope gates on admin REST writes, inbox and dashboard filtered by current access, revocation purges assignments and notifications, missing rate limits.ed881e4⌁taigrr committed
- Enforce the spending limit across meters inside the reservation transaction so concurrent holds cannot jointly overshoot it, and let admin-set plans stick until an admin hands the account back to Stripe billing.192c134⌁taigrr committed
- Harden the git proxy and bridges before deploy: trust only ok'd refs, restrict v2 commands, fail closed on unloadable thin-pack bases, rate-limit before auth, shorten public raw caching, and charge bridged bytes to the head owner (CI-P6, GIT-P4..P7, P9..P12, GIT-14/PR-12).23526ca⌁taigrr committed
- Close pre-deploy auth gaps: deploy tokens die with repo transfers, password resets and lost admin; token revocation cascades through every descendant; agent tokens minted over REST stay within the caller's grant; TOTP failures lock out persistently; login, email removal, passkey counters, signing-key lookup and sign-out-everywhere hardened.c9c6455⌁taigrr committed
- Move ipBucket into a pure module so its tests cannot be broken by other suites mocking ./limits.643bd46⌁taigrr committed
- Close billing abuse gaps before launch: stop AI calls once tokens are spent, keep org billing owner-only (admins view-only), key rate limits on the IPv6 /64, withhold compute and AI from unverified free accounts and their orgs, and rate-limit scratch git mode and GitHub sign-ups.9058348⌁taigrr committed
- Add TanStack Start's CSRF middleware for server functions so GET server functions are same-origin only too.3b3fccd⌁taigrr committed
- Generate deterministic lava-lamp avatars client-side in place of initials, static by default and drifting on hover, show owner avatars in repo lists, and keep unfinished repos and admin-only private repos out of explore.8e9a6c6⌁taigrr committed
- Merge roadmap/upsellefa5b44⌁taigrr committed
- Merge roadmap/posthog-email10d3a06⌁taigrr committed
- Replace the cloud logo with a salamander whose tapered tail forks into a git branch, so the mark no longer resembles Cloudflare's while keeping the orange.262a313⌁taigrr committed
- Merge roadmap/pricing-posthog186686d⌁taigrr committed
- Merge roadmap/stripe-billinga22ce03⌁taigrr committed
- abuse and metering486d635⌁taigrr committed
- Merge roadmap/mergefix-proposals1e3de79⌁taigrr committed
- Show who reacted when hovering a reaction, loading at most five names on demand and summarizing the rest as a count so huge reaction totals stay cheap.486e8a2⌁taigrr committed
- Float the reaction picker above its button instead of inserting it into the bar, so opening it no longer shifts the comment layout.77e5dbe⌁taigrr committed