Commit history
- fixup migrations and push6d8b711⌁taigrr committed
- continue rethemede5e52f⌁taigrr committed
- kumo-start1fab05e⌁taigrr committed
11c4146⌁
- Let a site admin create an org with a project-reserved name (gitfor, gitfor-bot) and serve go-get for it; route names stay reserved for everyoneb80d5c2⌁taigrr committed
- Merge fix/mergefix-hunks07f3f58⌁taigrr committed
- Merge feat/og-cards4ef0e47⌁taigrr committed
- Only silence a runner scope's doorbell when nothing is queued there, so an idle runner with other labels can't starve the one that matches2a9c9ed⌁taigrr committed
- Show automated timeline events (merge queue, MergeFix) as gitfor instead of the deleted-user ghost97cff67⌁taigrr committed
- MCP commit_files with create_from creates the new branch instead of failing with a stale refb0d2240⌁taigrr committed
- Clear USERCONTENT_ORIGIN in the dev overrides so local dev serves raw files, avatars and archives from usercontent.localhost instead of redirecting them to the production user-content originaf3461c⌁taigrr committed
- Return server-fn validation failures as 400s with their message instead of a masked 500, and keep the header rendering when the root viewer is missing1f9b252⌁taigrr committed
- Treat a missing root viewer as signed out so SSR error and pending renders no longer crash SiteHeader on context.viewer being undefined5329a59⌁taigrr committed
- Remove the security review and triage docs now that every finding is closed, keep operator contacts out of the repo (ABUSE_FORWARD_TO is a secret, ADMIN_EMAIL is unset), and drop the private go-live checklist16fdec6⌁taigrr committed
- Answer go get discovery (?go-get=1) with a go-import tag so gitfor.dev/<owner>/<repo> works as a Go module path543e945⌁taigrr committed
- Clean oxlint: name the magic numbers, render the 2FA QR code as an img, and split the webhook and metering tests around shared harnesses2707fe2⌁taigrr committed
- Show a new avatar everywhere right after upload, and switch PostHog to a first-party cookie so session replay can run, with the cookie and privacy pages updated to match60ec83b⌁taigrr committed
- Forward the forge origin (never the page path) to PostHog so session replay's authorized-domain check passes13a0bc2⌁taigrr committed
- Disclose PostHog session recording in the privacy and cookie policies, and describe analytics as collected without cookies rather than claiming nothing at all is stored6b5723c⌁taigrr committed
- Merge fix/verify-gate25d807bf⌁taigrr committed
- Let unverified accounts open the billing portal to cancel or update the card, and fix the rate limiter test fixture for the verified-write guard64b0cda⌁taigrr committed
- Merge fix/verify-gatec201dc1⌁taigrr committed
- Merge fix/ratelimit-doca717c8⌁taigrr committed
- Cap PBKDF2 at the 100,000 iterations Workers supports so sign-up works, and drop the operator's postal address from the legal pagesb4e1b7d⌁taigrr committed
- Launch Sites custom domains on gitforstatic.dev: SaaS zone, catch-all route, show customers the CNAME target, reserve the fallback host name, and keep the forge app off every host but its own5f8a63e⌁taigrr committed
- Production resource ids for gitfor.dev, route abuse+tag@ subaddresses to the abuse desk, and go-live steps for inbound mail routing9d013f2⌁taigrr committed
- Deploy each commit to a Sites preview once when a pull request runs on both push and pull_request, and store the head branch ref on pull request deployments9871ba2⌁taigrr committed
- Merge feat/remove-pages1823e11⌁taigrr committed