Commit history for src/components/settings
- Close private-access gaps: stale owner invitations, private-to-public pulls, MCP token delegation outside the parent's repos, pulls-only tokens reading code, and hidden org rosters6fcf072⌁taigrr committed
- continue rethemede5e52f⌁taigrr committed
- kumo-start1fab05e⌁taigrr committed
- Merge release/posthogfe357f8⌁taigrr committed
- Add legal pages, signup terms acceptance, self-service account deletion and data export so the public forge meets launch compliance basics; PostHog runs cookieless so no cookie banner is needed.abe2e9c⌁taigrr committed
- Close pre-deploy auth gaps: deploy tokens die with repo transfers, password resets and lost admin; token revocation cascades through every descendant; agent tokens minted over REST stay within the caller's grant; TOTP failures lock out persistently; login, email removal, passkey counters, signing-key lookup and sign-out-everywhere hardened.c9c6455⌁taigrr committed
- Merge roadmap/pricing-posthog186686d⌁taigrr committed
- abuse and metering486d635⌁taigrr committed
a360a78⌁
- Credit contributions by verified commit email from a per-repo commit index, let users keep several verified addresses, make mentions survive renames, add repo Insights, and move per-request counters, unread counts, webhook logs and git/download metering off D1 into Durable Objects so write load scales with entities instead of traffic.9517d99⌁taigrr committed
- Add marketing and feature pages, a site footer and new brand assets, extract shared UI primitives, and keep HttpError status across server-to-client serialization.698aa2a⌁taigrr committed
- Merge roadmap/notify7417d6f⌁taigrr committed
- Scope commit signature lookups to the repository, 404 on missing alerts, gate draft release assets, refuse private webhook targets, stop dequeued merges, report workflow compile failures, support git protocol v2 with the default branch as HEAD, and post every password form.20aff54⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
- Show uploaded profile pictures everywhere and allow changing them from the profile page.54b389c⌁taigrr committed