Commit history for src/server/api
- Merge feat/remove-pages1823e11⌁taigrr committed
- Merge release/scratchcc94bde⌁taigrr committed
- Merge release/abuse38a754f⌁taigrr committed
- Harden hosting cost controls per review: GC re-checks before delete, aborts on unreadable manifests and takes a lease; custom domain grace covers pre-existing and ungranted domains, lapse/reconcile sweeps can't stall, quantity follows transfers and teardown, duplicate add-ons are cancelled, verified domains never expire; Pages follows the current repo owner; aliases are per-PR, reserved and dropped with their preview.9dc4854⌁taigrr committed
- Reject web and REST settings writes on archived repositories while keeping removals, revokes and make-private available.6c13c42⌁taigrr committed
- Require fork PR approval on push unless author, head owner and pusher are all trusted; record every rerun's parent95f19f9⌁taigrr committed
- Gate remaining admin REST writes on archived repos, hide owner runners from repo admins on the web, and make the last-owner guard atomic.61438e0⌁taigrr committed
- Fix pre-deploy authz findings: transfers need admin on both accounts, archived and scope gates on admin REST writes, inbox and dashboard filtered by current access, revocation purges assignments and notifications, missing rate limits.ed881e4⌁taigrr committed
- Close pre-deploy auth gaps: deploy tokens die with repo transfers, password resets and lost admin; token revocation cascades through every descendant; agent tokens minted over REST stay within the caller's grant; TOTP failures lock out persistently; login, email removal, passkey counters, signing-key lookup and sign-out-everywhere hardened.c9c6455⌁taigrr committed
- Close billing abuse gaps before launch: stop AI calls once tokens are spent, keep org billing owner-only (admins view-only), key rate limits on the IPv6 /64, withhold compute and AI from unverified free accounts and their orgs, and rate-limit scratch git mode and GitHub sign-ups.9058348⌁taigrr committed
- abuse and metering486d635⌁taigrr committed
- Merge roadmap/mergefix-proposals1e3de79⌁taigrr committed
a360a78⌁
- Credit contributions by verified commit email from a per-repo commit index, let users keep several verified addresses, make mentions survive renames, add repo Insights, and move per-request counters, unread counts, webhook logs and git/download metering off D1 into Durable Objects so write load scales with entities instead of traffic.9517d99⌁taigrr committed
- Merge roadmap/tests-securitydd86194⌁taigrr committed
- Relay imports ourselves: primary branch first, then backfill refs with an importing badge; token imports for private sources; working delete-and-retry; warm and batch the last-commit walk.7a72469⌁taigrr committed
- Merge roadmap/tests-pulls825f38e⌁taigrr committed
- Rebuild the /api/v1 router as the union of every test branch's routes, drop duplicate label endpoints, and route org member changes through setOrgMember.30fdc39⌁taigrr committed
- Merge roadmap/tests-ci0b0da6c⌁taigrr committed
- Merge roadmap/tests-platform1eeb5f8⌁taigrr committed
- Merge roadmap/tests-hostingd860f90⌁taigrr committed
- Merge roadmap/tests-orgs75fe096⌁taigrr committed
- Merge roadmap/tests-gitb363225⌁taigrr committed
- Merge roadmap/tests-issuese7ce4d9⌁taigrr committed
- Merge roadmap/tests-auth6334b8b⌁taigrr committed
- Merge roadmap/tests-security1c1dbd4⌁taigrr committed
- Merge roadmap/mcp9cc32b3⌁taigrr committed
- Merge roadmap/sites7e7a8a7⌁taigrr committed
- Merge roadmap/platformfixa662571⌁taigrr committed