Commit history
- Security: INT-A9/A10 linear secret detectors and TOML comment stripping; INT-A11/A16/A31 SARIF run cap, verified ref/commit, no fixed-marking from empty uploads, bounded strings; INT-A17 single-use bypass window; AZ-A4 admin-only alert resolutions9d63512⌁taigrr committed
af7bad9⌁
- Security: INT-A21 bind browser-minted editor tokens to the forge session; INT-A22 validate room paths before they enter the shared doc and cap control frames; INT-A7/A8 preview header allow-list extracted with testsb13650b⌁taigrr committed
- Security: INT-A1 verify GitHub push permission before push mirroring; INT-A2/A33 MergeFix requires base write, trailers, no-CI needs human; INT-A3/A4 legacy webhooks via guarded outbound client with encrypted secrets; INT-A5/A25/A27 detach integrations on transfer/delete, prune orphans and logs; INT-A26 hide installer repo list; INT-A28/A29 streamed inbound cap, strip auth on cross-origin redirect; INT-A6/A7/A8/A20/A22/A32 editor container cap, preview hardening, symlink-safe sync, non-root imagef2e2275⌁taigrr committed
d60578d⌁
- Gate editor containers by plan, and open the editor or a container straight from a branch111516c⌁taigrr committed
- Edit files with CodeMirror (line numbers, syntax highlighting) and link to the full editor.077a029⌁taigrr committed
- Replace the native ref <select> with a styled fuzzy-find combobox that keeps branches and tags on separate tabs.f141a33⌁taigrr committed
- Relay imports ourselves: primary branch first, then backfill refs with an importing badge; token imports for private sources; working delete-and-retry; warm and batch the last-commit walk.7a72469⌁taigrr committed
- Meter editor containers through reserve/commit, fix terminal input, and list running containers34b3271⌁taigrr committed
- Squash the 37 never-deployed migrations into one file per area, producing an identical schema.81f0fc8⌁taigrr committed
- Merge roadmap/tests-pulls825f38e⌁taigrr committed
- Rebuild the /api/v1 router as the union of every test branch's routes, drop duplicate label endpoints, and route org member changes through setOrgMember.30fdc39⌁taigrr committed
- Merge roadmap/tests-ci0b0da6c⌁taigrr committed
- Merge roadmap/tests-platform1eeb5f8⌁taigrr committed
- Merge roadmap/tests-hostingd860f90⌁taigrr committed
- Merge roadmap/tests-orgs75fe096⌁taigrr committed
- Merge roadmap/tests-gitb363225⌁taigrr committed
- Merge roadmap/tests-issuese7ce4d9⌁taigrr committed
- Merge roadmap/tests-auth6334b8b⌁taigrr committed
- Merge roadmap/tests-security1c1dbd4⌁taigrr committed
- Merge roadmap/mcp9cc32b3⌁taigrr committed
- Merge roadmap/notify7417d6f⌁taigrr committed
- Merge roadmap/editor5d253e9⌁taigrr committed
9f949df⌁
- Merge roadmap/integrations95ebb35⌁taigrr committed
- Merge roadmap/sites7e7a8a7⌁taigrr committed
- Merge roadmap/platformfixa662571⌁taigrr committed
- Merge roadmap/mergefix3e9780b⌁taigrr committed
- Merge roadmap/metering71afa5f⌁taigrr committed