Commit history for src/server/api/admin-writes.ts
- Gate remaining admin REST writes on archived repos, hide owner runners from repo admins on the web, and make the last-owner guard atomic.61438e0⌁taigrr committed
- Close pre-deploy auth gaps: deploy tokens die with repo transfers, password resets and lost admin; token revocation cascades through every descendant; agent tokens minted over REST stay within the caller's grant; TOTP failures lock out persistently; login, email removal, passkey counters, signing-key lookup and sign-out-everywhere hardened.c9c6455⌁taigrr committed
a360a78⌁
- Extract pull request, review, protection, label, token and org-member writes into shared server modules with token API parity, add org deletion with retired names, and make /api/v1 token-only.8de9b05⌁taigrr committed