Commit history for src/server/api
- Add owner-editable repository topics, shown on the repository and in lists and searchableaa36e6c⌁taigrr committed
7d3651c⌁
- Detach the previous owner's runners on transfer and re-check repository ownership on every claim1618a91⌁taigrr committed
- Embed the owning repo or account id in new row ids so lookups skip the directory and no locator rows are written9878c76⌁taigrr committed
- Wire repo transfer to disable webhooks/deploy tokens and rebill LFS; route the review reply lookup to RepoStateabc6597⌁taigrr committed
- Move sessions, tokens, passkeys, OAuth grants, notifications, org invitations, AI endpoints and account lifecycle into AccountState; sites, LFS and editor sessions into their scopes1054732⌁taigrr committed
- Move CI runs, jobs, statuses, caches, webhooks, secrets, variables, environments and deploy tokens into RepoState1cbb8e5⌁taigrr committed
- Move pull requests, reviews, merges, merge queue, branch protection and mergefix runs into RepoState31be087⌁taigrr committed
- Let a site admin create an org with a project-reserved name (gitfor, gitfor-bot) and serve go-get for it; route names stay reserved for everyoneb80d5c2⌁taigrr committed
- Merge fix/mergefix-hunks07f3f58⌁taigrr committed
- Merge fix/verify-gate25d807bf⌁taigrr committed
- Merge fix/verify-gatec201dc1⌁taigrr committed
- Launch Sites custom domains on gitforstatic.dev: SaaS zone, catch-all route, show customers the CNAME target, reserve the fallback host name, and keep the forge app off every host but its own5f8a63e⌁taigrr committed
- Merge feat/remove-pages1823e11⌁taigrr committed
- Merge release/scratchcc94bde⌁taigrr committed
- Merge release/abuse38a754f⌁taigrr committed
- Harden hosting cost controls per review: GC re-checks before delete, aborts on unreadable manifests and takes a lease; custom domain grace covers pre-existing and ungranted domains, lapse/reconcile sweeps can't stall, quantity follows transfers and teardown, duplicate add-ons are cancelled, verified domains never expire; Pages follows the current repo owner; aliases are per-PR, reserved and dropped with their preview.9dc4854⌁taigrr committed
- Reject web and REST settings writes on archived repositories while keeping removals, revokes and make-private available.6c13c42⌁taigrr committed
- Require fork PR approval on push unless author, head owner and pusher are all trusted; record every rerun's parent95f19f9⌁taigrr committed
- Gate remaining admin REST writes on archived repos, hide owner runners from repo admins on the web, and make the last-owner guard atomic.61438e0⌁taigrr committed
- Fix pre-deploy authz findings: transfers need admin on both accounts, archived and scope gates on admin REST writes, inbox and dashboard filtered by current access, revocation purges assignments and notifications, missing rate limits.ed881e4⌁taigrr committed
- Close pre-deploy auth gaps: deploy tokens die with repo transfers, password resets and lost admin; token revocation cascades through every descendant; agent tokens minted over REST stay within the caller's grant; TOTP failures lock out persistently; login, email removal, passkey counters, signing-key lookup and sign-out-everywhere hardened.c9c6455⌁taigrr committed