Commit history for src/server/editor
af7bad9⌁
- Security: INT-A21 bind browser-minted editor tokens to the forge session; INT-A22 validate room paths before they enter the shared doc and cap control frames; INT-A7/A8 preview header allow-list extracted with testsb13650b⌁taigrr committed
- Security: INT-A1 verify GitHub push permission before push mirroring; INT-A2/A33 MergeFix requires base write, trailers, no-CI needs human; INT-A3/A4 legacy webhooks via guarded outbound client with encrypted secrets; INT-A5/A25/A27 detach integrations on transfer/delete, prune orphans and logs; INT-A26 hide installer repo list; INT-A28/A29 streamed inbound cap, strip auth on cross-origin redirect; INT-A6/A7/A8/A20/A22/A32 editor container cap, preview hardening, symlink-safe sync, non-root imagef2e2275⌁taigrr committed
- Gate editor containers by plan, and open the editor or a container straight from a branch111516c⌁taigrr committed
- Meter editor containers through reserve/commit, fix terminal input, and list running containers34b3271⌁taigrr committed
- Merge roadmap/editor5d253e9⌁taigrr committed
- Merge roadmap/editorf5c6bf8⌁taigrr committed