Commit history for src/routes
ad2566b⌁
- Add per-repo RepoState and per-account AccountState SQL stores, the involvement index, scope locators and the migration planc23c430⌁taigrr committed
- kill global search for do search21614f7⌁taigrr committed
- pagination on searchesd416b30⌁taigrr committed
- cleanup readme4e4728c⌁taigrr committed
- continue rethemede5e52f⌁taigrr committed
- kumo-start1fab05e⌁taigrr committed
- Merge feat/og-cards4ef0e47⌁taigrr committed
- Clean oxlint: name the magic numbers, render the 2FA QR code as an img, and split the webhook and metering tests around shared harnesses2707fe2⌁taigrr committed
- Show a new avatar everywhere right after upload, and switch PostHog to a first-party cookie so session replay can run, with the cookie and privacy pages updated to match60ec83b⌁taigrr committed
- Disclose PostHog session recording in the privacy and cookie policies, and describe analytics as collected without cookies rather than claiming nothing at all is stored6b5723c⌁taigrr committed
- Merge fix/verify-gatec201dc1⌁taigrr committed
- Cap PBKDF2 at the 100,000 iterations Workers supports so sign-up works, and drop the operator's postal address from the legal pagesb4e1b7d⌁taigrr committed
- Merge feat/remove-pages1823e11⌁taigrr committed
- Production config for gitfor.dev: forge route, legal and contact addresses, billing and analytics vars; add a /support page; reserve every route, footer page and raw handler prefix as an account name; go-live checklist.8db9bc9⌁taigrr committed
- Merge fix/abuse203118c2⌁taigrr committed
- Merge fix/abuse6c55473⌁taigrr committed
- Merge release/abuse38a754f⌁taigrr committed
- Merge release/posthogfe357f8⌁taigrr committed
- Prompt signed-out visitors to sign in instead of showing controls that fail: sign-in CTAs on compare, PR conversation, star and fork; return-to-page after sign-in (password, 2FA, passkey, GitHub, sign-up) with safe next paths; guard account-only routes; disable the editor hotkey and Re-check when signed out.5d783eb⌁taigrr committed
- Add hosting cost controls: same-day hard caps from counter flushes, metered Pages traffic with plan caps, resumable R2 object GC, SITES_ENABLED/PAGES_ENABLED kill switches with admin hosting suspension, and a global daily dynamic-site ceiling.1a38b42⌁taigrr committed
- Sell custom domains as a per-domain Stripe add-on: gate new domains on it (or a plan flag/admin grant without billing), cap 25 per account, sync quantity, release domains after a lapsed add-on's grace, and delete Cloudflare hostnames on expired claims, private Pages, repo and org deletion.9a3b4a9⌁taigrr committed
- fixup stacks, fns5858d70⌁taigrr committed
- Add legal pages, signup terms acceptance, self-service account deletion and data export so the public forge meets launch compliance basics; PostHog runs cookieless so no cookie banner is needed.abe2e9c⌁taigrr committed
- Harden production deploys: config split with boot assertions, admin bootstrap, security headers, error maskinga76edca⌁taigrr committed
- Enforce the spending limit across meters inside the reservation transaction so concurrent holds cannot jointly overshoot it, and let admin-set plans stick until an admin hands the account back to Stripe billing.192c134⌁taigrr committed