Commit history for src/lib
- fixup stacks, fns5858d70⌁taigrr committed
- Add legal pages, signup terms acceptance, self-service account deletion and data export so the public forge meets launch compliance basics; PostHog runs cookieless so no cookie banner is needed.abe2e9c⌁taigrr committed
d104425⌁
- Refuse the unsubscribe key fallback without SECRETS_KEY (DEPLOY-P10) and update the self-host guide for bootstrap-token admin setup.eed5d63⌁taigrr committed
- Harden production deploys: config split with boot assertions, admin bootstrap, security headers, error maskinga76edca⌁taigrr committed
- Move ipBucket into a pure module so its tests cannot be broken by other suites mocking ./limits.643bd46⌁taigrr committed
- Generate deterministic lava-lamp avatars client-side in place of initials, static by default and drifting on hover, show owner avatars in repo lists, and keep unfinished repos and admin-only private repos out of explore.8e9a6c6⌁taigrr committed
- Merge roadmap/upsellefa5b44⌁taigrr committed
- Merge roadmap/posthog-email10d3a06⌁taigrr committed
- Merge roadmap/pricing-posthog186686d⌁taigrr committed
- Merge roadmap/stripe-billinga22ce03⌁taigrr committed
- abuse and metering486d635⌁taigrr committed
- Show who reacted when hovering a reaction, loading at most five names on demand and summarizing the rest as a count so huge reaction totals stay cheap.486e8a2⌁taigrr committed
- Send signed-in users from the sign-in, sign-up, two-factor and forgot-password pages to the dashboard instead of showing forms that no longer apply.cab88e1⌁taigrr committed
- Show commits as their author's account wherever the commit email is one of that account's verified addresses, instead of the raw git name with a mismatched avatar.4e89c38⌁taigrr committed
- Credit contributions by verified commit email from a per-repo commit index, let users keep several verified addresses, make mentions survive renames, add repo Insights, and move per-request counters, unread counts, webhook logs and git/download metering off D1 into Durable Objects so write load scales with entities instead of traffic.9517d99⌁taigrr committed
- Security: tighten the POST-A/B fixes after re-review (entity-decoded camo decisions, own-host images load directly, own-host checks on verify and redirects, SVG badges kept, targeted 5xx masking, same-site user-content as a warning, per-isolate walk dedupe, plan gate on preview tickets).d958823⌁taigrr committed
- Security: fix post-merge review findings POST-A1..A8 (user-content redirect with Basic credentials, grant revocation, same-site user-content origin, camo bypasses and self-proxying, rel injection, avatar cache purge, 5xx error messages).9837efb⌁taigrr committed
- Add marketing and feature pages, a site footer and new brand assets, extract shared UI primitives, and keep HttpError status across server-to-client serialization.698aa2a⌁taigrr committed
- Add AI-suggested pull request titles and descriptions on the compare page for plans that include AI or bring their own key, metered through aiMeter as "pr-describe" on a cheap PR_DESCRIBE_MODEL.33f39b5⌁taigrr committed
- Gate editor containers by plan, and open the editor or a container straight from a branch111516c⌁taigrr committed
- Relay imports ourselves: primary branch first, then backfill refs with an importing badge; token imports for private sources; working delete-and-retry; warm and batch the last-commit walk.7a72469⌁taigrr committed
- Merge roadmap/notify7417d6f⌁taigrr committed
- Merge roadmap/editor5d253e9⌁taigrr committed
- Merge roadmap/metering71afa5f⌁taigrr committed
- Merge roadmap/mergefixb1edaa2⌁taigrr committed