Commit history
- Security: tighten the POST-A/B fixes after re-review (entity-decoded camo decisions, own-host images load directly, own-host checks on verify and redirects, SVG badges kept, targeted 5xx masking, same-site user-content as a warning, per-isolate walk dedupe, plan gate on preview tickets).d958823⌁taigrr committed
- Security: fix post-audit feature review findings POST-B1..B7 (AI suggestions billed to the viewer, no owner usage leak, container plan gate on sync/preview, safe admin stop, one background tree walk per key, token imports always private).81d0558⌁taigrr committed
- Security: fix post-merge review findings POST-A1..A8 (user-content redirect with Basic credentials, grant revocation, same-site user-content origin, camo bypasses and self-proxying, rel injection, avatar cache purge, 5xx error messages).9837efb⌁taigrr committed
- Add marketing and feature pages, a site footer and new brand assets, extract shared UI primitives, and keep HttpError status across server-to-client serialization.698aa2a⌁taigrr committed
- Hide failed and in-progress imports from explore, landing, search and other users' profilesf3bf2c9⌁taigrr committed
- Make the unsubscribe-token tamper test deterministic (it was a no-op when the signature began with 1)1b847be⌁taigrr committed
- Dispose Artifacts handles that resolve after a call timeout, and release the status-check handle on failure705afe0⌁taigrr committed
b76d1f0⌁
- Add AI-suggested pull request titles and descriptions on the compare page for plans that include AI or bring their own key, metered through aiMeter as "pr-describe" on a cheap PR_DESCRIBE_MODEL.33f39b5⌁taigrr committed
- Gate editor containers by plan, and open the editor or a container straight from a branch111516c⌁taigrr committed
- Edit files with CodeMirror (line numbers, syntax highlighting) and link to the full editor.077a029⌁taigrr committed
- Replace the native ref <select> with a styled fuzzy-find combobox that keeps branches and tags on separate tabs.f141a33⌁taigrr committed
- Relay imports ourselves: primary branch first, then backfill refs with an importing badge; token imports for private sources; working delete-and-retry; warm and batch the last-commit walk.7a72469⌁taigrr committed
- Meter editor containers through reserve/commit, fix terminal input, and list running containers34b3271⌁taigrr committed
- Squash the 37 never-deployed migrations into one file per area, producing an identical schema.81f0fc8⌁taigrr committed
- Merge roadmap/tests-pulls825f38e⌁taigrr committed
- Rebuild the /api/v1 router as the union of every test branch's routes, drop duplicate label endpoints, and route org member changes through setOrgMember.30fdc39⌁taigrr committed
- Merge roadmap/tests-ci0b0da6c⌁taigrr committed
- Merge roadmap/tests-platform1eeb5f8⌁taigrr committed
- Merge roadmap/tests-hostingd860f90⌁taigrr committed
- Merge roadmap/tests-orgs75fe096⌁taigrr committed
- Merge roadmap/tests-gitb363225⌁taigrr committed
- Merge roadmap/tests-issuese7ce4d9⌁taigrr committed
- Merge roadmap/tests-auth6334b8b⌁taigrr committed
- Merge roadmap/tests-security1c1dbd4⌁taigrr committed
- Merge roadmap/mcp9cc32b3⌁taigrr committed
- Merge roadmap/notify7417d6f⌁taigrr committed