Commit history for src/server/api
- Security: INT-A1 verify GitHub push permission before push mirroring; INT-A2/A33 MergeFix requires base write, trailers, no-CI needs human; INT-A3/A4 legacy webhooks via guarded outbound client with encrypted secrets; INT-A5/A25/A27 detach integrations on transfer/delete, prune orphans and logs; INT-A26 hide installer repo list; INT-A28/A29 streamed inbound cap, strip auth on cross-origin redirect; INT-A6/A7/A8/A20/A22/A32 editor container cap, preview hardening, symlink-safe sync, non-root imagef2e2275⌁taigrr committed
- Relay imports ourselves: primary branch first, then backfill refs with an importing badge; token imports for private sources; working delete-and-retry; warm and batch the last-commit walk.7a72469⌁taigrr committed
- Merge roadmap/tests-pulls825f38e⌁taigrr committed
- Rebuild the /api/v1 router as the union of every test branch's routes, drop duplicate label endpoints, and route org member changes through setOrgMember.30fdc39⌁taigrr committed
- Merge roadmap/tests-ci0b0da6c⌁taigrr committed
- Merge roadmap/tests-platform1eeb5f8⌁taigrr committed
- Merge roadmap/tests-hostingd860f90⌁taigrr committed
- Merge roadmap/tests-orgs75fe096⌁taigrr committed
- Merge roadmap/tests-gitb363225⌁taigrr committed
- Merge roadmap/tests-issuese7ce4d9⌁taigrr committed
- Merge roadmap/tests-auth6334b8b⌁taigrr committed
- Merge roadmap/tests-security1c1dbd4⌁taigrr committed
- Merge roadmap/mcp9cc32b3⌁taigrr committed
- Merge roadmap/sites7e7a8a7⌁taigrr committed
- Merge roadmap/platformfixa662571⌁taigrr committed
- Merge roadmap/mergefix3e9780b⌁taigrr committed
- Merge roadmap/metering71afa5f⌁taigrr committed
- Extract pull request, review, protection, label, token and org-member writes into shared server modules with token API parity, add org deletion with retired names, and make /api/v1 token-only.8de9b05⌁taigrr committed
- Merge roadmap/runner85ad88c⌁taigrr committed
- Merge roadmap/mergefixb1edaa2⌁taigrr committed
- Merge roadmap/editorf5c6bf8⌁taigrr committed
- Merge roadmap/runnerd0ce09d⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
