Commit history for src/server/api/pulls.ts
- Security (GIT-A1..A6, A9..A12, AZ-A3): gate fork PR bridging on live author access, fork-of-base heads only, revocation sweep on collaborator/org removal; tag protection on release create/delete and tag creation; compare and PR 'since' reachability; enforce_admins fails closed on unverifiable pushes; RFC 5987 archive names; per-caller LFS transfer limiter; safeDecode; paged hidden-ref cleanup; reach cache generationsf3b9112⌁taigrr committed
- Extract pull request, review, protection, label, token and org-member writes into shared server modules with token API parity, add org deletion with retired names, and make /api/v1 token-only.8de9b05⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
