Commit history
- Format merged login limitsfabd02e⌁taigrr committed
- Merge release/ratelimit3638708⌁taigrr committed
- Merge release/billing3619d8b⌁taigrr committed
- Merge release/scratchcc94bde⌁taigrr committed
- Merge release/abuse38a754f⌁taigrr committed
- Merge release/dofe2c25c⌁taigrr committed
- Merge release/posthogfe357f8⌁taigrr committed
- Prompt signed-out visitors to sign in instead of showing controls that fail: sign-in CTAs on compare, PR conversation, star and fork; return-to-page after sign-in (password, 2FA, passkey, GitHub, sign-up) with safe next paths; guard account-only routes; disable the editor hotkey and Re-check when signed out.5d783eb⌁taigrr committed
- Never re-disable an account for an already-handled dispute, and refuse job tokens of runs triggered by a disabled user852024b⌁taigrr committed
2d7fafa⌁
- Let the Stripe setup script create live-mode prices behind an explicit --live flag that never writes .dev.vars.1999e1e⌁taigrr committed
- Round 3 hosting fixes: backfill only active domains as verified, D1 lease and bounded R2 work for object GC with orphan skipping and admin alerts, safe duplicate add-on cancel, lapse clears after release and restarts on new domains, transfer cap enforcement, and 404 for Pages of deleted repos.f58928e⌁taigrr committed
- Harden hosting cost controls per review: GC re-checks before delete, aborts on unreadable manifests and takes a lease; custom domain grace covers pre-existing and ungranted domains, lapse/reconcile sweeps can't stall, quantity follows transfers and teardown, duplicate add-ons are cancelled, verified domains never expire; Pages follows the current repo owner; aliases are per-PR, reserved and dropped with their preview.9dc4854⌁taigrr committed
- Fix review findings: don't double count a partly rolled-up day in same-day caps, bill Pages caps to the current repo owner, keep in-flight deploys' objects in GC, don't lapse an add-on awaiting first payment, and skip PR comments for hosts another site owns.a92b839⌁taigrr committed
- Add hosting cost controls: same-day hard caps from counter flushes, metered Pages traffic with plan caps, resumable R2 object GC, SITES_ENABLED/PAGES_ENABLED kill switches with admin hosting suspension, and a global daily dynamic-site ceiling.1a38b42⌁taigrr committed
- Sell custom domains as a per-domain Stripe add-on: gate new domains on it (or a plan flag/admin grant without billing), cap 25 per account, sync quantity, release domains after a lapsed add-on's grace, and delete Cloudflare hostnames on expired claims, private Pages, repo and org deletion.9a3b4a9⌁taigrr committed
- Add pr-<N> preview aliases that follow a pull request's latest branch preview and drop on close, plus opt-in immutable <sha7> commit previews (last 5 per PR).110dfda⌁taigrr committed
- fixup stacks, fns5858d70⌁taigrr committed
- Add legal pages, signup terms acceptance, self-service account deletion and data export so the public forge meets launch compliance basics; PostHog runs cookieless so no cookie banner is needed.abe2e9c⌁taigrr committed
- Harden email replies, editor container billing and lifecycle, MCP merge/approval confirmation, GitHub pull mirrors and BYOK keys (INT-P2..P21)fa13453⌁taigrr committed
- Reject web and REST settings writes on archived repositories while keeping removals, revokes and make-private available.6c13c42⌁taigrr committed
- Require fork PR approval on push unless author, head owner and pusher are all trusted; record every rerun's parent95f19f9⌁taigrr committed
- Harden CI quota, preview trust, action archives, cache quota and log masking (CI-P1..P11)c5d0250⌁taigrr committed
- Gate remaining admin REST writes on archived repos, hide owner runners from repo admins on the web, and make the last-owner guard atomic.61438e0⌁taigrr committed
- Refuse the unsubscribe key fallback without SECRETS_KEY (DEPLOY-P10) and update the self-host guide for bootstrap-token admin setup.eed5d63⌁taigrr committed
- Harden production deploys: config split with boot assertions, admin bootstrap, security headers, error maskinga76edca⌁taigrr committed