Commit history
- Merge fix/billing2 follow-upfb432fa⌁taigrr committed
- Merge fix/ci3a0c75b6⌁taigrr committed
- Merge fix/billing27151d48⌁taigrr committed
- Merge fix/ci2e5d0622⌁taigrr committed
- Merge fix/abuse203118c2⌁taigrr committed
- Merge fix/do24b4a1d9⌁taigrr committed
- Merge fix/takedown228a0416⌁taigrr committed
- Merge fix/abuse6c55473⌁taigrr committed
- Merge fix/do guardaeb217a⌁taigrr committed
- Merge fix/do4a8b371⌁taigrr committed
- Merge fix/takedownb01920f⌁taigrr committed
- Merge fix/billing2d2ca7c⌁taigrr committed
- Merge fix/posthog71b0f18⌁taigrr committed
- Merge release/ci-canceld1292ac⌁taigrr committed
- Drop unused re-export76872df⌁taigrr committed
- Format merged login limitsfabd02e⌁taigrr committed
- Merge release/ratelimit3638708⌁taigrr committed
- Merge release/billing3619d8b⌁taigrr committed
- Merge release/scratchcc94bde⌁taigrr committed
- Merge release/abuse38a754f⌁taigrr committed
- Merge release/dofe2c25c⌁taigrr committed
- Merge release/posthogfe357f8⌁taigrr committed
- Prompt signed-out visitors to sign in instead of showing controls that fail: sign-in CTAs on compare, PR conversation, star and fork; return-to-page after sign-in (password, 2FA, passkey, GitHub, sign-up) with safe next paths; guard account-only routes; disable the editor hotkey and Re-check when signed out.5d783eb⌁taigrr committed
- Never re-disable an account for an already-handled dispute, and refuse job tokens of runs triggered by a disabled user852024b⌁taigrr committed
2d7fafa⌁
- Let the Stripe setup script create live-mode prices behind an explicit --live flag that never writes .dev.vars.1999e1e⌁taigrr committed
- Round 3 hosting fixes: backfill only active domains as verified, D1 lease and bounded R2 work for object GC with orphan skipping and admin alerts, safe duplicate add-on cancel, lapse clears after release and restarts on new domains, transfer cap enforcement, and 404 for Pages of deleted repos.f58928e⌁taigrr committed
- Harden hosting cost controls per review: GC re-checks before delete, aborts on unreadable manifests and takes a lease; custom domain grace covers pre-existing and ungranted domains, lapse/reconcile sweeps can't stall, quantity follows transfers and teardown, duplicate add-ons are cancelled, verified domains never expire; Pages follows the current repo owner; aliases are per-PR, reserved and dropped with their preview.9dc4854⌁taigrr committed
- Fix review findings: don't double count a partly rolled-up day in same-day caps, bill Pages caps to the current repo owner, keep in-flight deploys' objects in GC, don't lapse an add-on awaiting first payment, and skip PR comments for hosts another site owns.a92b839⌁taigrr committed
- Add hosting cost controls: same-day hard caps from counter flushes, metered Pages traffic with plan caps, resumable R2 object GC, SITES_ENABLED/PAGES_ENABLED kill switches with admin hosting suspension, and a global daily dynamic-site ceiling.1a38b42⌁taigrr committed