Commit history for src/server/accounts.ts
- Close private-access gaps: stale owner invitations, private-to-public pulls, MCP token delegation outside the parent's repos, pulls-only tokens reading code, and hidden org rosters6fcf072⌁taigrr committed
- Skip counting every user when the waitlist is empty, and check for a first user with EXISTS7da8d1f⌁taigrr committed
b9c347d⌁
- Expire org invitations from the AccountState alarm instead of a cron over every account641fcb3⌁taigrr committed
- Cache the viewer row in AccountState and serve directory listings from D1 read replicas28ffaeb⌁taigrr committed
- Embed the owning repo or account id in new row ids so lookups skip the directory and no locator rows are written9878c76⌁taigrr committed
- Wire repo transfer to disable webhooks/deploy tokens and rebill LFS; route the review reply lookup to RepoStateabc6597⌁taigrr committed
- Move sessions, tokens, passkeys, OAuth grants, notifications, org invitations, AI endpoints and account lifecycle into AccountState; sites, LFS and editor sessions into their scopes1054732⌁taigrr committed
- Let a site admin create an org with a project-reserved name (gitfor, gitfor-bot) and serve go-get for it; route names stay reserved for everyoneb80d5c2⌁taigrr committed
- Merge fix/verify-gatec201dc1⌁taigrr committed
- Merge release/posthogfe357f8⌁taigrr committed
- Gate remaining admin REST writes on archived repos, hide owner runners from repo admins on the web, and make the last-owner guard atomic.61438e0⌁taigrr committed
- Harden production deploys: config split with boot assertions, admin bootstrap, security headers, error maskinga76edca⌁taigrr committed
- Merge roadmap/pricing-posthog186686d⌁taigrr committed
- Credit contributions by verified commit email from a per-repo commit index, let users keep several verified addresses, make mentions survive renames, add repo Insights, and move per-request counters, unread counts, webhook logs and git/download metering off D1 into Durable Objects so write load scales with entities instead of traffic.9517d99⌁taigrr committed
- Extract pull request, review, protection, label, token and org-member writes into shared server modules with token API parity, add org deletion with retired names, and make /api/v1 token-only.8de9b05⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed
- Retry transient Artifacts reads, return readable download errors, and reserve page names.4762231⌁taigrr committed
- real git forgebcc398c⌁taigrr committed