Commit history for src/server/token-scope.ts
- Close private-access gaps: stale owner invitations, private-to-public pulls, MCP token delegation outside the parent's repos, pulls-only tokens reading code, and hidden org rosters6fcf072⌁taigrr committed
eac4482⌁
- Move sessions, tokens, passkeys, OAuth grants, notifications, org invitations, AI endpoints and account lifecycle into AccountState; sites, LFS and editor sessions into their scopes1054732⌁taigrr committed
- Merge fix/takedownb01920f⌁taigrr committed
- Merge release/scratchcc94bde⌁taigrr committed
- Merge release/abuse38a754f⌁taigrr committed
- Merge release/dofe2c25c⌁taigrr committed
- Cap every non-push-token credential at read on unclaimed scratch repos, site admins and deploy tokens included, so LFS, contents API and web writes follow the git proxy guard459f46f⌁taigrr committed
- Merge roadmap/mcp9cc32b3⌁taigrr committed
- Merge roadmap/mcp0835f93⌁taigrr committed
- Harden git, LFS, CI, Pages, auth and pull requests against the security review findings, and add a token API for the gfd CLI.4e8720e⌁taigrr committed