Commits

Commit history

1. Commits on Sep 30, 2026

   • fix(shell): reload on org switch and keep the deep link past a dead session (F-68, F-70)

     Show description for c3fe290
     

     devresponse

     and

     claude

     committed
     c3fe290View commit details

     Copy full SHA for c3fe290

     View code at this pointBrowse repository at this point

   • fix(http): /api no-store, proxy on dotted sign-in, dot-segment returnTo, throttled org apply (I-07, F-106, I-17, F-105)

     Show description for b2a343a
     

     devresponse

     and

     claude

     committed
     b2a343aView commit details

     Copy full SHA for b2a343a

     View code at this pointBrowse repository at this point
2. Commits on Sep 25, 2026

   • fix(client-ip): add CLIENT_IP_SOURCE and a boot warning when unset (F-17)

     Show description for 2754720
     

     devresponse

     and

     claude

     committed
     2754720View commit details

     Copy full SHA for 2754720

     View code at this pointBrowse repository at this point

   • fix(client-ip): normalize the client IP; key IPv6 limiters by /64 (F-16)

     Show description for b0cb145
     

     devresponse

     and

     claude

     committed
     b0cb145View commit details

     Copy full SHA for b0cb145

     View code at this pointBrowse repository at this point
3. Commits on Sep 7, 2026

   • fix(admin,proxy,validation): gate RSC surfaces to their API authority, constrain locale + UUID writes, audit and harden RSC denials (review #70, #71, #72, #73, #74, #75, #76, #80, #210) (#425)

     Show description for 837943e
     

     devresponse

     and

     claude

     authored
     837943eView commit details

     Copy full SHA for 837943e

     View code at this pointBrowse repository at this point
4. Commits on Sep 6, 2026

   • docs(comments): fix phantom error-boundary citation and CSP style-src attribution (review #165, #133, #166, #179) (#416)

     Show description for 8e55975
     

     devresponse

     and

     claude

     authored
     8e55975View commit details

     Copy full SHA for 8e55975

     View code at this pointBrowse repository at this point
5. Commits on Sep 5, 2026

   • docs(comments): Wave 4 §6 accuracy sweep for src/app, src/components, src/config and proxy (review #31–#34, #109, #110, #133, #136–#138, #149, #154–#164, #166–#170, #173, #178, #179, #211, #232, #2…

     Show description for aa88343
     

     devresponse

     and

     claude

     authored
     aa88343View commit details

     Copy full SHA for aa88343

     View code at this pointBrowse repository at this point

   • fix(auth): share one trusted client-IP derivation with Better Auth (review #35) (#397)

     Show description for bd01d2e
     

     devresponse

     and

     claude

     authored
     bd01d2eView commit details

     Copy full SHA for bd01d2e

     View code at this pointBrowse repository at this point
6. Commits on Jul 13, 2026

   • feat(dev): true-subdomain local rig — hosts script, COOKIE_DOMAIN, CSP dev guard (#354)

     Show description for 09c47c8
     

     devresponse

     and

     claude

     authored
     09c47c8View commit details

     Copy full SHA for 09c47c8

     View code at this pointBrowse repository at this point
7. Commits on Jul 6, 2026

   • feat(auth): social new-users honor the organization scope

     Show description for 63b5622
     

     devresponse

     and

     claude

     committed
     63b5622View commit details

     Copy full SHA for 63b5622

     View code at this pointBrowse repository at this point
8. Commits on Jun 21, 2026

   • fix(theme): replace next-themes to clear the React 19 inline-script warning

     Show description for f481987
     

     devresponse

     and

     claude

     committed
     f481987View commit details

     Copy full SHA for f481987

     View code at this pointBrowse repository at this point
9. Commits on Jun 19, 2026

   • feat(security): enforce a per-request nonce CSP (#34)

     Show description for 650282e
     

     devresponse

     and

     claude

     committed
     650282eView commit details

     Copy full SHA for 650282e

     View code at this pointBrowse repository at this point
10. Commits on May 1, 2026

    • add missing spec §4.1 components, route-regions classifier; drop middleware alias

      Show description for bf8258a
      

      Copilot

      and

      devresponse

      authored
      bf8258aView commit details

      Copy full SHA for bf8258a

      View code at this pointBrowse repository at this point
11. Commits on Apr 28, 2026

    • WP 0–8 + initial WP 9: shell, auth, i18n, navigation, SSO, secure layout, tests

      Show description for ad3d6cc
      

      Copilot

      and

      devresponse

      authored
      ad3d6ccView commit details

      Copy full SHA for ad3d6cc

      View code at this pointBrowse repository at this point
12. Loading