fix: enforce repo authorization invariants. Apply repo capability checks across repository pages and APIs while hardening fork visibility, grant target lookup, PR filtering, CI step binding, and Campfire mention side effects 4 months ago
36 files changed
apps/web/app/[username]/[repository]/blob/[...path]/page.tsx +6 −2 apps/web/app/[username]/[repository]/blob/layout.tsx +7 −3 apps/web/app/[username]/[repository]/campfire/campfire-room.tsx +3 −3 apps/web/app/[username]/[repository]/campfire/page.tsx +10 −11 apps/web/app/[username]/[repository]/discussions/page.tsx +7 −3 apps/web/app/[username]/[repository]/docs/docs-page.tsx +7 −4 apps/web/app/[username]/[repository]/fork/actions.ts +19 −9 apps/web/app/[username]/[repository]/issues/[number]/page.tsx +8 −4 apps/web/app/[username]/[repository]/issues/actions.ts +42 −8 apps/web/app/[username]/[repository]/issues/new/page.tsx +39 −4 apps/web/app/[username]/[repository]/issues/page.tsx +9 −5 apps/web/app/[username]/[repository]/page.tsx +12 −4 apps/web/app/[username]/[repository]/pulls/[number]/actions.ts +77 −13 apps/web/app/[username]/[repository]/pulls/[number]/page.tsx +18 −7 apps/web/app/[username]/[repository]/pulls/new/actions.ts +36 −1 apps/web/app/[username]/[repository]/pulls/new/page.tsx +14 −8 apps/web/app/[username]/[repository]/pulls/page.tsx +13 −5 apps/web/app/api/campfire/ref-details/route.ts +8 −7 apps/web/app/api/campfire/refs/route.ts +7 −7 apps/web/app/api/campfire/ws-token/route.ts +6 −5 apps/web/app/api/ci/jobs/[jobId]/logs/route.ts +25 −3 apps/web/app/api/ci/jobs/[jobId]/steps/[stepId]/status/route.ts +1 −1 apps/web/app/api/ci/repos/[repoId]/runner-registration-token/route.ts +9 −1 apps/web/app/api/repos/[repoId]/pulls/[prId]/files/[fileId]/diff/route.ts +7 −0 apps/web/app/api/repos/[repoId]/pulls/[prId]/files/route.ts +7 −0 apps/web/app/api/repos/[repoId]/pulls/[prId]/route.ts +7 −0 apps/web/app/ci/runs/[runId]/jobs/[jobId]/page.tsx +11 −11 apps/web/db/campfire.ts +44 −23 apps/web/db/ci.ts +50 −10 apps/web/db/pull-requests.ts +114 −28 apps/web/lib/repository-forks.test.ts +51 −0 apps/web/lib/repository-forks.ts +12 −0 apps/web/lib/repository-grant-targets.test.ts +34 −0 apps/web/lib/repository-grant-targets.ts +18 −0 apps/web/lib/repository-validation.test.ts +3 −1 apps/web/lib/repository-validation.ts +7 −3 
