nullrequest.com / wisp.place-monorepo
Monorepo for wisp.place. A static site hosting service built on top of the AT Protocol.
Star
Fork 0
Watch

Commits on webhook-byo-secret

webhooks: add scope.backlinksOnly to fire only on other repos' references webhook-byo-secret
nekomimi.pet committed
webhooks: let callers supply their own signing secret token
nekomimi.pet committed
webhooks: avoid mention facet accessors v1.1.4
niri committed
webhooks: match Bluesky mention facets as backlinks
niri committed
refactor: remove legacy admin and harden self-hosting v1.1.3
nekomimi.pet committed
bound the intake batch by the queue it is drawn from
nekomimi.pet committed
commit each intake batch, its deliveries, and its cursor in one transaction
nekomimi.pet committed
retry a failed intake event in place instead of replaying the stream
nekomimi.pet committed
expose durable cursor age so relay replay exhaustion is visible
nekomimi.pet committed
gate intake readiness on durable progress instead of socket state
nekomimi.pet committed
acknowledge the completed jetstream prefix with one cursor write
nekomimi.pet committed
fix webhook backlink intake stalling on prior-reference capacity
nekomimi.pet committed
drop stale pull_policy never from node compose
nekomimi.pet committed
resolve annotated tags to their commit in the release workflow v1.1.2
nekomimi.pet committed
merge tag-triggered release pipeline v1.1.1
nekomimi.pet committed
type-check komodo actions against real client types deploy/tag-releases
nekomimi.pet committed
send terminal scripts as one base64 line and fix sed delimiter collision
nekomimi.pet committed
poll komodo update instead of trusting the async runaction response
nekomimi.pet committed
add tag-triggered release pipeline via tangled ci and komodo
nekomimi.pet committed
fix oauth advisory lock pool exhaustion from connection max lifetime
nekomimi.pet committed
lessy noisy error logging for db auth + better testing
nekomimi.pet committed
stabilize distributed reads and revalidation
nekomimi.pet committed
speed up auth and site loading
nekomimi.pet committed
redesign light mode and speed up auth
nekomimi.pet committed
second round of refactoring
nekomimi.pet committed
refactor: harden multi-region data and hosting pipeline
nekomimi.pet committed
preliminary analytics work
waveringana committed
1.3.2 blog post
nekomimi.pet committed
v1.3.2 cli
nekomimi.pet committed
perm sets + cli fixes
nekomimi.pet committed
v1.3.0
nekomimi.pet committed
fix blog typo
nekomimi.pet committed
version bumps
nekomimi.pet committed
update blog + fix backfill rewrite html
nekomimi.pet committed
blog post + csrf fixes
nekomimi.pet committed
fix encoded asset paths in hosting service
nekomimi.pet committed
priv sites to docs
nekomimi.pet committed
publish cli 1.2.0
nekomimi.pet committed
blog
nekomimi.pet committed
Merge branch 'hydrant-backfill'
nekomimi.pet committed
Merge remote-tracking branch 'github/main'
nekomimi.pet committed
fix private share links: https redirect via LOCAL_DEV-keyed scheme, NODE_ENV at build, and form-safe referrer policy
nekomimi.pet committed
wip: e2e private-sites capture harness and blog templates
nekomimi.pet committed
wip: hydrant backfill discovery and domain cache invalidation on claim
nekomimi.pet committed
Merge pull request #28 from WaveringAna/codex/fix-unbounded-revalidation-queue-vulnerability
Wavering Ana committed
cap and deduplicate firehose revalidation queue
Wavering Ana committed
fix csrf again
nekomimi.pet committed
Merge pull request #27 from WaveringAna/codex/propose-fix-for-global-csrf-bypass
Wavering Ana committed
scope private origin CSRF exception to redeem route
Wavering Ana committed
reject traversal segments in disk storage keys and firehose entry names to block cross-tenant cache poisoning
nekomimi.pet committed
private sites v1: security + review fixes (ssrf, csrf, __Host cookie) (#26)
Wavering Ana committed
enforce csrf via root onbeforehandle and allow private-site origin for scoped share redeem
nekomimi.pet committed
block absolute url 200 rewrites (ssrf), fix __Host-did cookie path, and harden private-site review findings
nekomimi.pet committed
Merge pull request #25 from WaveringAna/codex/private-sites-v1
Wavering Ana committed
clean up user facing copy
nekomimi.pet committed
Remove private access boilerplate
nekomimi.pet committed
i like free flows of information
nekomimi.pet committed
Make cache invalidation durable and atomic
nekomimi.pet committed
wait for firehose projection before mapping domains
nekomimi.pet committed
add per-instance observability and repair staging cache and oauth flows
nekomimi.pet committed