CalvinBackup/anonymous_github
1
0 Fork 0
mirror of https://github.com/tdurieux/anonymous_github.git synced 2026-11-14 00:07:00 +01:00
Code Issues Packages Projects Releases Wiki Activity
908 Commits 10 Branches 5 Tags
4dc4454459be7c3c62db9bc09706c1a337d94eae
Commit Graph
194 Commits
Author SHA1 Message Date
Thomas Durieux 4dc4454459 fix: protect reactivation claims and retain historical purchase prices 2026-11-02 21:39:17 +00:00
Thomas Durieux afd7a8ff3b fix: retain replacement reservations and bound expiration extensions 2026-11-02 21:27:11 +00:00
Thomas Durieux d7a5243054 fix: admit replacement sources and account for resolved storage 2026-11-02 21:18:43 +00:00
Thomas Durieux ded6f905fd merge: reconcile paid hosting with latest main 2026-11-02 21:12:29 +00:00
Thomas Durieux 036eddfa0e fix: preserve paid hosting deadlines, quotas and review snapshots 2026-11-02 21:03:29 +00:00
Thomas Durieux 410863d253 feat: add paid author and conference hosting with Stripe 2026-11-02 20:49:03 +00:00
Thomas Durieux d0b217a448 feat: include public GitHub submodules in shared repositories (#914) 
* feat: include public GitHub submodules in shared repositories

* fix: preserve submodule access across token and document contexts
 2026-11-02 09:00:02 +01:00
Thomas Durieux 6099356e0e feat: add scoped repository maintenance access for LLM clients (#913) 
* feat: add scoped repository maintenance access for LLM clients

* fix: translate maintenance API errors
 2026-11-02 07:18:04 +00:00
Thomas Durieux 6cf5445972 fix: fill gaps in GitHub Markdown rendering (#912) 
* fix: fill gaps in GitHub Markdown rendering

* fix: harden Markdown dependencies and address review findings
 2026-11-02 07:56:32 +01:00
Thomas Durieux 075c3a4622 Suggest existing configurations for duplicate repository URLs (#911) 2026-11-02 06:31:57 +00:00
Thomas Durieux b09ef0e5b0 fix: persist pull request conferences and reconcile runtime tests 2026-11-02 05:55:47 +00:00
Thomas Durieux a301c46a94 fix: harden repository content and improve access recovery 
Sandbox executable MIME aliases, enforce strict Mermaid rendering, and add security regression coverage. Upgrade vulnerable dependencies with archive compatibility checks and Node 22/24 CI. Make repository restoration atomic and provide actionable viewer errors with retry controls.
 2026-11-02 05:50:34 +00:00
Thomas Durieux 772e40debd fix: retain recipient suppression after access recovery (#897) 
* fix: retain recipient suppression after access recovery

* fix: migrate cold starts and fence resource deactivation

* docs: stop every writer before alert reconciliation
 2026-10-14 19:23:12 +01:00
Thomas Durieux 445a479339 fix: deduplicate owner access alerts per recipient (#896) 
* fix: prevent duplicate access alerts to the same recipient

* fix: address recipient alert recovery review findings

* fix: reconcile unsent alerts and wait for startup migration

* fix: preserve legacy recipient alerts through upgrades

* fix: reconcile alert results and legacy recovery races

* fix: fence dispatch and clean cancelled alert metadata

* fix: fence alert preparation and retain in-flight recovery

* fix: atomically commit alert dispatch and retry deferred recovery

* fix: keep recovery lookups from blocking upstream file reads
 2026-10-13 13:55:10 +01:00
Thomas Durieux eb9ac7e13d fix: avoid rebuilding candidate regexes during anonymization (#895) 2026-10-12 21:27:36 +01:00
Thomas Durieux 8ce670a613 fix: show repository authorization controls for App-only users (#894) 2026-10-12 19:47:04 +01:00
Thomas Durieux 1d326e7c32 fix: repair private repository access from the edit page (#892) 
* fix: repair private repository access from the edit page

* fix: respect App rollout and reload renamed sources after repair

* fix: gate access repair by status and update response tests
 2026-10-11 12:13:02 +01:00
KozakLordOfMatrixandThomas Durieux 4a06aa9888 fix: rebuild ready snapshots on an explicit refresh (#890) 
* fix repository refresh failing to reflect new public GitHub commits

* test: cover forced snapshot rebuilds and unchanged background refresh

* fix: serialize missing-tree recovery with owner refreshes

---------

Co-authored-by: Thomas Durieux <5577568+tdurieux@users.noreply.github.com>
 2026-10-11 11:53:45 +01:00
Thomas Durieux 444e5ab248 fix: save verified email addresses during GitHub registration 2026-10-09 13:24:21 +00:00
Thomas Durieux 7319a5a744 fix: keep settings links on profile and fill the project table (#887) 2026-10-09 13:20:27 +01:00
Thomas Durieux bfcea3e2b7 fix: cancel token-gate waits and detect complete LFS prefixes 2026-10-09 10:08:49 +00:00
Thomas Durieux 705f7c428a fix: handle production source failures and reduce ZIP work 2026-10-09 09:40:54 +00:00
Thomas Durieux 633e5ddcae fix: rearm owner alerts across recovery actions safely 2026-10-09 07:47:51 +00:00
Thomas Durieux d519a0a9bb fix: send one access alert per repository until owner action 2026-10-09 07:38:52 +00:00
Thomas Durieux 9a2707d4b8 fix: preserve probe errors and complete refresh alerts 2026-10-09 06:17:40 +00:00
Thomas Durieux 2b20abe0a5 fix: cover streamed access errors without alerting on outages 2026-10-09 06:00:16 +00:00
Thomas Durieux 85b9a50d4d fix: address owner notification review findings 2026-10-09 05:42:19 +00:00
Thomas Durieux 95f8aef30a feat: notify owners when GitHub access needs attention 2026-10-09 05:22:41 +00:00
Thomas Durieux 66b71583d4 fix: count native resets and test deferred public downloads 2026-10-09 04:07:31 +00:00
Thomas Durieux 37d10eed20 fix: contain upstream failures and back off repeated retries 2026-10-09 03:48:05 +00:00
Thomas Durieux eb4fbb6b15 Merge commit 'refs/security-review/pr849' into HEAD 
# Conflicts:
#	src/server/service/review-consent-http.ts
 2026-10-08 16:26:12 +00:00
Thomas Durieux 7fc0a79a7a Merge commit 'refs/security-review/pr848' into HEAD 2026-10-08 16:25:33 +00:00
Thomas Durieux 89d7a92072 Merge commit 'refs/security-review/pr847' into HEAD 2026-10-08 16:25:33 +00:00
Thomas Durieux c1d192cb7f Merge commit 'refs/security-review/pr846' into HEAD 
# Conflicts:
#	public/script/main.js
 2026-10-08 16:25:32 +00:00
Thomas Durieux 5e84a7e1a3 Merge commit 'refs/security-review/pr845' into HEAD 2026-10-08 16:25:01 +00:00
Thomas Durieux 243396515e Merge commit 'refs/security-review/pr844' into HEAD 2026-10-08 16:25:00 +00:00
Thomas Durieux 37a87a0fba Merge commit 'refs/security-review/pr843' into HEAD 2026-10-08 16:25:00 +00:00
Thomas Durieux c24f6d4e94 Revalidate consent sessions after request body upload 2026-10-08 16:24:40 +00:00
Thomas Durieux 9fa9838dea Merge remote-tracking branch 'origin/main' into HEAD 2026-10-08 16:24:40 +00:00
tdurieuxandClaude Opus 5.5 be2f979296 fix: keep redaction marks correct with custom masks, Prism and Mermaid 
- The mask from /api/options is stored once loaded; code markers and
  rendered Markdown are refreshed when it arrives instead of keeping the
  XXXX default.
- Mermaid sources are left untouched so diagrams still parse.
- Fenced code blocks are marked from a Prism complete hook, after Prism
  has rewritten their HTML.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-08 14:46:13 +02:00
tdurieuxandClaude Opus 5.5 cfd7b73de4 fix: send queue job payloads to the admin page as objects 
BullMQ's asJSON() stringifies data, failedReason, stacktrace and
returnvalue. The Queues page reads them as objects, so payload repo IDs
never showed, failure reasons kept their JSON quotes, and a stack trace
rendered one block per character.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
 2026-10-08 14:46:01 +02:00
tdurieuxandClaude Opus 5.5 57412d0610 feat: refine the reviewer explorer and the visual system 
- Explorer: redacted terms are highlighted in Markdown and code, the
  sidebar shows when the link expires, "Download repository" is the one
  primary action, and signed-out reviewers get a header without Sign in
  or the source-code link.
- Status: a ready anonymization leads with a copyable share link; the
  support links sit flat inside their section.
- One primary colour (accent) for actions and progress; mono is kept for
  IDs, hashes and paths; settings are plain sections instead of cards.
- Font sizes snap to one scale (10-40px); rem values keep following the
  reader's browser font size.
- Ko-fi button uses a dark surface in dark mode instead of a white pill.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
 2026-10-08 14:45:54 +02:00
tdurieuxandClaude Opus 5.5 e524fc4588 feat: expose a repository's expiration date to the explorer 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
 2026-10-08 14:45:45 +02:00
tdurieuxandClaude Opus 5.5 f8b2ea38a1 fix: polish explorer, error states and page alignment 
- Explorer: 13px code, page-coloured dark editor, padded Markdown with a
  readable width, full repository ID on hover, sidebar footer kept clear
  of the floating Ko-fi button.
- Explorer errors render as a card with links home and to the FAQ; the
  empty action bar and Raw/Download buttons are hidden.
- Unknown error codes show the generic message instead of the raw
  ERRORS.<code> key.
- All app pages share one content column; New anonymization starts at
  the top instead of floating mid-screen.
- Status page: spaced action buttons, aligned status pill, no second
  Ko-fi embed under the support cards.
- Claim placeholders; consistent notebook option on new conferences.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
 2026-10-08 12:36:15 +02:00
Thomas Durieux fd0dd0adbd chore(deps): upgrade dependencies and remove production vulnerabilities 2026-10-08 10:21:00 +00:00
Thomas Durieux 9435a99b6c fix: prevent admin user crashes and match performance styling (#877) 2026-10-08 10:59:49 +01:00
Thomas Durieux a9760eab39 perf: avoid needless downloads and track request latency (#876) 
* perf: avoid needless downloads and track request latency

* fix: correct request timing and monitoring revalidation
 2026-10-08 10:38:33 +01:00
Thomas Durieux db966356ec fix: support gists through GitHub App login (#875) 
* fix: prompt OAuth reconnection when gist credentials are rejected

* fix: support gist reads through GitHub App user grants

* test: adapt truncated gist regression to provider selection

* fix: address gist reconnect visibility and token renewal review

* fix: verify App authorization before revoking OAuth
 2026-10-08 10:26:13 +01:00
Thomas Durieux 4fd31a59c8 fix: avoid timeouts for safe ZIP anonymization (#873) 2026-10-08 08:20:26 +01:00
Thomas Durieux 40c369641b fix: keep ZIP downloads flowing through compression (#872) 2026-10-08 04:31:52 +01:00