security: harden auth, SSO, path handling, access control#50

Merged

GeiserX merged 11 commits intomainfrom

security/hardening-patch

Apr 2, 2026

Commits on Mar 31, 2026

security: harden auth, SSO, path handling, access control
GeiserX
committed
fix: remove unused join import from pull.ts
GeiserX
committed
security: wire SSO provider, fix seat check ordering, harden download stats and paths
GeiserX
committed
security: one-time SSO nonce, fix multi-team role leak, normalize download IDs
GeiserX
committed
security: serialize SSO seat check, multi-team blueprint creation
GeiserX
committed
security: serialize invitation seat check, multi-team dashboard
GeiserX
committed
fix: use any for Prisma transaction client type (Omit incompatibility)
GeiserX
committed
security: retry serialization conflicts, preserve team context in CTAs
GeiserX
committed
fix: re-check membership inside invite transaction, fix empty-state CTA
GeiserX
committed
fix: retry on P2002 unique constraint conflicts, preserve query string on auth redirect
GeiserX
committed

Commits on Apr 2, 2026

fix: use path.posix.normalize for repository_path sanitization
GeiserX
committed