refactor: remove legacy admin and harden self-hosting

bound the intake batch by the queue it is drawn from

commit each intake batch, its deliveries, and its cursor in one transaction

retry a failed intake event in place instead of replaying the stream

expose durable cursor age so relay replay exhaustion is visible

gate intake readiness on durable progress instead of socket state

acknowledge the completed jetstream prefix with one cursor write

fix webhook backlink intake stalling on prior-reference capacity

drop stale pull_policy never from node compose

resolve annotated tags to their commit in the release workflow

merge tag-triggered release pipeline

type-check komodo actions against real client types

send terminal scripts as one base64 line and fix sed delimiter collision

poll komodo update instead of trusting the async runaction response

add tag-triggered release pipeline via tangled ci and komodo

fix oauth advisory lock pool exhaustion from connection max lifetime

lessy noisy error logging for db auth + better testing

stabilize distributed reads and revalidation

speed up auth and site loading

redesign light mode and speed up auth

second round of refactoring

refactor: harden multi-region data and hosting pipeline

preliminary analytics work

1.3.2 blog post

v1.3.2 cli

perm sets + cli fixes

v1.3.0

fix blog typo

version bumps

update blog + fix backfill rewrite html

blog post + csrf fixes

fix encoded asset paths in hosting service

priv sites to docs

publish cli 1.2.0

blog

Merge branch 'hydrant-backfill'

Merge remote-tracking branch 'github/main'

fix private share links: https redirect via LOCAL_DEV-keyed scheme, NODE_ENV at build, and form-safe referrer policy

wip: e2e private-sites capture harness and blog templates

wip: hydrant backfill discovery and domain cache invalidation on claim

Merge pull request #28 from WaveringAna/codex/fix-unbounded-revalidation-queue-vulnerability

Cap and deduplicate firehose revalidation queue

cap and deduplicate firehose revalidation queue

fix csrf again

Merge pull request #27 from WaveringAna/codex/propose-fix-for-global-csrf-bypass

Scope private-site CSRF exception to share redemption

scope private origin CSRF exception to redeem route

reject traversal segments in disk storage keys and firehose entry names to block cross-tenant cache poisoning

private sites v1: security + review fixes (ssrf, csrf, __Host cookie) (#26)

private sites v1: security + review fixes (ssrf, csrf, __Host cookie)

enforce csrf via root onbeforehandle and allow private-site origin for scoped share redeem

block absolute url 200 rewrites (ssrf), fix __Host-did cookie path, and harden private-site review findings

Merge pull request #25 from WaveringAna/codex/private-sites-v1

private sites v1: owner + share-link access, migration-ready for permissioned data