- Shipped
- November 11, 2026 at 6:46 AM UTC
- Author
- Kamo
- Commit
- 15721a4
- **************** site, preview pass, change requests (+ pictures), cancel, source.zip (Forgejo archive streamed, audited), get-a-website lead, connect-www (ownership-verified apex only, creates the www alias row, never DNS). Owner OR MANAGE_MARKETING_SITE. - /platform/**: sites CRUD, pause/resume, preview pass, request queue, status, Send To SI (sibling of the system-bug dispatch: own audit table, per-request throttle, WEB-<n> folder, site checkout cwd, member text quoted as untrusted). Reads: god-eligible OR the platform right. - **************** for the site edge (X-Site-Edge-Token); Redis single-use preview tickets (SHA-256 only, 60 s). - /api/marketing-sites/webhook: HMAC-verified Forgejo pushes, Kamo-Request: WEB-<n> trailers; deploy tracker (ForgejoStatusClient takes an owner per call; changelog unchanged), own storage. - Billing listener **************** and GRACE -> OFFLINE sweep. - Chat key origins opened for preview/public hosts; marketing.site.changed, org marketing-site and **************** signals. - MANAGE_MARKETING_SITE seeded for administrators; k8s env for the three new secrets.