fix(node): gate /hooks and sibling read surfaces leaking private repo metadata (#94)#113

Open

beardthelion wants to merge 11 commits into

mainfrom

fix/gate-repo-read-surfaces

Commits on Jun 28, 2026

fix(node): owner-gate list_webhooks to stop leaking webhook URLs (#94)
beardthelion
committed
fix(node): read-visibility-gate list_replicas for private repos (#94)
beardthelion
committed
fix(node): read-visibility-gate list_protected_branches (#94)
beardthelion
committed
fix(node): gate list_repo_events for local private repos, keep gossip-only (#94)
beardthelion
committed
fix(gl): sign the webhook list request now that GET /hooks is owner-gated (#94)
beardthelion
committed
fix(review): sign the webhook list GET (get_signed), not plain get (#94)
beardthelion
committed
fix(gl): sign read-visibility GETs so private-repo owners can read their own repos (#94)
beardthelion
committed
fix(review): sign the primary repo fetch in gl repo info/owner too (#94)
beardthelion
committed
test(review): execute the previously-reasoned-only paths (#94)
beardthelion
committed
test(review): execute the MCP dispatch and gl->node signature seams (#94)
beardthelion
committed

Commits on Jun 29, 2026

fix(review): fail closed when the repo lookup errors in list_repo_events (#94)
beardthelion
committed