feat(repo): enforce dot-prefixed repos as always-private system repos #77

Merged
jmiller merged 1 commits from feature/system-repo-private into main 2026-05-13 00:16:13 +00:00

1 Commits

Author SHA1 Message Date
Jonathan Miller c5eb8df8a2 feat(repo): enforce dot-prefixed repos as always-private system repos
compliance / files-changed (pull_request) Has been cancelled
pr-title / lint-pr-title (pull_request) Has been cancelled
db-tests / files-changed (pull_request) Has been cancelled
docker-dryrun / files-changed (pull_request) Has been cancelled
e2e-tests / files-changed (pull_request) Has been cancelled
compliance / lint-on-demand (pull_request) Has been cancelled
compliance / lint-backend (pull_request) Has been cancelled
compliance / frontend (pull_request) Has been cancelled
compliance / checks-backend (pull_request) Has been cancelled
compliance / backend (pull_request) Has been cancelled
db-tests / test-pgsql (pull_request) Has been cancelled
db-tests / test-sqlite (pull_request) Has been cancelled
db-tests / test-unit (pull_request) Has been cancelled
db-tests / test-mysql (pull_request) Has been cancelled
docker-dryrun / container-amd64 (pull_request) Has been cancelled
docker-dryrun / container-arm64 (pull_request) Has been cancelled
docker-dryrun / container-riscv64 (pull_request) Has been cancelled
db-tests / test-mssql (pull_request) Has been cancelled
e2e-tests / test-e2e (pull_request) Has been cancelled
compliance / lint-go-windows (pull_request) Has been cancelled
compliance / lint-go-gogit (pull_request) Has been cancelled
Repositories with names starting with "." are now treated as system
repositories that are always private and cannot be made public. This is
enforced at every code path: API create, web create, migrate, template
create, push-to-create, API edit, web settings, and public access
settings. On creation paths, privacy is silently forced. On edit paths,
a clear error is returned.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-05-12 19:12:00 -05:00