feat(git): Role-based push permissions with service-bound auth#441

Merged

tlongwell-block merged 14 commits into

mainfrom

feature/git-permissions

May 1, 2026

Commits on May 1, 2026

feat(git-perms): core types, policy engine, and hook plumbing

Tyler Longwell
authored and
tlongwell-block
committed
feat(git-perms): wire up policy endpoint and hook installation

Tyler Longwell
authored and
tlongwell-block
committed
fix(git-perms): rewrite hook HMAC computation to fix sort mismatch

Tyler Longwell
authored and
tlongwell-block
committed
fix(git-perms): prevent Guest escalation when rule lacks push:role

Tyler Longwell
authored and
tlongwell-block
committed
fix(git-perms): address remaining review findings

Tyler Longwell
authored and
tlongwell-block
committed
fix(git-perms): forward-compat for unknown rules + stale comments

Tyler Longwell
authored and
tlongwell-block
committed
fix(git-perms): address integration security findings

Tyler Longwell
authored and
tlongwell-block
committed
fix(git-perms): harden permissions engine + service-bound auth

Tyler Longwell
authored and
tlongwell-block
committed
git-perms: promote Bot→Member at policy layer for git push
tlongwell-block
committed
git-perms: punch list hardening (7.5→9/10)
tlongwell-block
committed
fmt: fix rustfmt formatting in config.rs
tlongwell-block
committed
fix: clippy format_in_format_args in HMAC test
tlongwell-block
committed
fix: NIP-98 URL verification — use bare repo root (no ?service=)
tlongwell-block
committed
fmt: rustfmt transport.rs
tlongwell-block
committed