KamoCRM

Org marketing websites — member, platform, edge and webhook APIs

FeatureSecurityService
Shipped
November 11, 2026 at 6:46 AM UTC
Author
Kamo
Commit
15721a4

- **************** site, preview pass, change requests (+ pictures), cancel, source.zip (Forgejo archive streamed, audited), get-a-website lead, connect-www (ownership-verified apex only, creates the www alias row, never DNS). Owner OR MANAGE_MARKETING_SITE. - /platform/**: sites CRUD, pause/resume, preview pass, request queue, status, Send To SI (sibling of the system-bug dispatch: own audit table, per-request throttle, WEB-<n> folder, site checkout cwd, member text quoted as untrusted). Reads: god-eligible OR the platform right. - **************** for the site edge (X-Site-Edge-Token); Redis single-use preview tickets (SHA-256 only, 60 s). - /api/marketing-sites/webhook: HMAC-verified Forgejo pushes, Kamo-Request: WEB-<n> trailers; deploy tracker (ForgejoStatusClient takes an owner per call; changelog unchanged), own storage. - Billing listener **************** and GRACE -> OFFLINE sweep. - Chat key origins opened for preview/public hosts; marketing.site.changed, org marketing-site and **************** signals. - MANAGE_MARKETING_SITE seeded for administrators; k8s env for the three new secrets.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing