Repositories, source and discovery
Open an accessible repository to browse source, history, selected files and exact comparisons. Private remains the safe default. A successful creation does not enroll a runner or configure a deployment.
Native hosted
Artifacts owns canonical Git; Golf stores repository identity, owner, default branch, grants and visibility in D1. Git ingress uses Golf's current authorization and short-lived brokered provider access. Anonymous browsing and HTTPS clone are enabled only for explicitly public repositories.
The retained demo publishes mj/fastapi; other repositories remain private. Published owner profiles can show Markdown README, topics and up to six currently public pins. D1-backed discovery uses server pagination. Revoking visibility or access also affects cached-source/profile-pin reads at the documented boundaries.
Portable
Fresh installs use Forgejo through supported APIs; Golf has its own identity/session store. Repository access still depends on current native permissions and credential scopes. Use the displayed clone URL, not a Golf password or read-only Golf API credential as a direct Git password.
Source is an observation
Selecting exact object IDs fixes the selected content, but does not preserve permission. Reads recheck current access. Directory/file/diff response limits are explicit; an unsupported large result is refused rather than silently truncated.
Use Git access, pull requests, repository creation and the installation capability view. Those detailed portable contract references include historical source qualification; do not infer identical native adapters for every RPC.
Commit diffs
Select an exact commit and its supported comparison base. A provider diff is a bounded source observation, not independent patch-completeness evidence or a merge readiness decision. Root/first-parent and native same-repository comparison contracts have explicit formatter/size limits.
Preview limits
Source browsing can refuse oversized files, directories and diff responses. An error is distinct from an empty result. This source-content preview is different from a deployed protected PR preview.