repo permissions section is not functional

internal/api/router.go

@@ -43,6 +43,7 @@ func New(cfg *config.Config, engine *xorm.Engine, store sessions.Store, staticFi
 	gitH     := handlers.NewGitHTTPHandler(engine, cfg)
 	issueH   := handlers.NewIssueHandler(engine)
 	sshKeyH  := handlers.NewSSHKeyHandler(engine)
+	memberH  := handlers.NewMemberHandler(engine)
 
 	// ── Git smart-HTTP transport ───────────────────────────────────────────────
 	// These routes MUST be registered before the SPA catch-all and outside CSRF.
@@ -134,6 +135,12 @@ func New(cfg *config.Config, engine *xorm.Engine, store sessions.Store, staticFi
 						r.Get("/", pipeH.List)
 						r.Get("/{runID}", pipeH.Get)
 					})
+					r.Route("/members", func(r chi.Router) {
+						r.Get("/", memberH.List)
+						r.With(csrf).Post("/", memberH.Add)
+						r.With(csrf).Patch("/{username}", memberH.UpdatePermission)
+						r.With(csrf).Delete("/{username}", memberH.Remove)
+					})
 				})
 			})
 		})