Backlog 4: device sign-in logged 6e2b12dfe6ec

2. - [x] **oxy on projects coming from Git**: say when a folder holding

   `.git` is skipped (oxygen#43), and honour `.gitignore` or offer to import

   it (oxygen#44).

   the web with password and 2FA, and the app receives a scoped token. The

   Android client needs it.

4. - [ ] **An Android build image** for OxygenFlow (oxygenflow#19): JDK,

- 2026-10-01 01:35 **S7 measured, not done.** The first commit of the Linux tree peaks at 2.7 GB (counting allocator; 3.1 GB resident): the walk holds every file's text (1.6 GB, shared with the change's inserts), building the change adds 0.5 GB, and encoding and storing adds 0.5 GB at the peak. Writing the change's encoding an edit at a time instead of through one CBOR value saved only 50 MB, so it was not kept. Under 2 GB needs the text never all in memory: the walk stores each added text file as its text blob as it reads it and keeps only the reference; the builder makes skeleton inserts (lines left out, a `TextRef` beside them, as history-only loads already hold changes); encoding, the commit's re-encoding, history rewrites and adding the change to a state take the skeleton and its texts. Rename detection still reads the contents of added files when files were removed. A day's careful work across objects, snapshot, commit and rewrite: left for a fresh start, with this as the design.

- 2026-10-01 01:40 **#43 and #44 done** (6ccc36f2, 0a4aa7fc). `.gitignore` and `.ignore` count below `.oxyignore` in each directory; the base's files are not matched against ignore rules (they apply to untracked paths only), which kept status at its speed on the Linux tree's 405 `.gitignore` files; an added file a later rule names drops out. Status (clean too), commit and `status --json` name folders holding a repository of their own. Andy's oxygen checkout now lists the five `games_to_port/` clones; listing the folder in `.oxyignore` quiets it (left to Andy). Flow run #156 passes.