OXYGENHUB

Changes up to # 045340293dc7 +2 touching crates/oxy-core/src/protocol.rs · 38

See as swimlanes (independent work side by side)

045340293dc769e20918184984a2a99a12c9bd4ce37ad58ad1b0fa7b166ff0a6+a42f9fb47e372ab21e8cd0ae30848c76d031e43dca3c50d276f33b5ada337605+dab94366a4f07768eb7bb7b508e4cb04eb877859a8e12150de3fd426d40efd05 has 3 heads. The graph shows their union; heads are marked.
Fall back from a checkout's own token only when the hub does not know it (401), never when it refuses it for permission (refs #155)
Andy McCall via agent:claude@andymccall agent ·
◈ 0588de69a84d
A refused checkout token falls back to this computer's sign-in for the hub, and says so (closes #155)
Andy McCall via agent:claude@andymccall agent ·
◈ 569802ebae0e
A shallow clone fetches its checkpoint in parts (refs #137)
Andy McCall via agent:claude@andymccall agent ·
◈ 80b069facc69
Depth 0 takes no change, and a checkpoint is gathered in parallel (refs #137) v0.6.0v0.7.0
Andy McCall via agent:claude@andymccall agent ·
◈ f3811eb20bea
A push no longer passes a proxy's request limit (closes #133)
Andy McCall via agent:claude@andymccall agent ·
◈ d3b270909c78
Old clients are not sent tags only a certificate authorizes (closes #131)
Andy McCall via agent:claude@andymccall agent ·
◈ ee130dd9eef2
Keyless agents create release tags: receive and fetch authorize certified tag keys
Andy McCall via agent:claude@andymccall agent ·
◈ 1ec6fdbc6bcb
oxy-server: a host may refuse a push by what it adds (Backend::vet_push) keyless-tagsv0.5.0
Andy McCall via agent:claude@andymccall agent ·
◈ 67a4fe1aa2d5
Trusted time: judge a fetched attestation at its integrated time
Andy McCall via agent:claude@andymccall agent ·
◈ 028545dfa7a4
Fetch checks the host's transparency log (spec §14.8)
Andy McCall via agent:claude@andymccall agent ·
◈ 4b9d06778581
Grants let certified keys act for an author (keyless step 5a)
Andy McCall ·
✔ a2387d547373
The issuer countersigns when it accepted a certified update (keyless step 4c)
Andy McCall ·
✔ f53cbe7a204e
Certified keys may push under a subject grant (keyless step 4b)
Andy McCall via Claude Code agent ·
✔ f0a517d28237
Fall back to a parent's token when a stored one is refused; send the signer's identity with a bookmark move v0.4.4
Andy McCall ·
✔ 68a924846379
Strata: S3, Google Cloud Storage and Azure Blob Storage stores
Andy McCall ·
✔ 8d80356371c5
Strata: a repository kept on a store, as a remote
Andy McCall ·
✔ 9f9e72b93e4e
Clones and remote add store a local path absolute v0.3.0
Andy McCall ·
✔ 827281eed2ed
Remote bookmarks work like local ones; a newer format names the oxy that cannot read it (closes #48, closes #49)
Andy McCall ·
✔ 14edbaaf5291
Sign in once per hub: oxy auth login, status and logout (closes #47)
Andy McCall ·
✔ ff1f62fee654
Change format 3: text blobs hold the lines' bytes v0.1.0
Andy McCall ·
✔ 0f93f49ce059
Move changes as stored in a fetch on one machine
Andy McCall ·
✔ 2c75672fb2fe
Render a file that is one chain of lines without contracting it
Andy McCall ·
✔ 598009a75f6c
Store large inserts as text blobs (change format 2)
Andy McCall ·
✔ 6f8aeb996558
oxy doctor, and failures that say what to do next
Andy McCall ·
✔ 3e5772ccf9da
Delegate rule on fetch and tags too resolution
Andy McCall ·
✔ eae595568832
Host API: changes from an edit set, delegate-signed reference updates
Andy McCall ·
✔ 84b9e9ac0ab4
Roadmap: phase D done
Andy McCall ·
✔ 4213c41dfc64
Proposal clients: oxy seal --proposal, oxy proposal show|land, seal-only pushes, http_get for hub APIs
Andy McCall ·
✔ d82e44097323
Unbound hosted repositories adopt the first pusher's id
Andy McCall ·
✔ 75167672ebcd
Lazy blobs: clone --max-blob / filter.max-blob, absent-blob registry fetched on first read, objects endpoint (spec 0.6e)
Andy McCall ·
✔ b3c5a59a875a
Identity lifecycle: rotate, renew, delegates, revoke; expiry checks; policy roots, thresholds, proposals and oxy policy sign; policy chains served on refs and carried in push bundles (spec 0.6n)
Andy McCall ·
✔ 28fc23d7706a
Tags: immutable named states with tag attestations, in views and on the wire, policy-governed, exported to Git (spec 0.6h)
Andy McCall ·
✔ 132b884b9a8d
Shallow clone: clone --depth, checkpoint and shallow endpoints, boundary-aware import and negotiation, oxy deepen; log from state metadata (spec 0.6g)
Andy McCall ·
✔ 2863456a0f6d
Trust policy: policy objects, init/grant/revoke, enforcement on push and fetch, propagation with downgrade protection (spec 0.6)
Andy McCall ·
✔ 83e0677b07fe
TLS: oxy serve --tls-cert/--tls-key via rustls; remote.<name>.ca and OXY_CA for self-hosted roots
Andy McCall ·
✔ 2b5ee371060e
HTTP transport: CBOR wire messages, HttpRemote client, oxy-server crate with bearer-token pushes, oxy serve
Andy McCall ·
✔ 750251b21a96
Remotes report stale attestations as absent but keep the last serial; remotes test expectations agents-in-readmebare-hashescarry-identicalonly-help-103switch-saysv0.1.0v0.2.0v0.3.0v0.3.1v0.4.0v0.4.1v0.4.2v0.4.3v0.4.4
Andy McCall ·
✔ 4161262eeb29
Remotes: local transport, push with seals and reference attestations, fetch, pull as state union, clone
Andy McCall ·
✔ 5b9c6ad45f6e