OXYGENHUB

Changes up to # b63fc7a77fc6 touching crates/oxy-server/src/lib.rs · 21

See as swimlanes (independent work side by side)

A tag can be withdrawn, by a signed withdrawal (oxygenhub#301) identical-sidespush-notessubrepo-pin-statev0.6.0v0.7.0v0.8.0v0.9.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ b63fc7a77fc6
Old clients are not sent tags only a certificate authorizes (closes #131)
Andy McCall via agent:claude@andymccall agent ·
◈ ee130dd9eef2
oxy-server: a host may refuse a push by what it adds (Backend::vet_push) keyless-tagsv0.5.0
Andy McCall via agent:claude@andymccall agent ·
◈ 67a4fe1aa2d5
Fetch checks the host's transparency log (spec §14.8)
Andy McCall via agent:claude@andymccall agent ·
◈ 4b9d06778581
Push a long history in parts
Andy McCall ·
✔ cb8b8082fa73
Remote bookmarks work like local ones; a newer format names the oxy that cannot read it (closes #48, closes #49)
Andy McCall ·
✔ 14edbaaf5291
Push errors name the bookmark and the failing step agents-in-readmebare-hashescarry-identicalonly-help-103switch-saysv0.1.0v0.2.0v0.3.0v0.3.1v0.4.0v0.4.1v0.4.2v0.4.3
Andy McCall ·
✔ be451356e3ef
A bare repository's default bookmark is its host's to protect
Andy McCall ·
✔ 8c30d814f2cc
Delete bookmarks on a remote: oxy push REMOTE --delete NAME
Andy McCall ·
✔ f8c695764c95
Roadmap: phase B done
Andy McCall ·
✔ be0161a88dd7
oxy-server: after_push receives the request headers, so a host can attribute the push
Andy McCall ·
✔ 76f752503e7e
Challenge signatures and a push report for hosts
Andy McCall ·
✔ 7aa2dc9369e3
Seals adopt anonymous changes; oxy seal command resolution
Andy McCall ·
✔ 05e71ed6cdf1
Unbound hosted repositories adopt the first pusher's id
Andy McCall ·
✔ 75167672ebcd
Bare repositories and an embeddable protocol server for Oxygenhub
Andy McCall ·
✔ e02bf0cd0533
Lazy blobs: clone --max-blob / filter.max-blob, absent-blob registry fetched on first read, objects endpoint (spec 0.6e)
Andy McCall ·
✔ b3c5a59a875a
Tags: immutable named states with tag attestations, in views and on the wire, policy-governed, exported to Git (spec 0.6h)
Andy McCall ·
✔ 132b884b9a8d
Shallow clone: clone --depth, checkpoint and shallow endpoints, boundary-aware import and negotiation, oxy deepen; log from state metadata (spec 0.6g)
Andy McCall ·
✔ 2863456a0f6d
Trust policy: policy objects, init/grant/revoke, enforcement on push and fetch, propagation with downgrade protection (spec 0.6)
Andy McCall ·
✔ 83e0677b07fe
TLS: oxy serve --tls-cert/--tls-key via rustls; remote.<name>.ca and OXY_CA for self-hosted roots
Andy McCall ·
✔ 2b5ee371060e
HTTP transport: CBOR wire messages, HttpRemote client, oxy-server crate with bearer-token pushes, oxy serve
Andy McCall ·
✔ 750251b21a96