-**Sign in once per hub: `oxy auth login`, `status` and `logout` (#47).**`oxy auth login https://oxygenhub.io` signs in through the browser, and every repository on that hub then clones, fetches and pushes with the token, subrepos included. Nothing secret goes into a checkout any more.
6
- The token is kept in `~/.config/oxy/credentials.toml`, readable by you only, or in the system keyring through a Git credential helper (`oxy config --user auth.helper libsecret`).
7
-`--with-token` reads a token from standard input, for CI and scripts. `oxy auth logout` also revokes the token on the hub.
8
- A token goes over `https` only (plain `http` only to this machine), never to another host after a redirect. A credentials file that others can read is ignored.
9
- Lookup order: `remote.<name>.token`, `OXY_TOKEN`, the store, then an enclosing checkout's remote on the same hub. Clones no longer copy a token into a subrepo's configuration.
10
- Identity secret keys are now created owner-only, rather than tightened just after being written.
Measured on the Linux kernel's tree (95 943 files); `docs/benchmarks.md` has the tables.
13
14
-**Faster than Git on the first commit, a clean status, fsck, gc and the pack's size.**
15
-**First commit:** 21.9 s (Git 33.7 s).
16
-**Clean status:** 0.17 to 0.19 s (Git 0.22 s).
17
-**fsck:** 8.2 s (Git 12.6 s).
18
-**gc:** 33.7 s (Git 70 s).
19
-**The pack:** 293.5 MB (Git's 295.5 MB).
20
-**Level with Git on a local clone (about 17 s).** Status with one file changed, diff, commit, log, blame and checkout are two to six times faster than at 0.1.0. They are still behind Git:
21
-**Status with one file changed:** 0.41 s, against 0.22 s.
22
-**Commit:** 0.67 s, against 0.21 s.
23
-**Blame:** 0.16 s, against 0.07 s.
24
-**Checkout:** 0.74 s, against 0.35 s.
25
-**A project's `.gitignore` files count**, below `.oxyignore`. A project coming from Git no longer commits its build output, and `!` in `.oxyignore` can bring back what `.gitignore` leaves out. Ignore rules still apply to untracked paths only.
26
-**A folder holding a repository of its own is named.**`oxy status`, `oxy commit` and `status --json` (`untracked_nested`) name a folder with its own `.git` or `.oxy`, rather than skipping it silently. They say how to track its files, keep it as a subrepo, or leave it out.
27
-**`oxy rebase CHANGE --onto T --into-working-copy`.** Where a rebase would be conflicted, the target is merged into the current bookmark instead, and the conflict is resolved in the working copy, as after `oxy merge`.
28
-**mimalloc is the allocator.** Most of the speed above came from it: status, walks and index loads allocate many small values from every thread.
29
-**Internals.** Each item below is a cache and is rebuilt when it does not check:
30
- the workspace manifest is a checksummed binary file;
31
- the state index is decoded lazily, caught up by replaying a few changes, and kept for the last two states;
32
- the store caches change metadata;
33
- a pack can carry a trained zstd dictionary.
34
35
##0.1.0 (2026-09-30)
36
37
-**The first builds for people to download.**
38
- Linux x86_64 and arm64 (glibc 2.28 or later) as `.tar.gz` and `.deb`.
39
- macOS x86_64 and arm64.
40
- Windows x86_64.
41
42
All are cross-compiled from Linux with `scripts/dist.sh`, with SHA256SUMS. A prerelease: formats may still change before 1.0.