OXYGENHUB

Changes up to # 0024ccb1b050 +4 touching crates/hub/tests/accounts.rs · 24

See as swimlanes (independent work side by side)

0024ccb1b05029300c29ddf888be7513897fa381fc0e0e7b8661e3f00229d460+19bb31ff1f5c8ff9ba3d735ab52243e72182fbad1cfd352eaf986d65c9daee12+810896d41be780e42f5a7b63a33edcf49b94a106fce7e31212202a5f922b13ac+83940d53664f90b19c6f5baa2c14c3c53ab01c1728d8936684dee85928050c6a+93be9ce4653e32704c445475b3b3df34b72e8ca28723cb602770522bb7f71bf6 has 5 heads. The graph shows their union; heads are marked.
Sessions are server-side records: random ids, expiry, listed and ended per browser head
Andy McCall via Claude Code agent ·
✔ 0024ccb1b050
security.txt from a contact set under Administration
Andy McCall via Claude Code agent ·
✔ 3dd6582de060
Security headers on every response; CSP report-only with a report endpoint
Andy McCall via Claude Code agent ·
✔ d74ce22fa80e
Sign-in, 2FA codes, device codes and reset requests slow guessing
Andy McCall via Claude Code agent ·
✔ aa0bfbd11f02
Outbound requests only to public addresses
Andy McCall via Claude Code agent ·
✔ 9a777fec4ed9
HTTPS only: nothing taken over plain http through a proxy
Andy McCall via Claude Code agent ·
✔ 9a8e3b4419e0
Profile: the year as a signal
Andy McCall via Claude Code agent ·
✔ 2a0c09c09716
Sign in with GitLab, and branded sign-in buttons v0.5.1
Andy McCall via Claude Code agent ·
✔ 810896d41be7
Notifications that reach you, and 2FA without the password twice
Andy McCall ·
✔ bff9106edcba
Adding an assistant: provider presets and the endpoint's own model list
Andy McCall ·
✔ 155cab142b63
Administration is a sectioned page with a left-hand menu
Andy McCall ·
✔ e8e7158bbc73
Agents get their marks; contributors one row each; an assistant is tested when added
Andy McCall ·
✔ 206c1fc1b06a
Sign in with GitHub or Google
Andy McCall ·
✔ 83940d53664f
Accounts elsewhere on a profile: Bluesky, Mastodon, GitHub
Andy McCall ·
✔ 89e89836cae7
Variables for pipelines at the site, organisation and repository
Andy McCall ·
✔ 2a83f5303458
AI assistants: settings per site, organisation and repository
Andy McCall ·
✔ e71846aa07b9
Mail settings on the admin page, with a test message
Andy McCall ·
✔ 3556d08e17f9
Admin runner settings: job time limits; each job runs under its own
Andy McCall ·
✔ 5dead1f4f26d
Admins disable, enable and delete accounts
Andy McCall ·
✔ 6a1780558353
oh signs in through oxy's credential store; pin oxygen with oxy auth and remote bookmarks (refs andymccall/oxygen#47, #48)
Andy McCall ·
✔ 2bbe88a85860
Fix 2FA sign-in: the second step sent password twice clear-waitingclose-proposal-140image-checkjob-waitsrun-one-jobwiki-says-sov0.1.0v0.2.0v0.3.0v0.3.1v0.4.0v0.4.1v0.4.2
Andy McCall ·
✔ 1b3a00986a5a
Organisation webhooks under the organisation's settings, sharing the repository webhook code; an admin storage page with sizes, loose objects and packs, and maintenance (oxy gc) per repository or for all
Andy McCall ·
✔ 8fb35df7d66e
Uploaded profile pictures and organisation logos: PNG, JPEG or WebP checked by content, cropped, scaled and re-encoded before storing, served at /avatar/{name} with the identicon as fallback, removable
Andy McCall ·
✔ a160b98fb922
Milestone 0.2: accounts and access
Andy McCall ·
✔ 19bb31ff1f5c