OXYGENHUB

Changes up to # 101740454617 +4 touching crates/hub/tests/accounts.rs · 35

See as swimlanes (independent work side by side)

101740454617cd6966001ebd9d7f9f8bc566ca6766325e2f9137f3a9d19220dd+166f6e9bf4f134de4e0de65a2d4453aa82c04cbcff14f3854bb7e8a7ee361182+18e381ea88c294f19fcb8b14534e79555c91d2145018a7ed15b7a5787aa92f2d+89e89836cae7cc0b392a8a507ad38131ac4a3dbd1f8724d77372878f8e9f6f73+d23464c0ac60f60775ae362f92fa08a4b1413e8b1d89e146c1699944bc109c19 has 5 heads. The graph shows their union; heads are marked.
Readers never wait for a push or gc oh-comment-body-file
Andy McCall via agent:claude@andymccall agent ·
◈ 7c06f5b28ade
Live L4: the bell, the inbox and the dashboard (closes #206); /metrics, first slice (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ 8a48dd830178
A new hub gives administrator only to whoever brings its setup code
Andy McCall via Claude Code agent ·
✔ c8684d44d549
Postgres, step 3: the hub builds and passes its tests on PostgreSQL
Andy McCall via Claude Code agent ·
✔ 3b1bc27fe805
A security contact page; HSTS from [server] hsts_max_age
Andy McCall via Claude Code agent ·
✔ 2cbf6f348595
Sign up through an invitation with GitHub, GitLab or Google
Andy McCall via Claude Code agent ·
✔ 3ff52534f69b
Sessions are server-side records: random ids, expiry, listed and ended per browser
Andy McCall via Claude Code agent ·
✔ 0024ccb1b050
security.txt from a contact set under Administration
Andy McCall via Claude Code agent ·
✔ 3dd6582de060
Security headers on every response; CSP report-only with a report endpoint
Andy McCall via Claude Code agent ·
✔ d74ce22fa80e
Sign-in, 2FA codes, device codes and reset requests slow guessing
Andy McCall via Claude Code agent ·
✔ aa0bfbd11f02
Outbound requests only to public addresses
Andy McCall via Claude Code agent ·
✔ 9a777fec4ed9
HTTPS only: nothing taken over plain http through a proxy
Andy McCall via Claude Code agent ·
✔ 9a8e3b4419e0
Profile pulse: the last 3, 6, 9 or 12 months v0.5.2
Andy McCall via Claude Code agent ·
✔ c0095389312b
Profile pulse: the account's own span, fewer labels, neat chips
Andy McCall via Claude Code agent ·
✔ a2fbad481dd7
Profile: the year as a signal
Andy McCall via Claude Code agent ·
✔ 2a0c09c09716
Sign in with GitLab, and branded sign-in buttons v0.5.1
Andy McCall via Claude Code agent ·
✔ 810896d41be7
Notifications that reach you, and 2FA without the password twice
Andy McCall ·
✔ bff9106edcba
Mail: a service panel, and email that looks like OxygenHub
Andy McCall ·
✔ cd46e56b1709
Adding an assistant: provider presets and the endpoint's own model list
Andy McCall ·
✔ 155cab142b63
Administration is a sectioned page with a left-hand menu
Andy McCall ·
✔ e8e7158bbc73
Agents get their marks; contributors one row each; an assistant is tested when added
Andy McCall ·
✔ 206c1fc1b06a
Sign in with GitHub or Google
Andy McCall ·
✔ 83940d53664f
Accounts elsewhere on a profile: Bluesky, Mastodon, GitHub
Andy McCall ·
✔ 89e89836cae7
Variables for pipelines at the site, organisation and repository
Andy McCall ·
✔ 2a83f5303458
AI assistants: settings per site, organisation and repository
Andy McCall ·
✔ e71846aa07b9
Mail settings on the admin page, with a test message
Andy McCall ·
✔ 3556d08e17f9
Admin runner settings: job time limits; each job runs under its own
Andy McCall ·
✔ 5dead1f4f26d
Admins disable, enable and delete accounts
Andy McCall ·
✔ 6a1780558353
oh signs in through oxy's credential store; pin oxygen with oxy auth and remote bookmarks (refs andymccall/oxygen#47, #48)
Andy McCall ·
✔ 2bbe88a85860
One approval by default only where someone else can give it clear-waitingclose-proposal-140image-checkjob-waitsrun-one-jobwiki-says-sov0.1.0v0.2.0v0.3.0v0.3.1v0.4.0v0.4.1v0.4.2v0.5.0v0.5.1v0.5.2
Andy McCall ·
✔ ff6569530173
Organisation repositories require one sealed approval by default
Andy McCall ·
✔ 462f88d161ce
Fix 2FA sign-in: the second step sent password twice clear-waitingclose-proposal-140image-checkjob-waitsrun-one-jobwiki-says-sov0.1.0v0.2.0v0.3.0v0.3.1v0.4.0v0.4.1v0.4.2
Andy McCall ·
✔ 1b3a00986a5a
Organisation webhooks under the organisation's settings, sharing the repository webhook code; an admin storage page with sizes, loose objects and packs, and maintenance (oxy gc) per repository or for all
Andy McCall ·
✔ 8fb35df7d66e
Uploaded profile pictures and organisation logos: PNG, JPEG or WebP checked by content, cropped, scaled and re-encoded before storing, served at /avatar/{name} with the identicon as fallback, removable
Andy McCall ·
✔ a160b98fb922
Milestone 0.2: accounts and access
Andy McCall ·
✔ 19bb31ff1f5c