OXYGENHUB

Changes up to # 19bb31ff1f5c +6 touching crates/hub/src/web/mod.rs · 129

See as swimlanes (independent work side by side)

19bb31ff1f5c8ff9ba3d735ab52243e72182fbad1cfd352eaf986d65c9daee12+306aec1839aae6645613e3e938b1f191b7dfeb734eb71f0d91b1ff25fcebe688+42fa95540468b40f1710f40f1a79b1bea010c68de2bf9551876f2134644f8e09+745d225de3440f319d14ec371e609ef92a75aebe29802ffd110452153de41a07+93be9ce4653e32704c445475b3b3df34b72e8ca28723cb602770522bb7f71bf6+a9f1c0bf403a835fdb6fd6cf2d3e7fead9a773090d5bd86a160110da3a4cd686+b5668108487f12dd7f03ba9c52f7b95f82e8aab92c8c14f75cb949e7398a68c2 has 7 heads. The graph shows their union; heads are marked.
A phone as the second factor: Keystore keys approve sign-ins by the number the browser shows, and the sudo step asks a stale session again before sensitive changes (closes #356)
Andy McCall via agent:claude@andymccall agent ·
◈ a22e4aec2e28
OxygenHub 0.9.19: attachments on issues and comments, over the API and oh --attach; images by their bytes shown in place, everything else a download (closes #350) v0.9.19
Andy McCall via agent:claude@andymccall agent ·
◈ 1c52d940b4a0
Run a pipeline's WASM jobs in the browser tab (refs andymccall/oxygenflow#80); runner builds shared with the swarm (refs andymccall/oxygenflow#84); 0.9.15 v0.9.15
Andy McCall via agent:claude@andymccall agent ·
◈ c26267b3aba6
Resolve a proposal's conflicts on the web: the hub brings the target into the source bookmark, as oxy merge would, and opens the resolver; the proposal follows the resolution (closes #337)
Andy McCall via agent:claude@andymccall agent ·
◈ 217814c239f0
A default bookmark must exist: settings refuse a missing one, the overview stands in main with a note, an unknown name is not a bookmark, tag or change; Bookmarks › New bookmark makes one on the web (closes #345)
Andy McCall via agent:claude@andymccall agent ·
◈ 351cf57e5608
Runner updates: a build that rolls back on one runner is held
Andy McCall via agent:claude@andymccall agent ·
◈ faf5246c900e
Runner updates for an organisation's own runners
Andy McCall via agent:claude@andymccall agent ·
◈ dc5c64296b0a
Runner updates: policy, test groups and the offer
Andy McCall ·
◈ 8501fd5815b9
Create and withdraw tags on the website (closes #295, closes #301)
Andy McCall via agent:claude@andymccall agent ·
◈ ba0a55bb5b3c
A mistyped address shows the not-found page (closes #294)
Andy McCall via agent:claude@andymccall agent ·
◈ 8ad8e656a3a6
Embed a drop (closes #280)
Andy McCall via agent:claude@andymccall agent ·
◈ 8ac2aa4ca6d1
Comments on drops (refs #280)
Andy McCall via agent:claude@andymccall agent ·
◈ ca0c443c30cf
Star a drop (refs #280)
Andy McCall via agent:claude@andymccall agent ·
◈ c419455a82dd
Fork a drop (refs #280)
Andy McCall via agent:claude@andymccall agent ·
◈ adbc38e7ea09
A push reuses a job's pass on the same state (closes #265)
Andy McCall via agent:claude@andymccall agent ·
◈ 5588bb3631d2
Administration: a sidebar of grouped pages, one page per section (closes #288)
Andy McCall via agent:claude@andymccall agent ·
◈ 737de0fac722
Push without starting a run: [skip flow] (closes #284)
Andy McCall via agent:claude@andymccall agent ·
◈ 367f34b8e590
Drops: per-user gists, each a small hidden Oxygen repository (#279)
Andy McCall via agent:claude@andymccall agent ·
◈ 166f6e9bf4f1
Repository settings: one page per setting under a grouped sidebar (#278)
Andy McCall via agent:claude@andymccall agent ·
◈ c7067c7bda56
Secret scanning: scan existing history, remove an allowed fingerprint
Andy McCall via agent:claude@andymccall agent ·
◈ cb7b3cd45dc0
Push protection: refuse a push that adds what looks like a secret v0.6.0
Andy McCall via agent:claude@andymccall agent ·
◈ 0ee5c3fb32eb
Newest run wins: a proposal's new run supersedes its older ones
Andy McCall via agent:claude@andymccall agent ·
◈ a9f1c0bf403a
Trusted time on the hub: serve when witnesses first saw an entry cancel-landed-runs
Andy McCall via agent:claude@andymccall agent ·
◈ 13b27cb2200c
Agent tokens decide approval gates only where the repository allows it cancel-landed-runs
Andy McCall via agent:claude@andymccall agent ·
◈ 4a68f1064b08
Land when checks pass
Andy McCall via agent:claude@andymccall agent ·
◈ 86a69b53aff0
Insights: OxygenFlow's standard charts, for the site, an owner and a repository
Andy McCall via agent:claude@andymccall agent ·
◈ e97500b70f9a
Terraform state: list, download and restore kept versions
Andy McCall via agent:claude@andymccall agent ·
◈ 67523e06ed86
Repository bar: an Artifacts menu and a More menu
Andy McCall via agent:claude@andymccall agent ·
◈ 16ee5d19d220
Live L5: the issue page, the overview and Diffusion (closes #207)
Andy McCall via agent:claude@andymccall agent ·
◈ a10446c68043
Live L4: the bell, the inbox and the dashboard (closes #206); /metrics, first slice (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ 8a48dd830178
Hubs witness each other's transparency logs (step A5)
Andy McCall via agent:claude@andymccall agent ·
◈ 4f40eed0588f
The hub's transparency log (step 1 of docs/transparency.md)
Andy McCall via agent:claude@andymccall agent ·
◈ 965b950f9b96
Drafts stream into the editor as the assistant writes them
Andy McCall via Claude Code agent ·
✔ 119fd17d213f
Flow priorities: an organisation's level, and a cap on expedited runs api-unknown-fieldscancel-landed-runsdiffusion-pin-bookmarkdraft-readyoh-comment-body-fileproposal-list-fastv0.6.0v0.6.1v0.7.0v0.8.0v0.9.0v0.9.1v0.9.2v0.9.3v0.9.4v0.9.5v0.9.6v0.9.7v0.9.8v0.9.9
Andy McCall via Claude Code agent ·
✔ 76f93eaefe45
Flow: SLSA provenance for artifacts, in DSSE, that cosign verifies
Andy McCall via Claude Code agent ·
✔ 076c7a7c86b1
Flow priorities: site, organisation and repository levels, and expediting a run
Andy McCall via Claude Code agent ·
✔ 107eaba52c9d
A security contact page; HSTS from [server] hsts_max_age
Andy McCall via Claude Code agent ·
✔ 2cbf6f348595
Live pages L3: the proposal page updates itself
Andy McCall via Claude Code agent ·
✔ b5a0a69b3622
Live pages L2: GET /live?topics= and the hub.js client
Andy McCall via Claude Code agent ·
✔ 67be8ac00c24
Environments: the token names the environment once approved; a Deployments page
Andy McCall via Claude Code agent ·
✔ b644e1757711
Approval gates: a job waits for a person with the role
Andy McCall via Claude Code agent ·
✔ 417184c73f4e
The Code panel offers git clone when the Git mirror is on
Andy McCall via Claude Code agent ·
✔ 7b17d570d7ee
Sessions are server-side records: random ids, expiry, listed and ended per browser
Andy McCall via Claude Code agent ·
✔ 0024ccb1b050
security.txt from a contact set under Administration
Andy McCall via Claude Code agent ·
✔ 3dd6582de060
Security headers on every response; CSP report-only with a report endpoint
Andy McCall via Claude Code agent ·
✔ d74ce22fa80e
UI polish: keys, backups, wiki, editor, bookmarks, summaries, backdrops v0.5.0
Andy McCall ·
✔ ffb67a81188c
Notifications that reach you, and 2FA without the password twice
Andy McCall ·
✔ bff9106edcba
Backups API: settings, TEST, back up now and runs
Andy McCall ·
✔ 2e9188ca4f98
Rerun one job of a run, with what depends on it
Andy McCall ·
✔ e8fa53694f68
Backups per repository: leave one out, or give it its own schedule
Andy McCall ·
✔ d3b048b27277
older