OXYGENHUB

Changes up to # 34beb1a7e376 +6 touching crates/hub/tests/accounts.rs · 33

See as swimlanes (independent work side by side)

34beb1a7e37689fe3ebcff9b8a63e5f900047cbb38793e4d2bbf0324bc6c6bae+3556d08e17f96274207d9960d92fe2c0ea228f8642e2ce2d248883071116abfe+42fa95540468b40f1710f40f1a79b1bea010c68de2bf9551876f2134644f8e09+8a48dd83017887dd6e31775ac1ad4684d223e9932110c29841b8eb63fbd21449+93be9ce4653e32704c445475b3b3df34b72e8ca28723cb602770522bb7f71bf6+a6d824c5ebf565d6c29e00acb4f646d80640a7810e3eda0c6953099ec4adb9a0+b9b74d997cecc19ad363184695f1a78118182c4d774906efbee092d671bfc54f has 7 heads. The graph shows their union; heads are marked.
Live L4: the bell, the inbox and the dashboard (closes #206); /metrics, first slice (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ 8a48dd830178
A new hub gives administrator only to whoever brings its setup code
Andy McCall via Claude Code agent ·
✔ c8684d44d549
Postgres, step 3: the hub builds and passes its tests on PostgreSQL
Andy McCall via Claude Code agent ·
✔ 3b1bc27fe805
A security contact page; HSTS from [server] hsts_max_age
Andy McCall via Claude Code agent ·
✔ 2cbf6f348595
Sign up through an invitation with GitHub, GitLab or Google
Andy McCall via Claude Code agent ·
✔ 3ff52534f69b
Sessions are server-side records: random ids, expiry, listed and ended per browser
Andy McCall via Claude Code agent ·
✔ 0024ccb1b050
security.txt from a contact set under Administration
Andy McCall via Claude Code agent ·
✔ 3dd6582de060
Security headers on every response; CSP report-only with a report endpoint
Andy McCall via Claude Code agent ·
✔ d74ce22fa80e
Sign-in, 2FA codes, device codes and reset requests slow guessing
Andy McCall via Claude Code agent ·
✔ aa0bfbd11f02
Outbound requests only to public addresses
Andy McCall via Claude Code agent ·
✔ 9a777fec4ed9
HTTPS only: nothing taken over plain http through a proxy
Andy McCall via Claude Code agent ·
✔ 9a8e3b4419e0
Profile pulse: the last 3, 6, 9 or 12 months v0.5.2
Andy McCall via Claude Code agent ·
✔ c0095389312b
Profile pulse: the account's own span, fewer labels, neat chips
Andy McCall via Claude Code agent ·
✔ a2fbad481dd7
Profile: the year as a signal
Andy McCall via Claude Code agent ·
✔ 2a0c09c09716
Sign in with GitLab, and branded sign-in buttons v0.5.1
Andy McCall via Claude Code agent ·
✔ 810896d41be7
Notifications that reach you, and 2FA without the password twice
Andy McCall ·
✔ bff9106edcba
Adding an assistant: provider presets and the endpoint's own model list
Andy McCall ·
✔ 155cab142b63
Administration is a sectioned page with a left-hand menu
Andy McCall ·
✔ e8e7158bbc73
Agents get their marks; contributors one row each; an assistant is tested when added
Andy McCall ·
✔ 206c1fc1b06a
Sign in with GitHub or Google
Andy McCall ·
✔ 83940d53664f
Accounts elsewhere on a profile: Bluesky, Mastodon, GitHub
Andy McCall ·
✔ 89e89836cae7
Variables for pipelines at the site, organisation and repository
Andy McCall ·
✔ 2a83f5303458
AI assistants: settings per site, organisation and repository
Andy McCall ·
✔ e71846aa07b9
Mail settings on the admin page, with a test message
Andy McCall ·
✔ 3556d08e17f9
Admin runner settings: job time limits; each job runs under its own
Andy McCall ·
✔ 5dead1f4f26d
Admins disable, enable and delete accounts
Andy McCall ·
✔ 6a1780558353
oh signs in through oxy's credential store; pin oxygen with oxy auth and remote bookmarks (refs andymccall/oxygen#47, #48)
Andy McCall ·
✔ 2bbe88a85860
One approval by default only where someone else can give it clear-waitingclose-proposal-140image-checkjob-waitsrun-one-jobwiki-says-sov0.1.0v0.2.0v0.3.0v0.3.1v0.4.0v0.4.1v0.4.2v0.5.0v0.5.1v0.5.2
Andy McCall ·
✔ ff6569530173
Organisation repositories require one sealed approval by default
Andy McCall ·
✔ 462f88d161ce
Fix 2FA sign-in: the second step sent password twice clear-waitingclose-proposal-140image-checkjob-waitsrun-one-jobwiki-says-sov0.1.0v0.2.0v0.3.0v0.3.1v0.4.0v0.4.1v0.4.2
Andy McCall ·
✔ 1b3a00986a5a
Organisation webhooks under the organisation's settings, sharing the repository webhook code; an admin storage page with sizes, loose objects and packs, and maintenance (oxy gc) per repository or for all
Andy McCall ·
✔ 8fb35df7d66e
Uploaded profile pictures and organisation logos: PNG, JPEG or WebP checked by content, cropped, scaled and re-encoded before storing, served at /avatar/{name} with the identicon as fallback, removable
Andy McCall ·
✔ a160b98fb922
Milestone 0.2: accounts and access
Andy McCall ·
✔ 19bb31ff1f5c