OXYGENHUB

Changes up to # 367f34b8e590 +6 touching docs/spec.md · 178

See as swimlanes (independent work side by side)

367f34b8e590b83920b391fbe78d201500c6b051145d52f8f6f2d9c060f8fa67+42fa95540468b40f1710f40f1a79b1bea010c68de2bf9551876f2134644f8e09+737de0fac722a374682d543f516fc6db72e23720c34476f3c4de1fa2921bbfcb+93be9ce4653e32704c445475b3b3df34b72e8ca28723cb602770522bb7f71bf6+a7e6e8e6094c0a836ddde37499e7b44d64db9db4a3404d871eaa92682aea12c6+a9f1c0bf403a835fdb6fd6cf2d3e7fead9a773090d5bd86a160110da3a4cd686+b5668108487f12dd7f03ba9c52f7b95f82e8aab92c8c14f75cb949e7398a68c2 has 7 heads. The graph shows their union; heads are marked.
Administration: a sidebar of grouped pages, one page per section (closes #288) head
Andy McCall via agent:claude@andymccall agent ·
◈ 737de0fac722
Push without starting a run: [skip flow] (closes #284)
Andy McCall via agent:claude@andymccall agent ·
◈ 367f34b8e590
Drops: per-user gists, each a small hidden Oxygen repository (#279)
Andy McCall via agent:claude@andymccall agent ·
◈ 166f6e9bf4f1
Repository settings: one page per setting under a grouped sidebar (#278)
Andy McCall via agent:claude@andymccall agent ·
◈ c7067c7bda56
Secret scanning: scan existing history, remove an allowed fingerprint
Andy McCall via agent:claude@andymccall agent ·
◈ cb7b3cd45dc0
Carry events between the hub's processes on an event bus
Andy McCall via agent:claude@andymccall agent ·
◈ 33d98147511b
Run the hub as web and worker processes, singletons under a leader lock
Andy McCall via agent:claude@andymccall agent ·
◈ e57765dee61a
Push protection: refuse a push that adds what looks like a secret v0.6.0
Andy McCall via agent:claude@andymccall agent ·
◈ 0ee5c3fb32eb
Newest run wins: a proposal's new run supersedes its older ones
Andy McCall via agent:claude@andymccall agent ·
◈ a9f1c0bf403a
Land when checks pass
Andy McCall via agent:claude@andymccall agent ·
◈ 86a69b53aff0
Land now, over the checks
Andy McCall via agent:claude@andymccall agent ·
◈ 2a8b621676b4
Readers never wait for a push or gc oh-comment-body-file
Andy McCall via agent:claude@andymccall agent ·
◈ 7c06f5b28ade
Insights: OxygenFlow's standard charts, for the site, an owner and a repository
Andy McCall via agent:claude@andymccall agent ·
◈ e97500b70f9a
Terraform state: list, download and restore kept versions
Andy McCall via agent:claude@andymccall agent ·
◈ 67523e06ed86
Terraform state: reading one needs the write role
Andy McCall via agent:claude@andymccall agent ·
◈ bb018142cca7
Repository bar: an Artifacts menu and a More menu
Andy McCall via agent:claude@andymccall agent ·
◈ 16ee5d19d220
Metrics: the bytes pushes and fetches carry cancel-landed-runsoh-comment-body-filev0.6.0
Andy McCall via agent:claude@andymccall agent ·
◈ 85ec74fd82d8
Metrics: OxygenFlow runs and runners' heartbeats, and mail
Andy McCall via agent:claude@andymccall agent ·
◈ 2c47eecfeab6
/metrics: database pool, pushes and backups (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ a6d824c5ebf5
/metrics: HTTP requests by route class with latency histograms (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ b9b74d997cec
Live L4: the bell, the inbox and the dashboard (closes #206); /metrics, first slice (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ 8a48dd830178
The hub keeps Terraform and OpenTofu state (closes #252)
Andy McCall via agent:claude@andymccall agent ·
◈ 8dcaeeb848c6
Hubs witness each other's transparency logs (step A5)
Andy McCall via agent:claude@andymccall agent ·
◈ 4f40eed0588f
Refs answers carry the transparency log (step A3)
Andy McCall via agent:claude@andymccall agent ·
◈ e5b97ac399e7
The hub's transparency log (step 1 of docs/transparency.md)
Andy McCall via agent:claude@andymccall agent ·
◈ 965b950f9b96
Agents push with their grant token
Andy McCall via agent:claude@andymccall agent ·
✔ 559c39204234
Agent grants: agents act for their owner with no key (keyless step 5)
Andy McCall ·
✔ 8aa5ef384ef1
Keyless step 3, hub: receipts signed by a key the hub certified are kept
Andy McCall via Claude Code agent ·
✔ 2c31915f5c89
Keyless step 2: the hub certifies fresh keys for ten minutes
Andy McCall via Claude Code agent ·
✔ 026a76d251ce
A pipeline may lower its jobs' priority, never raise it
Andy McCall via Claude Code agent ·
✔ 53a0fb2e4ac6
Drafts stream into the editor as the assistant writes them
Andy McCall via Claude Code agent ·
✔ 119fd17d213f
Flow: SLSA provenance for artifacts, in DSSE, that cosign verifies
Andy McCall via Claude Code agent ·
✔ 076c7a7c86b1
Assistants: what to do when a proposal is too much for the model
Andy McCall via Claude Code agent ·
✔ c08cec372c81
Flow priorities: site, organisation and repository levels, and expediting a run
Andy McCall via Claude Code agent ·
✔ 107eaba52c9d
A new hub gives administrator only to whoever brings its setup code
Andy McCall via Claude Code agent ·
✔ c8684d44d549
Sign up through an invitation with GitHub, GitLab or Google
Andy McCall via Claude Code agent ·
✔ 3ff52534f69b
Sessions are server-side records: random ids, expiry, listed and ended per browser
Andy McCall via Claude Code agent ·
✔ 0024ccb1b050
Notifications that reach you, and 2FA without the password twice
Andy McCall ·
✔ bff9106edcba
Mail: a service panel, and email that looks like OxygenHub
Andy McCall ·
✔ cd46e56b1709
Alerts: a failed run tells its pusher and watchers; an erroring runner is drained
Andy McCall ·
✔ 4a4400c5812d
Rerun one job of a run, with what depends on it
Andy McCall ·
✔ e8fa53694f68
Of two runners holding a job's build cache, the fresher copy wins v0.5.0v0.5.1v0.5.2
Andy McCall ·
✔ c2be148cfe83
Diffusion lands a bump itself where a repository chose it
Andy McCall ·
✔ f4d6ef418a96
The hub reads what each image is for, and learns the rest from passes
Andy McCall ·
✔ 93501da2a162
feat: keyless GCS backups, and TEST (closes #169)
Andy McCall ·
✔ 35fea4237cc9
feat: backups for users and organisations, to a directory, with restore (refs #169)
Andy McCall ·
✔ d7d182467382
docs: backups per site, organisation, user and repository, designed (refs #169)
Andy McCall ·
✔ 6dbd999ad794
feat(flow): jobs go where their build cache is (refs andymccall/oxygenflow#51)
Andy McCall ·
✔ 4fa0da126b70
feat(api): GET /repos/{o}/{n}/diffusion, both directions with their pills (closes #153)
Andy McCall ·
✔ eb2a3502601d
When a proposal's target moves, its new projected state is run
Andy McCall ·
✔ d943160dafeb
older