OXYGENHUB

Changes up to # 8297a33b9a4c · 524

See as swimlanes (independent work side by side)

Postgres, step 1: every query numbers its placeholders $1, $2, ...
Andy McCall via Claude Code agent ·
✔ 5d90e0e045e2
Sealed approvals: a gate released only by a signature of the approver's key
Andy McCall via Claude Code agent ·
✔ 47e374020b59
A security contact page; HSTS from [server] hsts_max_age
Andy McCall via Claude Code agent ·
✔ 2cbf6f348595
Live pages L3: the proposal page updates itself
Andy McCall via Claude Code agent ·
✔ b5a0a69b3622
Live: a first comment on the stream so the tunnel sends the headers at once
Andy McCall via Claude Code agent ·
✔ f6529a2fb9db
Live pages L2: GET /live?topics= and the hub.js client
Andy McCall via Claude Code agent ·
✔ 67be8ac00c24
Live pages L1: an event bus of topics, versions and a replay buffer
Andy McCall via Claude Code agent ·
✔ 7e01a7665aa5
Environments: the token names the environment once approved; a Deployments page
Andy McCall via Claude Code agent ·
✔ b644e1757711
Approvers are told; oh run approve and oh run reject
Andy McCall via Claude Code agent ·
✔ dc59d1b56c3d
Approval gates: a job waits for a person with the role
Andy McCall via Claude Code agent ·
✔ 417184c73f4e
Artifacts between jobs: the claim names each input's blob, runners fetch inputs
Andy McCall via Claude Code agent ·
✔ cd437c4f5f8d
Pin oxygenflow at allow-listed egress (oxygenflow#55)
Andy McCall via Claude Code agent ·
✔ c65b0f0a196f
Sign up through an invitation with GitHub, GitLab or Google
Andy McCall via Claude Code agent ·
✔ 3ff52534f69b
The Code panel offers git clone when the Git mirror is on
Andy McCall via Claude Code agent ·
✔ 7b17d570d7ee
Long hashes and state addresses in change titles are shown by their ends
Andy McCall via Claude Code agent ·
✔ 62cdf34daec1
Diffusion reconciler: every 10 minutes the pin index is checked and mended
Andy McCall via Claude Code agent ·
✔ 0e04dfc20211
Diffusion index writes log every failure and try once more
Andy McCall via Claude Code agent ·
✔ 5d54cf746e00
Sessions are server-side records: random ids, expiry, listed and ended per browser
Andy McCall via Claude Code agent ·
✔ 0024ccb1b050
security.txt from a contact set under Administration
Andy McCall via Claude Code agent ·
✔ 3dd6582de060
Security headers on every response; CSP report-only with a report endpoint
Andy McCall via Claude Code agent ·
✔ d74ce22fa80e
Sign-in, 2FA codes, device codes and reset requests slow guessing
Andy McCall via Claude Code agent ·
✔ aa0bfbd11f02
Webhook responses read up to 64 KiB; at most 1000 waiting per hook
Andy McCall via Claude Code agent ·
✔ c98935537c57
Outbound requests only to public addresses
Andy McCall via Claude Code agent ·
✔ 9a777fec4ed9
HTTPS only: nothing taken over plain http through a proxy
Andy McCall via Claude Code agent ·
✔ 9a8e3b4419e0
Flow on your own runners
Andy McCall via Claude Code agent ·
✔ 1870e4fa9808
OxygenHub 0.5.2 v0.5.2
Andy McCall via Claude Code agent ·
✔ 7ebb7052bc7f
Profile pulse: the last 3, 6, 9 or 12 months v0.5.2
Andy McCall via Claude Code agent ·
✔ c0095389312b
Profile pulse: the account's own span, fewer labels, neat chips
Andy McCall via Claude Code agent ·
✔ a2fbad481dd7
Profile: the year as a signal
Andy McCall via Claude Code agent ·
✔ 2a0c09c09716
OxygenHub 0.5.1 v0.5.1
Andy McCall via Claude Code agent ·
✔ 11a2e09d6a69
Sign in with GitLab, and branded sign-in buttons v0.5.1
Andy McCall via Claude Code agent ·
✔ 810896d41be7
Diffusion reads multi-line lists; assistants say why there is no answer v0.5.1v0.5.2
Andy McCall via Claude Code agent ·
✔ 5360cea36c30
Live pages: the design v0.5.1v0.5.2
Andy McCall ·
✔ c0e39717895d
Long hashes show their two ends, the whole in a tip
Andy McCall ·
✔ addec2bd6423
A landed proposal runs its target's pipeline oh-comment-body-filev0.5.1v0.5.2
Andy McCall ·
✔ f7bcee49bf24
OxygenHub 0.5.0 v0.5.0
Andy McCall ·
✔ 32d97df55ab7
UI polish: keys, backups, wiki, editor, bookmarks, summaries, backdrops v0.5.0
Andy McCall ·
✔ ffb67a81188c
Settings › Tokens: cards, and Mark as agent on each token
Andy McCall ·
✔ 00ef7b83b340
Email subjects say what happened, with an emoji
Andy McCall ·
✔ b91e2d81b3f1
Notifications that reach you, and 2FA without the password twice
Andy McCall ·
✔ bff9106edcba
Mail: a service panel, and email that looks like OxygenHub
Andy McCall ·
✔ cd46e56b1709
Backups API: settings, TEST, back up now and runs
Andy McCall ·
✔ 2e9188ca4f98
Alerts: a failed run tells its pusher and watchers; an erroring runner is drained
Andy McCall ·
✔ 4a4400c5812d
Rerun one job of a run, with what depends on it
Andy McCall ·
✔ e8fa53694f68
Backups to S3, keylessly
Andy McCall ·
✔ 7b9f4570daf5
Backups per repository: leave one out, or give it its own schedule
Andy McCall ·
✔ d3b048b27277
Admin › Backups: whether each owner's backup ran, and who has none
Andy McCall ·
✔ 1e8a6e8bb91b
Backups: a restore brings back the records, and release assets travel
Andy McCall ·
✔ 5ef6cf72cd19
Of two runners holding a job's build cache, the fresher copy wins v0.5.0v0.5.1v0.5.2
Andy McCall ·
✔ c2be148cfe83
Diffusion lands a bump itself where a repository chose it
Andy McCall ·
✔ f4d6ef418a96
newer older