OXYGENHUB

Changes up to # 93f445fa50d8 +1 touching crates/hub/tests/accounts.rs · 42

See as swimlanes (independent work side by side)

93f445fa50d829625f9666e9f92b352e428b7105d5ce7944d3132902d7da49c8+99ca93d60bca1c23c79d5cdf35bdab6d4c6197831417f512ef58748e22ed87d2 has 2 heads. The graph shows their union; heads are marked.
Enforce the Content Security Policy (closes #227); show where a job's time went (refs oxygenflow#35); a Diffusion test waits up to 30 s
Andy McCall via agent:claude@andymccall agent ·
◈ 0468394734e9
Administration: a sidebar of grouped pages, one page per section (closes #288)
Andy McCall via agent:claude@andymccall agent ·
◈ 737de0fac722
Keys say when each was last used; Help explains AI identities (closes #286, closes #287)
Andy McCall via agent:claude@andymccall agent ·
◈ b349e15a3eab
Settings › Security balanced: every box the page's width (closes #285)
Andy McCall via agent:claude@andymccall agent ·
◈ 8597fb5ca16c
Push without starting a run: [skip flow] (closes #284)
Andy McCall via agent:claude@andymccall agent ·
◈ 367f34b8e590
Linking the identity that delegates to the hub; New drop form full width (closes #281)
Andy McCall via agent:claude@andymccall agent ·
◈ 787632570bf9
Repository settings: one page per setting under a grouped sidebar (#278)
Andy McCall via agent:claude@andymccall agent ·
◈ c7067c7bda56
Readers never wait for a push or gc oh-comment-body-file
Andy McCall via agent:claude@andymccall agent ·
◈ 7c06f5b28ade
Live L4: the bell, the inbox and the dashboard (closes #206); /metrics, first slice (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ 8a48dd830178
A new hub gives administrator only to whoever brings its setup code
Andy McCall via Claude Code agent ·
✔ c8684d44d549
Postgres, step 3: the hub builds and passes its tests on PostgreSQL
Andy McCall via Claude Code agent ·
✔ 3b1bc27fe805
A security contact page; HSTS from [server] hsts_max_age
Andy McCall via Claude Code agent ·
✔ 2cbf6f348595
Sign up through an invitation with GitHub, GitLab or Google
Andy McCall via Claude Code agent ·
✔ 3ff52534f69b
Sessions are server-side records: random ids, expiry, listed and ended per browser
Andy McCall via Claude Code agent ·
✔ 0024ccb1b050
security.txt from a contact set under Administration
Andy McCall via Claude Code agent ·
✔ 3dd6582de060
Security headers on every response; CSP report-only with a report endpoint
Andy McCall via Claude Code agent ·
✔ d74ce22fa80e
Sign-in, 2FA codes, device codes and reset requests slow guessing
Andy McCall via Claude Code agent ·
✔ aa0bfbd11f02
Outbound requests only to public addresses
Andy McCall via Claude Code agent ·
✔ 9a777fec4ed9
HTTPS only: nothing taken over plain http through a proxy
Andy McCall via Claude Code agent ·
✔ 9a8e3b4419e0
Profile pulse: the last 3, 6, 9 or 12 months v0.5.2
Andy McCall via Claude Code agent ·
✔ c0095389312b
Profile pulse: the account's own span, fewer labels, neat chips
Andy McCall via Claude Code agent ·
✔ a2fbad481dd7
Profile: the year as a signal
Andy McCall via Claude Code agent ·
✔ 2a0c09c09716
Sign in with GitLab, and branded sign-in buttons v0.5.1
Andy McCall via Claude Code agent ·
✔ 810896d41be7
Notifications that reach you, and 2FA without the password twice
Andy McCall ·
✔ bff9106edcba
Mail: a service panel, and email that looks like OxygenHub
Andy McCall ·
✔ cd46e56b1709
Adding an assistant: provider presets and the endpoint's own model list
Andy McCall ·
✔ 155cab142b63
Administration is a sectioned page with a left-hand menu
Andy McCall ·
✔ e8e7158bbc73
Agents get their marks; contributors one row each; an assistant is tested when added
Andy McCall ·
✔ 206c1fc1b06a
Sign in with GitHub or Google
Andy McCall ·
✔ 83940d53664f
Accounts elsewhere on a profile: Bluesky, Mastodon, GitHub
Andy McCall ·
✔ 89e89836cae7
Variables for pipelines at the site, organisation and repository
Andy McCall ·
✔ 2a83f5303458
AI assistants: settings per site, organisation and repository
Andy McCall ·
✔ e71846aa07b9
Mail settings on the admin page, with a test message
Andy McCall ·
✔ 3556d08e17f9
Admin runner settings: job time limits; each job runs under its own
Andy McCall ·
✔ 5dead1f4f26d
Admins disable, enable and delete accounts
Andy McCall ·
✔ 6a1780558353
oh signs in through oxy's credential store; pin oxygen with oxy auth and remote bookmarks (refs andymccall/oxygen#47, #48)
Andy McCall ·
✔ 2bbe88a85860
One approval by default only where someone else can give it clear-waitingclose-proposal-140image-checkjob-waitsrun-one-jobwiki-says-sov0.1.0v0.2.0v0.3.0v0.3.1v0.4.0v0.4.1v0.4.2v0.5.0v0.5.1v0.5.2
Andy McCall ·
✔ ff6569530173
Organisation repositories require one sealed approval by default
Andy McCall ·
✔ 462f88d161ce
Fix 2FA sign-in: the second step sent password twice clear-waitingclose-proposal-140image-checkjob-waitsrun-one-jobwiki-says-sov0.1.0v0.2.0v0.3.0v0.3.1v0.4.0v0.4.1v0.4.2
Andy McCall ·
✔ 1b3a00986a5a
Organisation webhooks under the organisation's settings, sharing the repository webhook code; an admin storage page with sizes, loose objects and packs, and maintenance (oxy gc) per repository or for all
Andy McCall ·
✔ 8fb35df7d66e
Uploaded profile pictures and organisation logos: PNG, JPEG or WebP checked by content, cropped, scaled and re-encoded before storing, served at /avatar/{name} with the identicon as fallback, removable
Andy McCall ·
✔ a160b98fb922
Milestone 0.2: accounts and access
Andy McCall ·
✔ 19bb31ff1f5c