OXYGENHUB

Changes up to # c2efc0b4674d touching crates/hub/src/web/mod.rs · 120

See as swimlanes (independent work side by side)

Create and withdraw tags on the website (closes #295, closes #301)
Andy McCall via agent:claude@andymccall agent ·
◈ ba0a55bb5b3c
A mistyped address shows the not-found page (closes #294)
Andy McCall via agent:claude@andymccall agent ·
◈ 8ad8e656a3a6
Embed a drop (closes #280)
Andy McCall via agent:claude@andymccall agent ·
◈ 8ac2aa4ca6d1
Comments on drops (refs #280)
Andy McCall via agent:claude@andymccall agent ·
◈ ca0c443c30cf
Star a drop (refs #280)
Andy McCall via agent:claude@andymccall agent ·
◈ c419455a82dd
Fork a drop (refs #280)
Andy McCall via agent:claude@andymccall agent ·
◈ adbc38e7ea09
A push reuses a job's pass on the same state (closes #265)
Andy McCall via agent:claude@andymccall agent ·
◈ 5588bb3631d2
Administration: a sidebar of grouped pages, one page per section (closes #288)
Andy McCall via agent:claude@andymccall agent ·
◈ 737de0fac722
Push without starting a run: [skip flow] (closes #284)
Andy McCall via agent:claude@andymccall agent ·
◈ 367f34b8e590
Drops: per-user gists, each a small hidden Oxygen repository (#279)
Andy McCall via agent:claude@andymccall agent ·
◈ 166f6e9bf4f1
Repository settings: one page per setting under a grouped sidebar (#278)
Andy McCall via agent:claude@andymccall agent ·
◈ c7067c7bda56
Secret scanning: scan existing history, remove an allowed fingerprint
Andy McCall via agent:claude@andymccall agent ·
◈ cb7b3cd45dc0
Push protection: refuse a push that adds what looks like a secret v0.6.0
Andy McCall via agent:claude@andymccall agent ·
◈ 0ee5c3fb32eb
Newest run wins: a proposal's new run supersedes its older ones
Andy McCall via agent:claude@andymccall agent ·
◈ a9f1c0bf403a
Trusted time on the hub: serve when witnesses first saw an entry cancel-landed-runs
Andy McCall via agent:claude@andymccall agent ·
◈ 13b27cb2200c
Agent tokens decide approval gates only where the repository allows it cancel-landed-runs
Andy McCall via agent:claude@andymccall agent ·
◈ 4a68f1064b08
Land when checks pass
Andy McCall via agent:claude@andymccall agent ·
◈ 86a69b53aff0
Insights: OxygenFlow's standard charts, for the site, an owner and a repository
Andy McCall via agent:claude@andymccall agent ·
◈ e97500b70f9a
Terraform state: list, download and restore kept versions
Andy McCall via agent:claude@andymccall agent ·
◈ 67523e06ed86
Repository bar: an Artifacts menu and a More menu
Andy McCall via agent:claude@andymccall agent ·
◈ 16ee5d19d220
Live L5: the issue page, the overview and Diffusion (closes #207)
Andy McCall via agent:claude@andymccall agent ·
◈ a10446c68043
Live L4: the bell, the inbox and the dashboard (closes #206); /metrics, first slice (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ 8a48dd830178
Hubs witness each other's transparency logs (step A5)
Andy McCall via agent:claude@andymccall agent ·
◈ 4f40eed0588f
The hub's transparency log (step 1 of docs/transparency.md)
Andy McCall via agent:claude@andymccall agent ·
◈ 965b950f9b96
Drafts stream into the editor as the assistant writes them
Andy McCall via Claude Code agent ·
✔ 119fd17d213f
Flow: SLSA provenance for artifacts, in DSSE, that cosign verifies
Andy McCall via Claude Code agent ·
✔ 076c7a7c86b1
Flow priorities: site, organisation and repository levels, and expediting a run
Andy McCall via Claude Code agent ·
✔ 107eaba52c9d
A security contact page; HSTS from [server] hsts_max_age
Andy McCall via Claude Code agent ·
✔ 2cbf6f348595
Live pages L3: the proposal page updates itself
Andy McCall via Claude Code agent ·
✔ b5a0a69b3622
Live pages L2: GET /live?topics= and the hub.js client
Andy McCall via Claude Code agent ·
✔ 67be8ac00c24
Environments: the token names the environment once approved; a Deployments page
Andy McCall via Claude Code agent ·
✔ b644e1757711
Approval gates: a job waits for a person with the role
Andy McCall via Claude Code agent ·
✔ 417184c73f4e
The Code panel offers git clone when the Git mirror is on
Andy McCall via Claude Code agent ·
✔ 7b17d570d7ee
Sessions are server-side records: random ids, expiry, listed and ended per browser
Andy McCall via Claude Code agent ·
✔ 0024ccb1b050
security.txt from a contact set under Administration
Andy McCall via Claude Code agent ·
✔ 3dd6582de060
Security headers on every response; CSP report-only with a report endpoint
Andy McCall via Claude Code agent ·
✔ d74ce22fa80e
UI polish: keys, backups, wiki, editor, bookmarks, summaries, backdrops v0.5.0
Andy McCall ·
✔ ffb67a81188c
Notifications that reach you, and 2FA without the password twice
Andy McCall ·
✔ bff9106edcba
Backups API: settings, TEST, back up now and runs
Andy McCall ·
✔ 2e9188ca4f98
Rerun one job of a run, with what depends on it
Andy McCall ·
✔ e8fa53694f68
Backups per repository: leave one out, or give it its own schedule
Andy McCall ·
✔ d3b048b27277
Admin › Backups: whether each owner's backup ran, and who has none
Andy McCall ·
✔ 1e8a6e8bb91b
Live arrivals on the sky
Andy McCall ·
✔ da8f7826a645
feat: keyless GCS backups, and TEST (closes #169)
Andy McCall ·
✔ 35fea4237cc9
fix(web): a long state no longer runs across the sidebar (closes #170)
Andy McCall ·
✔ 6ae3fa0af4f6
feat: backups for users and organisations, to a directory, with restore (refs #169)
Andy McCall ·
✔ d7d182467382
feat(web): sidebar cards, a shaded tree head, icons, aligned Diffusion tables (closes #152)
Andy McCall ·
✔ c9aacc0e7dc1
Diffusion: see it, and landing refreshes the pin index
Andy McCall ·
✔ 757195ad7a5d
Diffusion: turning it on
Andy McCall ·
✔ e71583501b1d
Admin › Runners › Images: what images are where
Andy McCall ·
✔ 6ca0b971ff07
older