Commit Graph

Select branches

Hide Pull Requests

gc-sweep-scan-image-config-records

label-service

lexgen

loom

main

poc/spaces

refactor

remove-device-secret-fallback

spike/ociregistry

test

trusted-platform

vulnerability-scans

v0.0.1

v0.0.2

v0.1.2

v0.1.3

v0.1.4

Mono Color

• 7c36fb76f2 deploy: add the Bunny middleware that tells the appview a HEAD was a HEAD main Evan JarrettandClaude Opus 5.5 2026-10-28 09:16:27 -05:00
• e226bd6d1e make: mount the checkout with :z in build-trixie Evan JarrettandClaude Opus 5.5 2026-10-28 08:50:05 -05:00
• da13dd6ffb hold: say pull_zone only rewrites GET URLs, not HEAD Evan JarrettandClaude Opus 5.5 2026-10-28 08:41:05 -05:00
• a2d3428366 appview: honour X-Original-Method to recover HEADs a CDN turned into GETs JP Hastings-Spital 2026-10-28 07:00:45 +00:00
• e7472789ab billing: show the billing panel to hold captains instead of "not enabled" Evan JarrettandClaude Fable 5.1 2026-09-29 21:09:08 -05:00
• a8d738dccc seamark: add Seamark's own privacy policy, terms of service and security.txt Evan JarrettandClaude Fable 5.1 2026-09-29 20:52:51 -05:00
• b542f8e5c8 appview: record agreement to the terms at sign-in, device approval and checkout Evan JarrettandClaude Fable 5.1 2026-09-29 20:52:51 -05:00
• 0f6ea0b466 appview: export and delete scan summaries and advisor suggestions with the account Evan JarrettandClaude Fable 5.1 2026-09-29 20:52:51 -05:00
• c1234cb31c hold: require a login on getQuota and answer only for the caller's own DID Evan JarrettandClaude Fable 5.1 2026-09-29 20:52:51 -05:00
• 3232ecbc54 testpds: model applyWrites deletes the way the reference PDS does Evan JarrettandClaude Opus 5.5 2026-09-28 09:11:03 -05:00
• 450518f51e appview: delete untagged manifests in applyWrites batches of 200 Evan JarrettandClaude Opus 5.5 2026-09-28 09:02:09 -05:00
• a3969444ce hold: look up a manifest's layers among its owner's records, not the whole hold's Evan JarrettandClaude Opus 5.5 2026-09-28 09:02:09 -05:00
• c39606905e appview: a missing OAuth scope is a 403, not a dead session (#30) Evan JarrettandClaude Opus 5.5 2026-09-24 20:26:23 -05:00
• 0bbe4eb075 docs(spaces): three tiers and a hold-only space, recorded as the direction to research poc/spaces Evan JarrettandClaude Fable 5.1 2026-09-15 20:28:00 -05:00
• 7803dec54c docs(spaces): the directory entry verified live end to end Evan JarrettandClaude Fable 5.1 2026-09-15 18:55:51 -05:00
• 0f2dfc719d hold+appview: io.atcr.hold.repo, the hold's directory of the repositories it stores Evan JarrettandClaude Fable 5.1 2026-09-15 18:54:57 -05:00
• d7ab53c6b0 hold+appview: the hold is a private repository space's managing app Evan JarrettandClaude Fable 5.1 2026-09-15 16:13:19 -05:00
• fd78a57e0f docs(spaces): the repo space is the source of truth, the public repo a projection Evan JarrettandClaude Fable 5.1 2026-09-15 15:59:00 -05:00
• ea898f7fcb lexicons: draft io.atcr.hold.beacon, the hold's only public record Evan JarrettandClaude Fable 5.1 2026-09-15 15:07:57 -05:00
• 6a31cb4a73 docs(spaces): private repos keep one space per repository, the hold decides who reads Evan JarrettandClaude Fable 5.1 2026-09-15 15:05:29 -05:00
• dcda5af119 docs(spaces): live verification of the source column, gating, no-store and the DPoP key Evan JarrettandClaude Fable 5.1 2026-09-15 12:47:40 -05:00
• e715b837c3 appview: the gated scan and digest API routes see the session Evan JarrettandClaude Fable 5.1 2026-09-15 12:45:57 -05:00
• 0ec508790e docs(spaces): the ungated sync.getBlob is confirmed unexpected upstream Evan JarrettandClaude Fable 5.1 2026-09-15 12:28:11 -05:00
• 04a69a7d63 appview: private manifests keep manifestBlob, read through space.getBlob Evan JarrettandClaude Fable 5.1 2026-09-15 11:25:02 -05:00
• 3f6ebd0c11 docs(spaces): space.getBlob gates the probe blob, only sync.getBlob is open Evan JarrettandClaude Fable 5.1 2026-09-15 10:53:15 -05:00
• e1defa76e4 docs(spaces): the clean getBlob repro, a space-only blob is still public Evan JarrettandClaude Fable 5.1 2026-09-15 10:11:54 -05:00
• 3bb7eb7599 docs(spaces): the manifestBody lexicon change is published Evan JarrettandClaude Fable 5.1 2026-09-15 09:49:26 -05:00
• ddeb367c86 docs(spaces): the source column landed, the three delete guards are gone Evan JarrettandClaude Fable 5.1 2026-09-15 09:41:28 -05:00
• 4cf3e18bbb appview: a source column replaces the three private-row delete guards Evan JarrettandClaude Fable 5.1 2026-09-15 09:41:08 -05:00
• 3725146f46 Merge branch 'worktree-agent-ad52a901a0b918971' into poc/spaces Evan Jarrett 2026-09-15 09:39:29 -05:00
• 586f2aee64 appview: a private manifest's body rides inline in the record, not in a PDS blob Evan JarrettandClaude Fable 5.1 2026-09-15 09:39:01 -05:00
• 431524e342 appview: gate the digest-only detail endpoints and mark private responses no-store Evan JarrettandClaude Fable 5.1 2026-09-15 09:38:59 -05:00
• f092b6c3e5 appview: persist the space DPoP key in crypto_keys Evan JarrettandClaude Fable 5.1 2026-09-15 09:31:36 -05:00
• e5d8d1b81e docs(spaces): the live re-flip filled the blob set Evan JarrettandClaude Fable 5.1 2026-09-14 21:20:52 -05:00
• d67a29a355 docs(spaces): private pull verified, flip carries the manifest body Evan JarrettandClaude Fable 5.1 2026-09-14 21:16:42 -05:00
• 2527c002f5 appview: the backfill logs the manifests and tags it actually removed Evan JarrettandClaude Fable 5.1 2026-09-14 21:16:29 -05:00
• 7bca6f306d hold+appview: a visibility flip carries the manifest so the hold can record its blob set Evan JarrettandClaude Fable 5.1 2026-09-14 21:15:35 -05:00
• 1c5672ba5d docs(spaces): the reconciliation path and the source-column cleanup Evan JarrettandClaude Fable 5.1 2026-09-14 21:07:31 -05:00
• 2c152b86db tests: seed the user row in the reconciliation test Evan JarrettandClaude Fable 5.1 2026-09-14 21:07:08 -05:00
• 39978d8bf7 appview: the backfill's reconciliation leaves private repositories alone Evan JarrettandClaude Fable 5.1 2026-09-14 21:06:36 -05:00
• a05750bf28 appview: the visibility badge by the repository name is the owner's control Evan JarrettandClaude Fable 5.1 2026-09-14 21:01:55 -05:00
• df75371a8f appview: the gate renders the ordinary 404 page, byte for byte Evan JarrettandClaude Fable 5.1 2026-09-14 21:01:05 -05:00
• 5feee26c75 appview: a private repository is indistinguishable from a missing one Evan JarrettandClaude Fable 5.1 2026-09-14 20:59:40 -05:00
• 7ef48e7a48 appview: a visibility flip refreshes the page once it completes Evan JarrettandClaude Fable 5.1 2026-09-14 20:58:04 -05:00
• c3ffbe0ffa appview: close the visibility dialog after a flip and update the page badge in place Evan JarrettandClaude Fable 5.1 2026-09-14 20:56:41 -05:00
• 6835850f7b appview: private repository page reads cleanly and offers a way home Evan JarrettandClaude Fable 5.1 2026-09-14 20:53:28 -05:00
• 352f400918 docs(spaces): the first live flip and the bugs it surfaced Evan JarrettandClaude Fable 5.1 2026-09-14 20:53:08 -05:00
• f815aeeb28 appview: a space delete for a public repository is the move back, not a removal Evan JarrettandClaude Fable 5.1 2026-09-14 20:52:27 -05:00
• 4c1af2ee6e appview: visibility modal swaps its whole panel; center the empty-state command Evan JarrettandClaude Fable 5.1 2026-09-14 20:51:57 -05:00
• 4111b136c1 appview: read space listRecords in the shape the reference PDS returns Evan JarrettandClaude Fable 5.1 2026-09-14 20:50:36 -05:00
• ef1837b8a1 appview: always log the outcome of the private-space re-index Evan JarrettandClaude Fable 5.1 2026-09-14 20:48:04 -05:00
• 43130b0139 appview: crew of the storing hold see private repositories in listings Evan JarrettandClaude Fable 5.1 2026-09-14 20:45:18 -05:00
• 773ce9d6de appview: keep the local index across a visibility flip Evan JarrettandClaude Fable 5.1 2026-09-14 20:43:36 -05:00
• 85319934e6 appview: qualify the outer columns in the private-repo listing clause Evan JarrettandClaude Fable 5.1 2026-09-14 20:39:32 -05:00
• d527c5143f appview: compare session scopes in canonical form so boots stop evicting every session Evan JarrettandClaude Fable 5.1 2026-09-14 20:27:07 -05:00
• a436ae45e0 air: poll for changes in the hold dev loop, like the appview does Evan JarrettandClaude Fable 5.1 2026-09-14 20:25:15 -05:00
• d93c5ad4d9 air: give the appview 15s to shut down before the fallback kill Evan JarrettandClaude Fable 5.1 2026-09-14 20:24:37 -05:00
• b21ddc73ea docs(spaces): ledger for steps 2 and 3 and their known gaps Evan JarrettandClaude Fable 5.1 2026-09-14 20:12:11 -05:00
• 4b668d7d3c hold: per-manifest visibility gate for OCI blobs, no public announcements for private repos Evan JarrettandClaude Fable 5.1 2026-09-14 20:11:34 -05:00
• ca5380303a appview: per-repository visibility, private repos in a sailor space, crew-gated pages Evan JarrettandClaude Fable 5.1 2026-09-14 20:09:11 -05:00
• 7f6a5911ff hold: full export walks only DAG-CBOR links, so blob references do not abort it Evan JarrettandClaude Fable 5.1 2026-09-14 19:54:02 -05:00
• dfaa094ed3 docs(spaces): obligations for the appview's plaintext copies of private data Evan JarrettandClaude Fable 5.1 2026-09-14 19:44:53 -05:00
• 1ba166179d hold: full getRepo exports the live tree, not the shard history Evan JarrettandClaude Fable 5.1 2026-09-14 19:36:21 -05:00
• c3ab0242e5 hold: purge pre-move records of space collections from the public repo on boot Evan JarrettandClaude Fable 5.1 2026-09-14 19:32:30 -05:00
• ba29c21014 docs(spaces): record the live validation of step 1 Evan JarrettandClaude Fable 5.1 2026-09-14 19:26:05 -05:00
• 1c05040072 spaces: every hold record lives in the space; appview background syncer Evan JarrettandClaude Fable 5.1 2026-09-14 19:24:53 -05:00
• f9041a7cd2 docs(spaces): visibility is per repository, flag on io.atcr.repo.page, private repos live entirely in the sailor's space Evan JarrettandClaude Fable 5.1 2026-09-14 16:14:22 -05:00
• e89c06aa8f docs(spaces): visibility is per hold; every hold record moves into the space Evan JarrettandClaude Fable 5.1 2026-09-14 16:10:39 -05:00
• 4770857905 space: probe CLI and reference wire vectors from the alpha PDS Evan JarrettandClaude Fable 5.1 2026-09-14 16:05:50 -05:00
• 326ed50652 docs(spaces): record the push/pull round trip with crew in the space Evan JarrettandClaude Fable 5.1 2026-09-14 16:00:16 -05:00
• c7e8217818 docs(spaces): the declaration is published; note the per-process DPoP key gap Evan JarrettandClaude Fable 5.1 2026-09-14 15:56:16 -05:00
• 1c3846a90c jetstream: keep ProcessCrew's doc comment attached to ProcessCrew Evan JarrettandClaude Fable 5.1 2026-09-14 15:52:46 -05:00
• 2768df237d appview: drop the cached crew row when the hold refuses a space credential Evan JarrettandClaude Fable 5.1 2026-09-14 15:52:30 -05:00
• ba4e5a29a4 appview: drop local crew rows for members deleted from a hold's space Evan JarrettandClaude Fable 5.1 2026-09-14 15:50:00 -05:00
• 078be9390f docs(spaces): record the verified end-to-end demo run and its two lessons Evan JarrettandClaude Fable 5.1 2026-09-14 15:45:55 -05:00
• 3658d0b05a appview: percent-encode the hold DID inside the space scope so port-bearing did:web survives the PDS query decode Evan JarrettandClaude Fable 5.1 2026-09-14 15:45:23 -05:00
• f8ee9acb28 docs(spaces): record the lexicon publish blocker, the corpora shim, and the dev-stack demo path Evan JarrettandClaude Fable 5.1 2026-09-14 15:33:08 -05:00
• d3ad6b2de2 spaces POC: the hold as an atproto space authority, crew moved into the space Evan JarrettandClaude Fable 5.1 2026-09-14 15:27:46 -05:00
• 6bdb64a35d appview: serve the OCI API with cuelabs ociregistry and drop distribution spike/ociregistry Evan JarrettandClaude Fable 5.1 2026-09-14 11:33:03 -05:00
• e892bbca88 tests: make the hold PDS carstore contention test deterministic Evan JarrettandClaude Fable 5.1 2026-09-14 09:24:42 -05:00
• 167e00dc4f tests: open the scan broadcaster test database the way production does, and run CI with the testmode tag Evan JarrettandClaude Fable 5.1 2026-09-14 09:14:12 -05:00
• 0ae9ca1a96 tests: make the carstore lock tests deterministic, and silence slog in test binaries Evan JarrettandClaude Fable 5.1 2026-09-12 22:11:54 -05:00
• 83092d9aee deploy: give the scanner its own server, and stop the tool from undoing production fixes on provision Evan JarrettandClaude Fable 5.1 2026-09-12 21:49:26 -05:00
• 87eff20ae8 appview: drop the bcrypt fallback for device secret authentication remove-device-secret-fallback Evan JarrettandClaude Fable 5.1 2026-09-12 12:53:26 -05:00
• ba1f5eab40 go mod tidy Evan Jarrett 2026-09-12 11:05:04 -05:00
• db6f37a070 deploy: never install a template config during update, and poll every restarted service's health Evan JarrettandClaude Fable 5.1 2026-09-11 19:53:06 -05:00
• 9dbc53b670 appview: stop serving service tokens past their expiry, and challenge the client when the hold rejects one Evan JarrettandClaude Fable 5.1 2026-09-11 19:26:51 -05:00
• dcad0f8626 deploy: snapshot binaries, configs, units and the appview database before every update Evan JarrettandClaude Fable 5.1 2026-09-11 19:19:40 -05:00
• 7ecb09465d docs: move presign memoization to the done list Evan JarrettandClaude Opus 4.8 2026-09-11 17:19:10 -05:00
• 2a94f924af appview: memoize blob presigns within a request Evan JarrettandClaude Opus 4.8 2026-09-11 17:18:57 -05:00
• bd740060b2 make: lint the integration packages with their build tags Evan JarrettandClaude Fable 5.1 2026-09-11 17:05:19 -05:00
• bf4e63e810 test: production-shaped push/pull benchmark with per-backend request counts Evan JarrettandClaude Fable 5.1 2026-09-11 17:05:19 -05:00
• 65db7945b2 appview: drop the testmode fall-back-to-default-hold probe Evan JarrettandClaude Fable 5.1 2026-09-11 17:05:19 -05:00
• dcee8f6a62 deps: upgrade every module; gate loopback OAuth tests on testmode Evan JarrettandClaude Fable 5.1 2026-09-11 16:41:58 -05:00
• 0080957a21 remove the runtime test_mode switch; the testmode build tag is the only one Evan JarrettandClaude Fable 5.1 2026-09-11 11:09:44 -05:00
• d8643ee03a config: describe what test_mode still controls Evan JarrettandClaude Fable 5.1 2026-09-11 10:54:18 -05:00
• a01b08b924 atproto: gate local indigo behavior behind a testmode build tag Evan JarrettandClaude Fable 5.1 2026-09-11 10:53:27 -05:00
• 7b67b3b383 appview: mark repo cards translate="no" Evan JarrettandClaude Fable 5.1 2026-09-11 09:25:48 -05:00
• 16375ce302 appview: name uploads with a UUID, not the nanosecond clock Evan JarrettandClaude Fable 5.1 2026-09-10 21:43:10 -05:00
• 831b7757bf appview: never block a writer on budget for its second buffer Evan JarrettandClaude Fable 5.1 2026-09-10 21:09:06 -05:00