50 descendants of 1dc39270f485bb78
|
2026-10-02
| ||
| 21:11 | Run tokens review: the starter is the authenticated pusher, one lock across register and start, run logins start nothing, life clamped, the run's end told only to its token check-in: 2a93e5c20f user: zeitgeist tags: rfc21-run-tokens | |
| 21:08 | Merge trunk; one token-to-account-state check, stricter: an invite needs no credential at all, a reset accepts an imported one (#319) check-in: 273f3b92d8 user: zeitgeist tags: admins-send-reset-links | |
| 21:06 | Strip setup on team writes and in SourcesWith, and pin every write-side strip with tests (#321) closed check-in: a48b2a5a19 user: zeitgeist tags: setup-strips-and-constant-time | |
| 20:57 | CI trigger picks new check-ins by arrival order, not date, so an older-dated push still runs (#314) check-in: 0e7c42f080 user: zeitgeist tags: ci-trigger-edges | |
| 20:51 | land rfc21-tokens check-in: 752edc7430 user: dmestas tags: trunk | |
| 20:48 | Run tokens: allowed and starter on the environments page, a closed run's token is told the run is over check-in: af56551227 user: zeitgeist tags: rfc21-run-tokens | |
| 20:39 | RFC 0021 rung 6: run tokens, built; the RFC corrected to the built shape check-in: 6884c863f2 user: zeitgeist tags: rfc21-run-tokens | |
| 20:35 | WIP run tokens: run logins at the doors and the read gate, a real fossil uv push, the docs check-in: 1a56798851 user: zeitgeist tags: rfc21-run-tokens | |
| 20:31 | WIP run tokens: delivery through the bridge, the runner masks QUARRY_TOKEN, revoke on close and cancel, the run page line check-in: 2f7cc50b31 user: zeitgeist tags: rfc21-run-tokens | |
| 20:23 | WIP run tokens: permissions read and stripped, run start recorded, run token rows check-in: 2cf4bfaef0 user: zeitgeist tags: rfc21-run-tokens | |
| 20:06 | merge trunk: the gated-repo secret loop compares each candidate in constant time closed check-in: 8b20b96b35 user: zeitgeist tags: rfc21-tokens | |
| 20:01 | RFC 0021: rung 2 built; token limits, run- check, permissions stripping, sync_token kept check-in: c2514dfdc6 user: zeitgeist tags: rfc21-tokens | |
| 20:00 | tokens: personal settings refused, forge-scope refusal in Invoke by declared scope, migration tolerates concurrent opens check-in: ee4f3855c4 user: zeitgeist tags: rfc21-tokens | |
| 19:49 | tokens: refused by credential ops, no site-admin flag, no forge scope when limited to repositories check-in: 8336218744 user: zeitgeist tags: rfc21-tokens | |
| 19:43 | oltp: live-token queries filter expiry before the limit; disabled accounts sign nothing; migration keeps sync_token in step check-in: 3b9d0d4415 user: zeitgeist tags: rfc21-tokens | |
| 19:34 | api: letter checks about the caller go through the request's token check-in: 9ee5956924 user: zeitgeist tags: rfc21-tokens | |
| 19:31 | sync read gate judges a login card by its token check-in: 773fed5ec6 user: zeitgeist tags: rfc21-tokens | |
| 19:29 | quarry user add refuses: push credentials are tokens now check-in: 08cc521b1c user: zeitgeist tags: rfc21-tokens | |
| 19:28 | oltp: copy sync_token rows, keep the table for rollback, idempotent check-in: 053164b56f user: zeitgeist tags: rfc21-tokens | |
| 19:27 | me: rail names the section Push credentials check-in: 3fe8e93e77 user: zeitgeist tags: rfc21-tokens | |
| 19:25 | xfer: a ceiling withholding y, as the zero value leaves uv gating unchanged check-in: 18dcf70259 user: zeitgeist tags: rfc21-tokens | |
| 19:21 | docs: me.sync.token list and revoke; fossil push tests for two tokens check-in: 48753ff907 user: zeitgeist tags: rfc21-tokens | |
| 19:19 | me.sync.token.list, per-row revoke, /me Push credential list check-in: a0d30f9dff user: zeitgeist tags: rfc21-tokens | |
| 19:16 | token doors: api, web, sync Basic, xfer login card loop; misses feed loginLimiter check-in: 8e20f503a4 user: zeitgeist tags: rfc21-tokens | |
| 19:08 | oltp: token table, resolver, sync_token migration, run- reserved check-in: 81a4dca84c user: zeitgeist tags: rfc21-tokens | |
| 19:06 | land credential-compares-in-constant-time check-in: f466e277f7 user: dmestas tags: trunk | |
| 18:16 | Compare credentials in constant time; tie invite/reset token kind to account state closed check-in: 25b43840dc user: zeitgeist tags: credential-compares-in-constant-time | |
| 15:36 | land zit-0-3-36 check-in: d04a69c3d4 user: dmestas tags: trunk | |
| 15:24 | Pin zit 0.3.36, for the stateless uv client the release workflow publishes with closed check-in: 55c8ef330c user: zeitgeist tags: zit-0-3-36 | |
| 15:21 | land rfc-0021-agent-accounts check-in: 9150242c04 user: dmestas tags: trunk | |
| 15:12 | RFC 0021: agent accounts, forge agents, run-scoped workflow tokens, and the Steward and Publisher presets closed check-in: 4afe165730 user: zeitgeist tags: rfc-0021-agent-accounts | |
| 14:58 | Merge trunk check-in: b0f17d0e5b user: zeitgeist tags: admins-send-reset-links | |
| 14:44 | An emailed invite is not handed to the admin, and the host's password change lands with its journal entry or not at all (#319) check-in: b05d4c6001 user: zeitgeist tags: admins-send-reset-links | |
| 14:41 | Invites work only while the account is unclaimed: re-invite supersedes, redemption spends every other token, and setting a password drops the legacy credential (#319) check-in: 34b986b0e4 user: zeitgeist tags: admins-send-reset-links | |
| 14:27 | Merge trunk check-in: 49748774fe user: zeitgeist tags: admins-send-reset-links | |
| 13:49 | land uv-test-findings check-in: af48d5cd70 user: dmestas tags: trunk | |
| 13:41 | uv: namespace hops keep the escaped path, a repeated uv.put is a no-op, the lit repo tab is never clipped closed check-in: a0445ab567 user: zeitgeist tags: uv-test-findings | |
| 12:57 | land rfc-0020-zit-stateless check-in: 0cff498e05 user: dmestas tags: trunk | |
| 12:50 | RFC 0020: zit keeps no local unversioned store; its client is stateless (zit#226) closed check-in: 99b1e2a643 user: zeitgeist tags: rfc-0020-zit-stateless | |
| 10:10 | land uv-keys-name-their-repository check-in: 691bc030ca user: dmestas tags: trunk | |
| 03:33 |
land activity-tab-and-upstream-owners
Checks tested the merge with trunk at c872fb12b069; trunk has moved since. check-in: d5c1fc0feb user: dmestas tags: trunk | |
| 03:33 | land delete-forgets-its-events check-in: b6f64c2e4c user: dmestas tags: trunk | |
| 01:54 | Test a repair stopped after its round; a tally yields only to a longer repository that exists (#294) closed check-in: 03bdb5c2ba user: zeitgeist tags: delete-forgets-its-events | |
| 01:43 | Merge trunk check-in: 878f45bbab user: zeitgeist tags: delete-forgets-its-events | |
| 01:42 | Keep setup out of category and team caps, test the read-side guards, merge trunk closed check-in: f6017358de user: zeitgeist tags: activity-tab-and-upstream-owners | |
| 01:18 |
land site-admins-stop-at-the-door
Checks tested the merge with trunk at 3a61e5fb682d; trunk has moved since. check-in: c872fb12b0 user: dmestas tags: trunk | |
| 00:41 | Merge trunk closed check-in: c249eab3fd user: zeitgeist tags: site-admins-stop-at-the-door | |
| 00:04 | Exceptions journal and admin alerts show a private repository's fault as its route and kind check-in: f320b0c456 user: zeitgeist tags: site-admins-stop-at-the-door | |
|
2026-10-01
| ||
| 23:22 | Fleet mirror forms keep the site gate and add the repository's a check-in: dc03704065 user: zeitgeist tags: site-admins-stop-at-the-door | |
| 23:08 | Review fixes: fleet mirror forms need the repo letter, deliveries need reach, ops panels hide private paths, no operator unhide check-in: 6b346a86fe user: zeitgeist tags: site-admins-stop-at-the-door | |
| 22:27 | Docs: a site admin holds no repository; operator paths and receipts check-in: 1dc39270f4 user: zeitgeist tags: site-admins-stop-at-the-door | |