50 descendants and 50 ancestors of ec0a3aaca77bfc1e
|
2026-10-02
| ||
| 21:08 | Merge trunk; one token-to-account-state check, stricter: an invite needs no credential at all, a reset accepts an imported one (#319) check-in: 273f3b92d8 user: zeitgeist tags: admins-send-reset-links | |
| 21:06 | Strip setup on team writes and in SourcesWith, and pin every write-side strip with tests (#321) closed check-in: a48b2a5a19 user: zeitgeist tags: setup-strips-and-constant-time | |
| 20:57 | CI trigger picks new check-ins by arrival order, not date, so an older-dated push still runs (#314) check-in: 0e7c42f080 user: zeitgeist tags: ci-trigger-edges | |
| 20:51 | land rfc21-tokens check-in: 752edc7430 user: dmestas tags: trunk | |
| 20:48 | Run tokens: allowed and starter on the environments page, a closed run's token is told the run is over check-in: af56551227 user: zeitgeist tags: rfc21-run-tokens | |
| 20:39 | RFC 0021 rung 6: run tokens, built; the RFC corrected to the built shape check-in: 6884c863f2 user: zeitgeist tags: rfc21-run-tokens | |
| 20:35 | WIP run tokens: run logins at the doors and the read gate, a real fossil uv push, the docs check-in: 1a56798851 user: zeitgeist tags: rfc21-run-tokens | |
| 20:31 | WIP run tokens: delivery through the bridge, the runner masks QUARRY_TOKEN, revoke on close and cancel, the run page line check-in: 2f7cc50b31 user: zeitgeist tags: rfc21-run-tokens | |
| 20:23 | WIP run tokens: permissions read and stripped, run start recorded, run token rows check-in: 2cf4bfaef0 user: zeitgeist tags: rfc21-run-tokens | |
| 20:06 | merge trunk: the gated-repo secret loop compares each candidate in constant time closed check-in: 8b20b96b35 user: zeitgeist tags: rfc21-tokens | |
| 20:01 | RFC 0021: rung 2 built; token limits, run- check, permissions stripping, sync_token kept check-in: c2514dfdc6 user: zeitgeist tags: rfc21-tokens | |
| 20:00 | tokens: personal settings refused, forge-scope refusal in Invoke by declared scope, migration tolerates concurrent opens check-in: ee4f3855c4 user: zeitgeist tags: rfc21-tokens | |
| 19:49 | tokens: refused by credential ops, no site-admin flag, no forge scope when limited to repositories check-in: 8336218744 user: zeitgeist tags: rfc21-tokens | |
| 19:43 | oltp: live-token queries filter expiry before the limit; disabled accounts sign nothing; migration keeps sync_token in step check-in: 3b9d0d4415 user: zeitgeist tags: rfc21-tokens | |
| 19:34 | api: letter checks about the caller go through the request's token check-in: 9ee5956924 user: zeitgeist tags: rfc21-tokens | |
| 19:31 | sync read gate judges a login card by its token check-in: 773fed5ec6 user: zeitgeist tags: rfc21-tokens | |
| 19:29 | quarry user add refuses: push credentials are tokens now check-in: 08cc521b1c user: zeitgeist tags: rfc21-tokens | |
| 19:28 | oltp: copy sync_token rows, keep the table for rollback, idempotent check-in: 053164b56f user: zeitgeist tags: rfc21-tokens | |
| 19:27 | me: rail names the section Push credentials check-in: 3fe8e93e77 user: zeitgeist tags: rfc21-tokens | |
| 19:25 | xfer: a ceiling withholding y, as the zero value leaves uv gating unchanged check-in: 18dcf70259 user: zeitgeist tags: rfc21-tokens | |
| 19:21 | docs: me.sync.token list and revoke; fossil push tests for two tokens check-in: 48753ff907 user: zeitgeist tags: rfc21-tokens | |
| 19:19 | me.sync.token.list, per-row revoke, /me Push credential list check-in: a0d30f9dff user: zeitgeist tags: rfc21-tokens | |
| 19:16 | token doors: api, web, sync Basic, xfer login card loop; misses feed loginLimiter check-in: 8e20f503a4 user: zeitgeist tags: rfc21-tokens | |
| 19:08 | oltp: token table, resolver, sync_token migration, run- reserved check-in: 81a4dca84c user: zeitgeist tags: rfc21-tokens | |
| 19:06 | land credential-compares-in-constant-time check-in: f466e277f7 user: dmestas tags: trunk | |
| 18:16 | Compare credentials in constant time; tie invite/reset token kind to account state closed check-in: 25b43840dc user: zeitgeist tags: credential-compares-in-constant-time | |
| 15:36 | land zit-0-3-36 check-in: d04a69c3d4 user: dmestas tags: trunk | |
| 15:24 | Pin zit 0.3.36, for the stateless uv client the release workflow publishes with closed check-in: 55c8ef330c user: zeitgeist tags: zit-0-3-36 | |
| 15:21 | land rfc-0021-agent-accounts check-in: 9150242c04 user: dmestas tags: trunk | |
| 15:12 | RFC 0021: agent accounts, forge agents, run-scoped workflow tokens, and the Steward and Publisher presets closed check-in: 4afe165730 user: zeitgeist tags: rfc-0021-agent-accounts | |
| 14:58 | Merge trunk check-in: b0f17d0e5b user: zeitgeist tags: admins-send-reset-links | |
| 14:44 | An emailed invite is not handed to the admin, and the host's password change lands with its journal entry or not at all (#319) check-in: b05d4c6001 user: zeitgeist tags: admins-send-reset-links | |
| 14:41 | Invites work only while the account is unclaimed: re-invite supersedes, redemption spends every other token, and setting a password drops the legacy credential (#319) check-in: 34b986b0e4 user: zeitgeist tags: admins-send-reset-links | |
| 14:27 | Merge trunk check-in: 49748774fe user: zeitgeist tags: admins-send-reset-links | |
| 13:49 | land uv-test-findings check-in: af48d5cd70 user: dmestas tags: trunk | |
| 13:41 | uv: namespace hops keep the escaped path, a repeated uv.put is a no-op, the lit repo tab is never clipped closed check-in: a0445ab567 user: zeitgeist tags: uv-test-findings | |
| 12:57 | land rfc-0020-zit-stateless check-in: 0cff498e05 user: dmestas tags: trunk | |
| 12:50 | RFC 0020: zit keeps no local unversioned store; its client is stateless (zit#226) closed check-in: 99b1e2a643 user: zeitgeist tags: rfc-0020-zit-stateless | |
| 10:10 | land uv-keys-name-their-repository check-in: 691bc030ca user: dmestas tags: trunk | |
| 03:33 |
land activity-tab-and-upstream-owners
Checks tested the merge with trunk at c872fb12b069; trunk has moved since. check-in: d5c1fc0feb user: dmestas tags: trunk | |
| 03:33 | land delete-forgets-its-events check-in: b6f64c2e4c user: dmestas tags: trunk | |
| 01:54 | Test a repair stopped after its round; a tally yields only to a longer repository that exists (#294) closed check-in: 03bdb5c2ba user: zeitgeist tags: delete-forgets-its-events | |
| 01:43 | Merge trunk check-in: 878f45bbab user: zeitgeist tags: delete-forgets-its-events | |
| 01:42 | Keep setup out of category and team caps, test the read-side guards, merge trunk closed check-in: f6017358de user: zeitgeist tags: activity-tab-and-upstream-owners | |
| 01:18 |
land site-admins-stop-at-the-door
Checks tested the merge with trunk at 3a61e5fb682d; trunk has moved since. check-in: c872fb12b0 user: dmestas tags: trunk | |
| 00:41 | Merge trunk closed check-in: c249eab3fd user: zeitgeist tags: site-admins-stop-at-the-door | |
| 00:04 | Exceptions journal and admin alerts show a private repository's fault as its route and kind check-in: f320b0c456 user: zeitgeist tags: site-admins-stop-at-the-door | |
|
2026-10-01
| ||
| 23:22 | Fleet mirror forms keep the site gate and add the repository's a check-in: dc03704065 user: zeitgeist tags: site-admins-stop-at-the-door | |
| 23:08 | Review fixes: fleet mirror forms need the repo letter, deliveries need reach, ops panels hide private paths, no operator unhide check-in: 6b346a86fe user: zeitgeist tags: site-admins-stop-at-the-door | |
| 22:27 | Docs: a site admin holds no repository; operator paths and receipts check-in: 1dc39270f4 user: zeitgeist tags: site-admins-stop-at-the-door | |
| 22:25 | Teams, team rooms and fossil-user sync stop reading the site-admin flag as repository reach check-in: ec0a3aaca7 user: zeitgeist tags: site-admins-stop-at-the-door | |
| 22:19 | Operator paths for delete, claim, reindex and public abuse hiding, with receipts read before the act check-in: 18d05d58fd user: zeitgeist tags: site-admins-stop-at-the-door | |
| 22:11 | Settings roster and copy stop treating site admins as members check-in: 4260bab1f3 user: zeitgeist tags: site-admins-stop-at-the-door | |
| 22:08 | Site admins reach repositories through grants only: feed, notify, guards, fleet-scope gate check-in: 309da0135d user: zeitgeist tags: site-admins-stop-at-the-door | |
| 22:02 | Site admins hold s at forge scope only, not on repositories check-in: 8e7b29d542 user: zeitgeist tags: site-admins-stop-at-the-door | |
| 21:43 |
land alerts-stay-apart
Checks tested the merge with trunk at eea319ac28e8; trunk has moved since. check-in: eba50d9524 user: dmestas tags: trunk | |
| 21:38 | land rfc20-release-tag check-in: 7524e5b29b user: dmestas tags: trunk | |
| 21:35 | Stacked GitHub alerts stay separate blocks, and a plain quote after an alert stays a quote closed check-in: eff5b92ba2 user: zeitgeist tags: alerts-stay-apart | |
| 21:23 | update rfc20-release-tag from trunk closed check-in: b42f59de5b user: dmestas tags: rfc20-release-tag | |
| 21:23 |
land robot-lines-name-numbers
Checks tested the merge with trunk at 6cfc74f49dbf; trunk has moved since. check-in: eea319ac28 user: dmestas tags: trunk | |
| 21:23 | land rfc20-mirror-uv check-in: 3db781656e user: dmestas tags: trunk | |
| 19:19 | mirror uv: no round starts once the forge stops closed check-in: 32f3f7a754 user: zeitgeist tags: rfc20-mirror-uv | |
| 19:15 | mirror uv: a waiting round rereads its login from one row; rounds stop and are waited on before the database closes check-in: 82d3031768 user: zeitgeist tags: rfc20-mirror-uv | |
| 19:09 | merge trunk (bounded sync decoding) into rfc20-mirror-uv check-in: 3f4482ad5b user: zeitgeist tags: rfc20-mirror-uv | |
| 19:03 | land sync-front-bounds-decoding check-in: 6cfc74f49d user: dmestas tags: trunk | |
| 18:40 | deploy: if-form for the check copy check-in: 1a840d926a user: zeitgeist tags: rfc20-release-tag | |
| 18:38 | deploy: release check runs on a copy in a root-owned tree, carrier must be in trunk history, fixed-string tag count check-in: 9ed3b5a939 user: zeitgeist tags: rfc20-release-tag | |
| 18:28 | deploy: a release must be one trunk check-in tagged version-X.Y.Z; store scripts run as quarry; stamp counts re-tags check-in: 0b1198a6f3 user: zeitgeist tags: rfc20-release-tag | |
| 17:38 | Robot ticket lines say ticket #N, since a bare #N in chat is a message closed check-in: 8b7831a301 user: zeitgeist tags: robot-lines-name-numbers | |
| 17:29 | Keep nothing of the decoded body through the relay: logins hold a digest of what they sign, uv payloads are copied out and stay reserved closed check-in: d0cdcd1c0c user: zeitgeist tags: sync-front-bounds-decoding | |
| 17:27 | Merge trunk into robot-lines-name-numbers check-in: e3ccbf9a54 user: zeitgeist tags: robot-lines-name-numbers | |
| 17:20 | Robot lines resolve old numbers once per render, tickets through the shared resolver check-in: 0f186a9b9f user: zeitgeist tags: robot-lines-name-numbers | |
| 17:18 | Hold only decoded request bytes in the budget and release them before the relay; skip decoding when no gate reads the body; raw bodies stay bounded per request only check-in: 893f6d9b9f user: zeitgeist tags: sync-front-bounds-decoding | |
| 17:16 | mirror uv: leave the server decode path to sync-front-bounds-decoding, bound only the client check-in: 887bfced61 user: zeitgeist tags: rfc20-mirror-uv | |
| 17:15 | mirror uv review: form saves in one op, fossil-exact login card and defossilize, RFC note check-in: 8c2dae54c5 user: zeitgeist tags: rfc20-mirror-uv | |
| 17:11 | Bound the sync front's request decoding: refuse oversized containers, decode once, cap decoded bytes process-wide check-in: 9f56dc31f4 user: zeitgeist tags: sync-front-bounds-decoding | |
| 17:11 | mirror uv review: bounded inflate, round off the scheduler, clipped notes check-in: 35159c80d4 user: zeitgeist tags: rfc20-mirror-uv | |
| 17:01 | mirror uv import: api docs and RFC wording check-in: 5f6c0bd9e9 user: zeitgeist tags: rfc20-mirror-uv | |
| 16:59 | deploy: a failed tag lookup stamps a -dev build instead of failing the deploy check-in: 97a15d7954 user: zeitgeist tags: rfc20-release-tag | |
| 16:59 | mirror uv import: fleet form switch and login, Mirror section line, RFC notes check-in: a61d10b125 user: zeitgeist tags: rfc20-mirror-uv | |
| 16:55 | deploy: release runner-set check, strict layout, consistent .prev trio, stamp from carried tags; uv 404 when unbound check-in: b4ff75e936 user: zeitgeist tags: rfc20-release-tag | |
| 16:55 | mirror uv import: the round, the mirror.uv op, stock fossil tests check-in: 3f6a1383c0 user: zeitgeist tags: rfc20-mirror-uv | |
| 16:48 | mirror uv import: wire client and mirror columns check-in: e9aef31045 user: zeitgeist tags: rfc20-mirror-uv | |
| 16:46 | ci: tag runs keep the wait, escape push supersede, prime on a check-in, carry QUARRY_TAG check-in: aabfd9637a user: zeitgeist tags: rfc20-release-tag | |
| 16:39 | land delete-forgets-the-repository check-in: 34b7277ba3 user: dmestas tags: trunk | |
| 16:31 | ci: walk tags by a seen set, keep zit.prev, document re-runs and the release layout check-in: 199a7bbb8b user: zeitgeist tags: rfc20-release-tag | |
| 16:29 | ci: tag event, version stamp, deploy --release and --rollback (recovered) check-in: d6fdc013d8 user: zeitgeist tags: rfc20-release-tag | |
| 15:36 | Forget ingest cursors and consumers by repository name, matching only that repository's own (#294) closed check-in: eb69465510 user: zeitgeist tags: delete-forgets-the-repository | |
| 15:17 | land rfc20-uv-sync check-in: ed0c45702a user: dmestas tags: trunk | |
| 15:16 | Merge trunk; delete also purges unversioned catalog, publisher cursor keys and finishes event scans on pending count (#294) check-in: ea6e1d281e user: zeitgeist tags: delete-forgets-the-repository | |
| 13:34 | RFC 0020 rung 3: quarry's sync front answers fossil's unversioned cards from the bucket closed check-in: c0ed1cf06f user: zeitgeist tags: rfc20-uv-sync | |
| 13:31 | Robot lines name landings and tickets by number, old lines resolve at display check-in: 9ba741c746 user: dmestas tags: robot-lines-name-numbers | |
| 13:13 | land rfc20-uv-web check-in: c35e44640f user: dmestas tags: trunk | |
| 13:05 | RFC 0020 rungs 4-5: the UV tab, downloads at fossil's paths, the releases list, each release's page and the Files page's releases box closed check-in: e34461286f user: zeitgeist tags: rfc20-uv-web | |
| 12:54 | land sync-gate-signs-what-it-credits check-in: 62001f1eeb user: dmestas tags: trunk | |
| 12:29 | The sync gate refuses write cards placed before the login card, which does not sign them closed check-in: e200c91a97 user: zeitgeist tags: sync-gate-signs-what-it-credits | |
| 11:49 |
land rfc20-uv-catalog
Checks tested the merge with trunk at 9a702adb7806; trunk has moved since. check-in: eba0ccd4bf user: dmestas tags: trunk | |
| 11:49 | land emails-from-teams check-in: b21914dcb0 user: dmestas tags: trunk | |
| 11:29 | RFC 0020 rung 2: the unversioned-file catalog, stored in the repository's bucket, with uv ops gated on y closed check-in: d5ef6207dc user: zeitgeist tags: rfc20-uv-catalog | |
| 10:57 | Merge trunk; delete also purges the CI secrets, environments, landing numbers and close sweeps trunk added (#294) check-in: e855d3588c user: zeitgeist tags: delete-forgets-the-repository | |
| 10:54 | Teams are a third email origin: team mark and name in the header; added, removed and role-changed mails closed check-in: d3c48f1788 user: zeitgeist tags: emails-from-teams | |