Team hub phase 1: sanitise synced events, deploy tooling, member onboarding - #7

Merged

datj9 merged 46 commits into

mainfrom

feat/hub-web-ui

Sep 21, 2026

Commits on Aug 25, 2026

docs: add the team hub design and threat model

datj9
and
claude
committed
6c28b1b
docs: add the hub implementation plan and fix what review found

datj9
and
claude
committed
00ea918
feat: add a scan rule for hub tokens
datj9
committed
4b3db20
chore: require node 22.13 for node:sqlite
datj9
committed
748be01
docs: declare the projected state type with the wire vocabulary
datj9
committed
8402e49
docs: make the projected state single-sourced and unambiguous on the wire
datj9
committed
95ac109
docs: scope the storage law to the component that owns it
datj9
committed
4aa9cb5
feat: add the hub wire types
datj9
committed
69bff0d
fix: tolerate unknown fields on the wire but not in the projection
datj9
committed
d0e810c
refactor: tag the ingest result union so a conflict cannot be missed
datj9
committed
ba79115
fix: refuse a node whose map key and nodeId disagree
datj9
committed
38b0dcc
docs: define the high-water mark for a batch that carries no events
datj9
committed
fca1326
fix: constrain the wire so an incoherent batch cannot be stored
datj9
committed
8e365ab
refactor: type the run row status as a run status
datj9
committed
49a9146
fix: reject wire values that cannot describe a real run
datj9
committed
054afd2
feat: add the hub store
datj9
committed
d239293
docs: correct the index ddl, the minting boundary and the feed derivation
datj9
committed
ec5fc48
feat: add hub auth
datj9
committed
45057d5
fix: agree on one alphabet for hub token key ids
datj9
committed
64d05f6
feat: add the hub http handlers
datj9
committed
3ac79b0
fix: report the error the handler actually found
datj9
committed
5dc3117
feat: add the lg-hub binary
datj9
committed
d4c7b1a
fix: export the stored event line verbatim
datj9
committed
6b7d39f
feat: stamp a stream id on every run
datj9
committed
69efac6
feat: project run state before it leaves the machine
datj9
committed
787f16f
fix: mask the node error before it leaves the machine
datj9
committed
dd92810
feat: add the client transport and sync cursor
datj9
committed
505d092
fix: bound the hub request regardless of the transport
datj9
committed
b2e19fe
feat: add lg enroll and lg sync
datj9
committed
854a975
feat: push events as a run produces them
datj9
committed
17a1a42

Commits on Aug 26, 2026

test: prove the cursor never passes the last ack
datj9
committed
ca7aa60
docs: describe the hub in the readme
datj9
committed
a6d7b11
test: assemble hub token fixtures at runtime
datj9
committed
7d46de7

Commits on Aug 27, 2026

Merge remote-tracking branch 'origin/main' into feat/hub-phase1
datj9
committed
7c4b734

Commits on Sep 17, 2026

feat(hub): serve a web UI and expose runs/members over HTTP

datj9
and
claude
committed
fb12c2d

Commits on Sep 21, 2026

fix(team): sanitise synced event lines so secrets never reach the hub

datj9
and
claude
committed
02cb20f
docs(readme): correct four stale claims about install, the hub store and the web UI

datj9
and
claude
committed
06f7135
fix(sync): gate manual syncs on the repo opt-in, not just the live batcher

datj9
and
claude
committed
d47f4dc
feat(deploy): add hub provisioning, backup and NetBird ACL scripts

datj9
and
claude
committed
7348068
docs(hub): add member onboarding and operator runbook

datj9
and
claude
committed
213c05e
fix(deploy): quote hub.env values that contain spaces

datj9
and
claude
committed
f1696d0
chore: ignore npm pack output

datj9
and
claude
committed
7f085e1
docs(deploy): say which regex flavour LOOMGRAPH_HEALTH_EXPECT uses

datj9
and
claude
committed
4ae6cb9
feat(deploy): add enroll-member.sh for the NetBird half of onboarding

datj9
and
claude
committed
5b70969
docs(hub): document the NetBird half of adding a member

datj9
and
claude
committed
82b44b6
docs: add a member quickstart, the doc you hand a new colleague

datj9
and
claude
committed
9c885fd