codician/diffinerypublic

Open-source, agent-first GitHub and GitHub Actions alternative that runs on your own Cloudflare account: git hosting, pull requests, code review and drop-in GitHub Actions YAML on Workers, Durable Objects, R2 and Containers.

Commits on October 14, 2026

Sync: repeat only the warnings a deploy raised, not the ones its script text contains (#167)
Canberk Demirci committed 12 days agosigned
3cece21
Status page at /status, with incidents site administrators post (#166)
Canberk Demirci committed 12 days agosigned
8fb3f55
Deploy and sync: say why /security/report has no Turnstile (#164)
Canberk Demirci committed 12 days agosigned
5e425b5
Terminal task jail: open a tunnel only when the TLS ClientHello asks for the CONNECT host (#163)
Canberk Demirci committed 12 days agosigned
a7e3f13
Pushes: resolve deltas in one pass and bound what unpacking holds in memory (#162)
Canberk Demirci committed 12 days agosigned
1c15c4d
Docs: model usage in the API reference, usage and the security report form on the docs home (#161)
Canberk Demirci committed 13 days agosigned
74272c2
Private security reports at /security/report; the deploy sets up Turnstile and bounce and complaint events (#159)
Canberk Demirci committed 13 days agosigned
7a65ff4
Usage and cost per task, a 30-day usage view, and a per-person model request limit (phase 5a) (#158)
Canberk Demirci committed 13 days agosigned
9945254
Jobs a rollout stops before their steps ran start again; hosted runners have passwordless sudo (#154)
Canberk Demirci committed 13 days agosigned
f60a1c3
Live test reads npm's version line only; the E2E bwrap step needs no sudo on Diffinery's runners (#156)
Canberk Demirci committed 13 days agosigned
a6ebb4c
Docs: terminal task troubleshooting, jobs API runner and placementTries, account data on the docs home (#153)
Canberk Demirci committed 13 days agosigned
9552cd2
Moderation: reports to site administrators, blocking, account suspension and hidden comments (#155)
Canberk Demirci committed 13 days agosigned
1afc28e
Make failed-job and single-job re-runs GitHub-compatible (#151)
Canberk Demirci committed 13 days agosigned
6074ea7
Terminal tasks run in a bubblewrap jail inside the sandbox, opted into at open (#146)
Canberk Demirci committed 13 days agosigned
4372560
Account lifecycle: delete and export your account, recovery signs out other browsers, audited site admin grant and revoke (#152)
Canberk Demirci committed 13 days agosigned
e647e03
Jobs report how often they went back in line; the Live test shows it (#150)
Canberk Demirci committed 13 days agosigned
617abd0
Runner image has the libraries Ruby needs; passing container start errors are retried; the campaign can inspect a run (#147)
Canberk Demirci committed 13 days agosigned
8e39f86
Hosted runners on a replaced image are turned away while a deploy rolls out (#149)
Canberk Demirci committed 13 days agosigned
01989b4
Email suppression list with bounce and complaint intake, one-click unsubscribe by kind, and security.txt (#148)
Canberk Demirci committed 13 days agosigned
cd4c05c
Docs: REST API errors carry a request_id; terminals linked from the docs home and agents overview (#145)
Canberk Demirci committed 13 days agosigned
9d3f439
Phase 4b: give a task to the Claude Code or Codex signed in to my web terminal (#142)
Canberk Demirci committed 13 days agosigned
94ad471
Docs: storage quota errors in troubleshooting; runner_image and rollout (#144)
Canberk Demirci committed 13 days agosigned
7bc0a57
5xx answers carry a request ID that finds their error under Settings → Server errors; the sync retries its secret PUTs (#143)
Canberk Demirci committed 13 days agosigned
4a91970
Agent e2e: terminal tests in their own file, and test-only polls so the task tests take half the time (#140)
Canberk Demirci committed 13 days agosigned
2152c82
Registry hashes chunked uploads as they arrive; the Live test runs on the deployed runner image (#138)
Canberk Demirci committed 13 days agosigned
d10062f
Docs: how web-only egress shows up in a job, and out-of-memory pushes (#141)
Canberk Demirci committed 13 days agosigned
e15c34e
Per-account storage quota (S11): count what repositories and packages store, refuse writes past it (#139)
Canberk Demirci committed 13 days agosigned
2eb67ab
Import campaign can re-run failed jobs; pushes that run out of memory ask to be split (#136)
Canberk Demirci committed 13 days agosigned
2c79ea1
Docs: Actions troubleshooting covers quotas and kill switches (#137)
Canberk Demirci committed 13 days agosigned
cb1375a
Web-only egress for hosted compute behind EGRESS=web, off by default (#134)
Canberk Demirci committed 13 days agosigned
16676eb