codician/diffinerypublic

Open-source, agent-first GitHub and GitHub Actions alternative that runs on your own Cloudflare account: git hosting, pull requests, code review and drop-in GitHub Actions YAML on Workers, Durable Objects, R2 and Containers.

Commits on October 14, 2026

Hide HTML comments in rendered Markdown, as GitHub does (#184)
test-bot committed 12 days ago
d8f55cb
Branch protection: required check names may contain commas (#182)
test-bot committed 12 days ago
b9e1252
Imports: split a refused batch of files again, and allow settings while an import runs (#181)
test-bot committed 12 days ago
5594b9d
A push cut off by a deploy is retried instead of failing with a 500 (#177)
Canberk Demirci committed 12 days agosigned
e9ed630
Pushes: refuse a commit or tag over 4 MiB (#175)
Canberk Demirci committed 12 days agosigned
3281dab
Pushes over 16 MB are unpacked from R2 in ranges, within bounded memory (#157)
Canberk Demirci committed 12 days agosigned
b52f9e7
Headless runs in the jail: model requests through a proxy outside it, only the package registries otherwise (phase 5d) (#172)
Canberk Demirci committed 12 days agosigned
f8fef6f
Audit log: keep entries for 2 years, then delete them once a day (#169)
Canberk Demirci committed 12 days agosigned
7041870
Morning digest: Today by email at the hour you choose, and Today on phones (phase 5c) (#168)
Canberk Demirci committed 12 days agosigned
c67c4e3
Organizations' agent policy and model keys: whose key pays, what agents may use, and a monthly allowance (phase 5b) (#160)
Canberk Demirci committed 12 days agosigned
ffd58b3
Sync: repeat only the warnings a deploy raised, not the ones its script text contains (#167)
Canberk Demirci committed 12 days agosigned
3cece21
Status page at /status, with incidents site administrators post (#166)
Canberk Demirci committed 12 days agosigned
8fb3f55
Private security reports at /security/report; the deploy sets up Turnstile and bounce and complaint events (#159)
Canberk Demirci committed 13 days agosigned
7a65ff4
Usage and cost per task, a 30-day usage view, and a per-person model request limit (phase 5a) (#158)
Canberk Demirci committed 13 days agosigned
9945254
Jobs a rollout stops before their steps ran start again; hosted runners have passwordless sudo (#154)
Canberk Demirci committed 13 days agosigned
f60a1c3
Moderation: reports to site administrators, blocking, account suspension and hidden comments (#155)
Canberk Demirci committed 13 days agosigned
1afc28e
Make failed-job and single-job re-runs GitHub-compatible (#151)
Canberk Demirci committed 13 days agosigned
6074ea7
Terminal tasks run in a bubblewrap jail inside the sandbox, opted into at open (#146)
Canberk Demirci committed 13 days agosigned
4372560
Account lifecycle: delete and export your account, recovery signs out other browsers, audited site admin grant and revoke (#152)
Canberk Demirci committed 13 days agosigned
e647e03
Runner image has the libraries Ruby needs; passing container start errors are retried; the campaign can inspect a run (#147)
Canberk Demirci committed 13 days agosigned
8e39f86
Hosted runners on a replaced image are turned away while a deploy rolls out (#149)
Canberk Demirci committed 13 days agosigned
01989b4
Email suppression list with bounce and complaint intake, one-click unsubscribe by kind, and security.txt (#148)
Canberk Demirci committed 13 days agosigned
cd4c05c
Phase 4b: give a task to the Claude Code or Codex signed in to my web terminal (#142)
Canberk Demirci committed 13 days agosigned
94ad471
5xx answers carry a request ID that finds their error under Settings → Server errors; the sync retries its secret PUTs (#143)
Canberk Demirci committed 13 days agosigned
4a91970
Agent e2e: terminal tests in their own file, and test-only polls so the task tests take half the time (#140)
Canberk Demirci committed 13 days agosigned
2152c82
Registry hashes chunked uploads as they arrive; the Live test runs on the deployed runner image (#138)
Canberk Demirci committed 13 days agosigned
d10062f
Per-account storage quota (S11): count what repositories and packages store, refuse writes past it (#139)
Canberk Demirci committed 13 days agosigned
2eb67ab
Import campaign can re-run failed jobs; pushes that run out of memory ask to be split (#136)
Canberk Demirci committed 13 days agosigned
2c79ea1
Web-only egress for hosted compute behind EGRESS=web, off by default (#134)
Canberk Demirci committed 13 days agosigned
16676eb
Jobs whose container stops before the runner fetched them are placed again; jobs record their runner (#135)
Canberk Demirci committed 13 days agosigned
0858d86