feat(node)!: anchor the UCAN proof chain and honour delegated git/push - #331

Open

Vasanthdev2004 wants to merge 22 commits into

mainfrom

feat/ucan-push-authorization

Commits on Aug 16, 2026

feat(core)!: verify_chain returns the proof chain's root issuer
Vasanthdev2004
committed
2a8d64d
fix(node): gate two Unix-only tests so the crate compiles on Windows
Vasanthdev2004
committed
13a2424
feat(node): carry the verified UCAN and its root into the request
Vasanthdev2004
committed
1b1c972
feat(node): add ucan_grants_push, anchored at the repo owner
Vasanthdev2004
committed
f8b9cf1
feat(node): honour a delegated git/push capability on the push path
Vasanthdev2004
committed
d27f0be
feat(gl): gl ucan import stores a delegation for the push helper
Vasanthdev2004
committed
d141e59
feat(git-remote): send a delegated push capability as X-Ucan
Vasanthdev2004
committed
3d81f57
test(git-remote): cover pack-POST URL splitting
Vasanthdev2004
committed
8843c4f
build: sync Cargo.lock for the git-remote-gitlawb dependencies
Vasanthdev2004
committed
a9e9c48
fix(core,gl,git-remote): close two review findings on delegated push
Vasanthdev2004
committed
f455726
fix(core,node,gl,git-remote): close the second review round on delegated push
Vasanthdev2004
committed
a2502fc
fix(gl): restrict the delegations directory, and state the contract
Vasanthdev2004
committed
d503655
fix(gl,git-remote): make a delegation issued the documented way actually work
Vasanthdev2004
committed
5071524
fix(gl): refuse a relative or non-UTF-8 GITLAWB_KEY when deriving the store
Vasanthdev2004
committed
5dfd8c5
fix(identity): one resolver for GITLAWB_KEY across gl and the helper
Vasanthdev2004
committed
e15fa73
test(git-remote): cover delegation_header end to end
Vasanthdev2004
committed
05fc52d
fix(gl): finish the identity-path sweep on the write side
Vasanthdev2004
committed
75aa1a0

Commits on Aug 18, 2026

fix(gl,core): close round five — lazy home, envelope reads, honest register
Vasanthdev2004
committed
fad75a6

Navigation Menu

Uh oh!

feat(node)!: anchor the UCAN proof chain and honour delegated git/push - #331

feat(node)!: anchor the UCAN proof chain and honour delegated git/push#331
Vasanthdev2004 wants to merge 22 commits into
mainfrom
feat/ucan-push-authorization

Commits on Aug 16, 2026

feat(core)!: verify_chain returns the proof chain's root issuer

fix(node): gate two Unix-only tests so the crate compiles on Windows

feat(node): carry the verified UCAN and its root into the request

feat(node): add ucan_grants_push, anchored at the repo owner

feat(node): honour a delegated git/push capability on the push path

feat(gl): gl ucan import stores a delegation for the push helper

feat(git-remote): send a delegated push capability as X-Ucan

test(git-remote): cover pack-POST URL splitting

build: sync Cargo.lock for the git-remote-gitlawb dependencies

fix(core,gl,git-remote): close two review findings on delegated push

fix(core,node,gl,git-remote): close the second review round on delegated push

fix(gl): restrict the delegations directory, and state the contract

fix(gl,git-remote): make a delegation issued the documented way actually work

fix(gl): refuse a relative or non-UTF-8 GITLAWB_KEY when deriving the store

fix(identity): one resolver for GITLAWB_KEY across gl and the helper

test(git-remote): cover delegation_header end to end

fix(gl): finish the identity-path sweep on the write side

Commits on Aug 18, 2026

fix(gl,core): close round five — lazy home, envelope reads, honest register

Commits on Aug 22, 2026

fix(node,gl,git-remote): enforce repo narrowing at the node, honour the key basename

fix(gl): align the MCP ucan_show tool with gl ucan show

fix(gl): drop a needless borrow in quickstart's unix key write

fix(node,gl,git-remote): fix a delegation's scope at issuance