Commit Card | Zyeon UI

Preview in your theme

One commit. The type badge, the scope and the subject are parsed out of the raw git message — the data never said 'feat'. Revert needs two presses on the same button (focus never moves), ignores the second half of a double-click, and fires onRevert exactly once no matter how fast you click; Escape disarms. The sha chip copies all 40 characters, not the 7 you can see.

feat

bind refresh tokens to a device fingerprint

Zyeon Coderclaude-opus-522 minutes agoscope: authagent/auth-device-binding

+408−619 files

src/server/auth/refresh-token.ts+96 −14
src/server/auth/device-fingerprint.ts+74 −0
src/server/auth/__tests__/refresh-token.test.ts+132 −8

no callback fired yet

Three commits from one run, grouped: an aggregate header that counts each touched file once (not once per commit) and a rail that stops at the last commit. No onViewDiff handler here, so the two commits that carry a url render a real anchor and the third — which has nowhere to go — draws no button at all. Every commit keeps its own disclosure: appending a fourth commit to a live run cannot close what the reader opened.

Run #482 · harden refresh-token rotation

3 commits+578−6813 files

feat
bind refresh tokens to a device fingerprint
Zyeon Coderclaude-opus-522 minutes agoscope: authagent/auth-device-binding
+408−619 files
- src/server/auth/refresh-token.ts+96 −14
- src/server/auth/device-fingerprint.ts+74 −0
- src/server/auth/__tests__/refresh-token.test.ts+132 −8
View commit
fix
stop rotating a refresh token that failed the fingerprint check
Zyeon Coderclaude-opus-534 minutes agoscope: authagent/auth-device-binding
+49−52 files
- src/server/auth/refresh-token.ts+11 −5
- src/server/auth/__tests__/refresh-token.test.ts+38 −0
View commit
test
cover token replay from a second device
Patchbothaiku-4.551 minutes agoscope: authagent/auth-device-binding
+121−24 files
- src/server/auth/__tests__/replay.test.ts+91 −0
- src/test/fixtures/devices.ts+26 −0
- vitest.config.ts+3 −1

A breaking change, opened. `refactor(api)!:` and the BREAKING CHANGE footer both raise the same mark — either one alone is enough — and the body is revealed by the same control that reveals the remaining files.

refactorbreaking

drop the v1 response envelope

Nova Refactorgpt-5.2-codex3 hours agoscope: apiagent/api-envelope-removal

+188−4714 files

src/server/http/envelope.ts+0 −118
src/server/http/router.ts+63 −47
src/server/http/__tests__/router.test.ts+84 −96
openapi/v1.yaml+41 −210

BREAKING CHANGE: every /v1 endpoint used to answer with { data, meta,
errors }. It now answers with the resource itself and moves pagination into
Link headers. Clients that read `body.data` must read the body directly.

24 files behind maxFiles=3. The cap is a number you can read and a control you can press: '+21 more files' expands to all 24 with no fixed height and no hidden overflow. Totals are always for the whole commit, never for the visible slice.

chore

migrate every workspace off the deprecated logger export

Patchbothaiku-4.52 hours agoscope: depsagent/logger-migration

+919−70224 files

src/lib/scholarship/eek_tribe_deer.ts+2 −31
src/lib/flight/gee_huzzah_down.ts+44 −17
src/components/yeast/below_inasmuch.ts+42 −40

A 100-character path: the directory truncates, the file name never does. A binary asset says 'binary' instead of an honest-looking +0 −0, and 'hotfix' — a type Conventional Commits never defined — still renders, with neutral chrome.

hotfix

restore the dark-mode contrast of the disabled chip after the token rename

Nova Refactorgpt-5.2-codex4 minutes agoscope: design-systemagent/chip-contrast

+11−73 files1 binary

packages/design-system/src/components/data-display/chip/variants/disabled/chip-disabled.tokens.ts+7 −7
packages/design-system/assets/reference/chip-disabled-dark.pngbinary
CHANGELOG.md+4 −0

A merge commit touches no files, so the panel says so rather than printing a total of zero.

chore

merge agent/auth-device-binding into main

Zyeon Coderclaude-opus-546 minutes agoscope: releasemain

No file changes recorded

Already reverted: the affordance is gone (you cannot revert it twice) and the outcome stays in the log. Rendered without `now`, so the timestamp is the absolute date instead of 'yesterday'.

revertreverted

"perf(render): memoise the token stream reducer"

Patchbothaiku-4.5Mar 3, 2026, 9:41 AMmain

+24−1052 files

src/lib/stream/token-reducer.ts+18 −71
src/lib/stream/__tests__/token-reducer.test.ts+6 −34

This commit was reverted.

status='ready' — the envelope resolved and there is a commit to read.

feat

bind refresh tokens to a device fingerprint

Zyeon Coderclaude-opus-522 minutes agoscope: authagent/auth-device-binding

+408−619 files

src/server/auth/refresh-token.ts+96 −14
src/server/auth/device-fingerprint.ts+74 −0
src/server/auth/__tests__/refresh-token.test.ts+132 −8

View commit

status='empty' — the run finished without committing anything.

No commits from this run yet.

status='loading' — the commit record itself hasn't arrived.

status='error' — the run log failed to load. A different failure from a commit being reverted, so it reads differently and offers a retry.

Couldn't load these commits

The run log stream closed before the commits arrived. request-id: 7f2c-9ad1

Loading preview…

This component is part of Pro

The install command, prompt and concept map are included with a Pro license — one purchase unlocks every Pro component, forever.

Unlock with Pro

BREAKING CHANGE: every /v1 endpoint used to answer with { data, meta, errors }. It now answers with the resource itself and moves pagination into Link headers. Clients that read `body.data` must read the body directly.