anvilsign in

collin/anvil

12249ca50f6643c02c992530842d3d16b9cf2266 / TODO.md

BoardRenderedSource

Todo8 open

  1. pull mirror (maybe): a repo that virtually mirrors a GitHub repo
    • just displays it here — periodically fetched, read-only on the anvil side
  2. pull requests (gix merge)
  3. webhooks (mind the SSRF item in docs/untrusted-mode.md)
  4. richer file editing: a real markdown editor with a live render preview

    (reuse render_markdown) before committing

  5. attachment reclaim: an orphan sweep (delete attachments no committed file

    references) and/or a per-attachment delete action — the recourse once a repo hits its quota. Deferred: deletion is destructive and "orphaned" is fuzzy (tip-only vs any-ref), so it wants its own design pass

  6. remove a repo's attachment + artifact dirs on repo delete — blocked: there

    is no repo-delete path yet (only the create-rollback uses it)

  7. admin usage: per-repo drill-down, and a cheap cached/periodic variant if

    the on-demand disk walk gets slow on large instances

  8. API tokens: a write scope (would need CSRF-exempt write paths) and

    last_used_at tracking