teahubxyzandClaude Opus 5.5
9fece6d818
/domains/sign-in and /domains/callback do Tea MCP's own Gitea OAuth (the Green Tea MCP app) in the browser, keep only the name from Gitea, and leave a signed, HttpOnly cookie on mcp.teahub.xyz for 30 days. GET /domains wants it (401 with a sign-in link otherwise) and rate-limits per person. The Domains tab sends that cookie, offers the sign-in on a 401, and runs the waiting search on the way back. Tested end to end against a Gitea 28 and Cloudflare. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CYHXFvWMCs1GUmRmpySqQ6
Teahub v1 (Green Tea)
Teahub is Git + tea (Gitea) + Time. This repository is the spine of the v1 prod instance at https://teahub.xyz, rebuilt fresh on 2026-10-14. Nothing was copied from the hb-5 era; pieces are ported only when a card needs them, and each port is a commit here.
AGENTS.md— the map for agents (where you are, how to move).docs/decisions.md— append-only decisions ledger.docs/rebuild.md— every step the rebuild needed beyond "clone + bootstrap"; the measure of portability.mcp/— Green Tea MCP, the Teahub MCP (FastMCP) against this Gitea. Every tool acts as the signed-in user.- Time (the automation layer) lives at https://github.com/teahubxyz/time, mirrored here as
teahubxyz/time.
Logins: GitHub (now), nostr (next). Prod holds no secrets beyond Gitea's own keys, the GitHub OAuth client, and the MCP's OAuth client.