📥

Your Move

GITHUB MOVES. YOUR TURN.

A GitHub inbox for what moved and whose move it is — installable on any device.

Features • How it works • Self-hosting • Development

Your Move is a single authenticated page that answers one question: what changed, and is it my turn? It reads GitHub live — pull requests, reviews, checks, issues — and lays it out as a matrix: one row per repository, one column per status, so a project's whole situation is a single line you read across. Every row is marked your move or their move. Tap a card and it opens on GitHub. There is nothing else to configure.

It is built to be genuinely good on a phone, since that is the hardest case and the one that usually goes unserved. Desktop and tablet are first-class too — one responsive surface, installable everywhere as a PWA.

🌟 Features

• 📱 One board, every width — the same matrix on a phone and on a desk, scroll-snapping in both axes, with a status rail on narrow and sticky lane names on wide. Not a mobile app and a desktop app.
• 🎛 Filters that combine — whose move, repository, status and label; AND across facets, OR within one, and the whole selection lives in the URL, so a view is a bookmark.
• 🗂 Foldable projects — collapse a noisy repository and its row keeps its columns and its counts, hatched.
• 🔀 Whose move, at a glance — every card carries a short reason in one of four tones: review requested, CI failing, changes requested, a conflict, approved.
• 🔎 A row in enough detail to decide — verdict, checks, reviews and the description, as a side panel, a modal or full screen. No diff and no comment box: that is what GitHub is for.
• 🔗 Opens where the truth lives — tapping or clicking a row takes you straight to the issue or PR on GitHub. No parallel comment thread, no second place to check.
• 🔑 GitHub OAuth, per user — sign in with GitHub and every request runs under your own token, scoped to whatever you can already see. No shared token, no passphrase.
• 🕰 Honest about its own age — the board polls rather than mirrors, and says visibly how old what you're looking at is: live, refreshing, stale, or offline.
• 📲 Installable everywhere — a proper PWA with a manifest, a service worker, and an offline page, so it behaves like an app on the home screen rather than a bookmarked tab.

🔀 Derive, never mirror

GitHub owns issues, PRs, reviews, checks, labels and history. Your Move owns only the interpretation — whose move it is, how rows are ranked, how they're presented — and it derives that fresh, on every load. There is no database, no mirror, and no webhooks.

The test for whether a store is honest is what happens when it's empty:

	Cold store
Mirror	The row isn't there, so the feature is wrong — invisibly so
Cache	The row isn't there, so you fetch it — slow, never wrong

So the app caches query results, shows staleness visibly rather than hiding it, and never lets anything live only in memory. It polls every 10 minutes and only while you are looking, caches an answer for five, and marks the board stale after eight minutes of silence rather than quietly serving something that might no longer be true. A full read costs about 74 of GitHub's 5,000 hourly GraphQL points, and the app stops polling before it can spend the last of them.

The data path is short by design: @kud/gh builds the GraphQL queries and merges the results; @kud/gh-workflow decides what a row is and whose move it is. Neither library knows this is a browser — the transport and the section vocabulary belong entirely to this app.

🚀 Quick Start

git clone https://github.com/kud/your-move.git
cd your-move
npm install
cp .env.example .env.local

Fill in .env.local (see Self-hosting below for what each variable needs), then:

$ npm run dev
▲ Next.js 16.3.1
- Local:        http://localhost:3000

✓ Ready in 890ms

Open http://localhost:3000, sign in with GitHub, and the board loads.

🔐 Self-hosting

Your Move has no server-side session store — the session is your GitHub token, encrypted with AES-GCM under a server-only key and kept in an HttpOnly cookie. Nothing to run, nothing to back up, and no extra component that can be down while GitHub is up.

Three environment variables, all required:

Variable	What it is
SESSION_SECRET	Any long random string — the key the session cookie is sealed under. Generate one with openssl rand -base64 48. Changing it signs everyone out, which doubles as a way to revoke every session at once.
GITHUB_CLIENT_ID	From a GitHub OAuth App.
GITHUB_CLIENT_SECRET	From the same OAuth App.

When creating the OAuth App, set its Authorization callback URL to <your-deployment>/api/auth/callback.

Deliberately an OAuth App, not a GitHub App: a GitHub App's user access token is intersected with the App's installations, so it only ever sees repos the App happens to be installed on — the wrong shape for a scope that changes weekly. An OAuth App carries no such restriction.

The reference deployment runs at move.kud.io. To run your own:

npm run build
npm start

Deploy the build output anywhere that runs Node — a platform like Vercel works with zero extra configuration beyond the three environment variables above.

🔧 Development

your-move/
├── app/                  Routes: the board, login, OAuth callback, inbox API
│   ├── api/auth/         OAuth login, callback, logout
│   ├── api/inbox/        The one endpoint the board polls
│   ├── login/            Static sign-in page — no client JS
│   └── offline/          Precached page shown with no network
├── components/           Board/list UI, hooks for polling, notifications, view mode
├── lib/                  Auth (session sealing), GitHub data path, time/section helpers
├── public/               Manifest icons, service worker
└── assets/               Source SVGs the icons are rendered from

Script	What it does
npm run dev	Start the dev server
npm run build	Production build
npm start	Run the production build
npm test	Run the test suite (Vitest)
npm run typecheck	Type-check with no emit

🖥 Its sibling

@kud/gh-cockpit is the terminal counterpart — a keyboard-first TUI with cross-repo aggregation, filters and drill-in, in daily use. Your Move is the graphical surface, built for any device rather than a keyboard. They're two products with different postures, reading the same GitHub facts through the same underlying libraries (@kud/gh, @kud/gh-workflow) — not one product wearing two skins.

🏗 Tech Stack

Layer	Choice
Framework	Next.js 16 (App Router)
UI	React 19
Styling	Tailwind CSS 4
Language	TypeScript
Data	@kud/gh (GraphQL query building, health derivation), @kud/gh-workflow (whose-move verdict, sorting)
Markdown	react-markdown + remark-gfm
Testing	Vitest

---

MIT © kud — Made with ❤️