// oxygen-vscode's pipeline (OxygenFlow, docs in the oxygenflow repository):

// typecheck, bundle, tests against a real oxy, and packaging, offline in a

// Firecracker microVM on Earth for every push.

schema-version 1

// The OxygenFlow build image (oxygenflow/images/rust): Node, Rust, an npm

// cache of this repository's package-lock.json, and the crates oxy needs.

// Rebuild and re-pin it when package-lock.json changes.

sandbox "node" {

    runtime "microvm"

    rootfs "cas://blob/85c744e509d45118942a8ca77408d56894bf7833fa806d20d08511cc90bc5024"

    memory-limit "6GiB"

    cpu-limit 4

    network "loopback"

}

// The tests drive the real oxy, built here from the pinned oxygen in deps/.

job "check" {

    sandbox "node"

    mount {

        source "ephemeral://disk"

        target "/src/deps/oxygen/target"

        size "16GiB"

    }

    env {

        CARGO_INCREMENTAL "0"

    }

    exec "sh" "-euc" "cargo build --locked --manifest-path deps/oxygen/Cargo.toml -p oxy && npm ci --offline --cache /opt/npm-cache --no-audit --no-fund && OXY_BIN=/src/deps/oxygen/target/debug/oxy npm run check"

}

job "package" {

    sandbox "node"

    depends-on "check"

    // A fresh workspace: nothing from check carries over, so build first.

    exec "sh" "-euc" "npm ci --offline --cache /opt/npm-cache --no-audit --no-fund && npm run build && npm run package"

}