// oxygen-vscode's pipeline (OxygenFlow, docs in the oxygenflow repository):

// typecheck, bundle, tests against a real oxy, and packaging, offline in a

// Firecracker microVM on Earth for every push.

schema-version 1

// The OxygenFlow build image (oxygenflow/images/rust): Node, Rust, an npm

// cache of this repository's package-lock.json, and the crates oxy needs.

// Rebuild and re-pin it when package-lock.json changes.

sandbox "node" {

    runtime "microvm"

    rootfs "cas://blob/836461b613019f62399a960c61a25c482eb74e30054ff2cd44d5594c3305872b"

    memory-limit "6GiB"

    cpu-limit 4

    network "loopback"

}

// The tests drive the real oxy, built here from the pinned oxygen in deps/.

job "check" {

    sandbox "node"

    mount {

        source "ephemeral://disk"

        target "/src/deps/oxygen/target"

        size "16GiB"

    }

    env {

        CARGO_INCREMENTAL "0"

    }

    exec "sh" "-euc" "cargo build --locked --manifest-path deps/oxygen/Cargo.toml -p oxy && npm ci --offline --cache /opt/npm-cache --no-audit --no-fund && npm run typecheck && npm run build && OXY_BIN=/src/deps/oxygen/target/debug/oxy npm run test:ci"

    // A JUnit report (kept whether or not the tests pass) and line coverage

    // of src/ through esbuild's source maps, for the hub's Tests and

    // Coverage tabs.

    output {

        artifact "junit" {

            path "/src/out/junit.xml"

            when "always"

        }

        artifact "coverage" {

            path "/src/out/lcov.info"

        }

    }

}

job "package" {

    sandbox "node"

    depends-on "check"

    // A fresh workspace: nothing from check carries over, so build first.

    exec "sh" "-euc" "npm ci --offline --cache /opt/npm-cache --no-audit --no-fund && npm run build && npm run package"

}