OXYGENHUB

Changes up to # 9ff1fb9f2865 touching crates/flow/src/main.rs · 17

See as swimlanes (independent work side by side)

Allow-listed egress over vsock: network "egress" { allow "host"... }
Andy McCall via Claude Code agent ·
✔ ea81796bb757
A build cache: disk mounts that carry a build forward
Andy McCall ·
✔ d60aac6c3f8a
Jetstream: runners share images peer to peer
Andy McCall ·
✔ b14aeaae683a
Runners send their facts with every claim: free disk, load, speed
Andy McCall ·
✔ 62829d15ef09
Images by hash: flow rootfs push and pull, and runners fetch what they lack
Andy McCall ·
✔ 4cf0c99a1486
The syscall tier: jobs without KVM
Andy McCall ·
✔ ea56c56eaf90
Architecture awareness: image manifests, arch on a sandbox, archs on the claim
Andy McCall ·
✔ 1abadd4a2fa6
A job's identity: identity blocks name an audience and a mount path
Andy McCall ·
✔ 720eb8191059
Secrets mount as files: secret blocks, the claim's secrets, flow-init writes them
Andy McCall ·
✔ e2c125610f43
A claim carries the hub's variables for the job
Andy McCall ·
✔ c58efc6a74db
Build identity in flow --version and runner reports
Andy McCall ·
✔ 2d025bbf9842
Register runners with a token; describe them in claims
Andy McCall ·
✔ f98a8f7881e0
Job artifacts: output declarations, extraction and upload
Andy McCall ·
✔ a67b97e9a717
Sandbox env, and an image's own environment
Andy McCall ·
✔ a72abeeedd78
Guest /dev/fd links; jobs are told what they build
Andy McCall ·
✔ c4285535b03a
flow wait: follow the checks a push started on OxygenHub until they finish, against the repository's required checks; exit 0 passed, 1 failed, 2 at the time limit
Andy McCall ·
✔ 9e8f4a56630b
OxygenFlow M0: pipeline parser and canonical job graph, receipts, the runner API types, flow-init, the Firecracker tier, flow check, run, rootfs import and runner
Andy McCall ·
✔ e0918b887850