OXYGENHUB

Changes up to # d29070faef66 touching crates/hub/tests/flow.rs · 17

See as swimlanes (independent work side by side)

Flow: a failing job's receipt may leave kept artifacts out head
Andy McCall ·
✔ d29070faef66
Trust and audit for each release
Andy McCall ·
✔ df940d75cd3d
Release assets link to the receipt that built them
Andy McCall ·
✔ 10708ab8f54d
Keep and serve Flow job artifacts
Andy McCall ·
✔ a3c8288b0141
Verify and keep signed Flow receipts
Andy McCall ·
✔ cc19697f8871
A queued run says where it stands
Andy McCall ·
✔ bf3d07541368
Flow runs, jobs and logs in the API; checks by heads
Andy McCall ·
✔ 90326c9601f9
Claims tell the runner the run's state, bookmark and number
Andy McCall ·
✔ 9a065bc0ce33
Run pipeline and Re-run: runs that move no bookmark
Andy McCall ·
✔ 1edac4b68c6d
Number Flow runs per repository
Andy McCall ·
✔ a0d4bbfbedd1
Turn OxygenFlow on or off per repository in settings
Andy McCall ·
✔ 9008bf6c2b8c
Write transactions begin IMMEDIATE, so a concurrent writer is waited for (busy timeout) instead of failing at once with database is locked; a test of 16 concurrent log appends fails without it
Andy McCall ·
✔ 941abdd6bb4c
Build against oxygenflow's pinned oxygen (deps/oxygenflow/deps/oxygen) instead of a second pin, so there is one oxy-core; OxygenFlow claims follow subrepos of subrepos, parents first, up to three deep
Andy McCall ·
✔ 25091e5c3bba
Flow test: a private subrepo pinned with the environment's token is still left out for a pusher who cannot read it
Andy McCall ·
✔ 370035a46397
OxygenFlow claims list the state's pinned Oxygen subrepos that the pusher can read, and the job token may read those repositories too
Andy McCall ·
✔ fd3db644df22
Flow state stamps: a state-addressed, verifiable pipeline result for READMEs, and a raw route so Markdown images work
Andy McCall ·
✔ 736f6813543d
OxygenFlow runs: pushes start pipeline runs, a runner API with job tokens, jobs as checks, and a Flow tab with the job graph and live logs
Andy McCall ·
✔ 42fa95540468