Cygnus v0.1.0

What's Changed

• Cage boot path and G1 cold-start harness by @0xchasercat in #1
• io_uring splice relay and G2 overhead harness by @0xchasercat in #2
• Fix/fnonce closure by @0xchasercat in #3
• chore: run cargo fmt by @0xchasercat in #5
• Private mount tree and procfs for the cage PID namespace by @0xchasercat in #6
• G3 density harness by @0xchasercat in #7
• Overlay root: tmpfs upper, pivot_root, host tree gone by @0xchasercat in #8
• Seccomp allowlist filter for the cage by @0xchasercat in #9
• Install the seccomp filter in the cage boot path by @0xchasercat in #10
• G4 seccomp conformance harness by @0xchasercat in #11
• Allowlist the x86_64 legacy syscall entry points by @0xchasercat in #12
• Model egress addressing and per-cage nftables policy by @0xchasercat in #13
• Wire live veth egress into the cage boot path by @0xchasercat in #14
• Static pid-1 init for the cage by @0xchasercat in #15
• Make seccomp a Docker-parity denylist, on by default by @0xchasercat in #16
• Masquerade cage egress so Public routes to the internet by @0xchasercat in #17
• Exec the static init as PID 1 when configured by @0xchasercat in #18
• Supervisor lifecycle policy: scale-to-zero, backoff, crash-loop by @0xchasercat in #19
• Supervisor runtime: on-demand boot with request coalescing by @0xchasercat in #20
• Router: lock-free host routing table and request-head parsing by @0xchasercat in #21
• Daemon front: route a request to its cage end to end by @0xchasercat in #22
• Daemon runtime: SQLite state to cold-boot request by @0xchasercat in #23
• Cage ingress: expose overlay-rooted app sockets by @0xchasercat in #24
• Supervisor: detect cages that exit after readiness by @0xchasercat in #25
• Tenant 0: add honest offline console runtime by @0xchasercat in #26
• Docs: update runtime and Tenant 0 status by @0xchasercat in #27
• Runtime: redirect Bun and Node servers to cage ingress by @0xchasercat in #28
• State: add engine, artifact, and deployment migrations by @0xchasercat in #29
• Cage: run finite captured build jobs by @0xchasercat in #30
• Deploy: build source into sealed Bun artifacts by @0xchasercat in #31
• Docs: record source deployment path by @0xchasercat in #32
• Cage: drop all capabilities before exec by @0xchasercat in #33
• Build dependency-bearing Bun sources in restricted cages by @0xchasercat in #34
• Add audited Tenant Zero admin control plane by @0xchasercat in #35
• Ship the public edge: persisted TLS, ACME, limits, and telemetry by @0xchasercat in #36
• Converge console UI into one live/preview shell by @0xchasercat in #37
• Add observability plane: metrics hub, events, runtime app logs by @0xchasercat in #38
• Rename cygnusctl to cygnus and restyle the CLI by @0xchasercat in #39
• Add upload deploy and asynchronous deploy jobs by @0xchasercat in #40
• Add macOS installer support by @0xchasercat in #41
• Frame upstream responses in the relay by @0xchasercat in #43
• Support zero-config static site deployments by @0xchasercat in #45
• Add account authentication and domain lifecycle by @0xchasercat in #46
• Add first-run setup wizard, password login, and domain management UI by @0xchasercat in #44
• Improve deployment workflows and console observability by @0xchasercat in #47
• Ship-readiness polish: dashboard feedback, CLI ergonomics, failure UX, docs by @0xchasercat in #48
• Serve static output for dev-server start scripts; align node page columns by @0xchasercat in #50
• Readable build logs, SPA fallbacks, self-diagnosing detection, macOS uninstall fix by @0xchasercat in #52

Full Changelog: https://github.com/0xchasercat/cygnus/commits/v0.1.0