What's Changed
- Cage boot path and G1 cold-start harness by @0xchasercat in #1
- io_uring splice relay and G2 overhead harness by @0xchasercat in #2
- Fix/fnonce closure by @0xchasercat in #3
- chore: run cargo fmt by @0xchasercat in #5
- Private mount tree and procfs for the cage PID namespace by @0xchasercat in #6
- G3 density harness by @0xchasercat in #7
- Overlay root: tmpfs upper, pivot_root, host tree gone by @0xchasercat in #8
- Seccomp allowlist filter for the cage by @0xchasercat in #9
- Install the seccomp filter in the cage boot path by @0xchasercat in #10
- G4 seccomp conformance harness by @0xchasercat in #11
- Allowlist the x86_64 legacy syscall entry points by @0xchasercat in #12
- Model egress addressing and per-cage nftables policy by @0xchasercat in #13
- Wire live veth egress into the cage boot path by @0xchasercat in #14
- Static pid-1 init for the cage by @0xchasercat in #15
- Make seccomp a Docker-parity denylist, on by default by @0xchasercat in #16
- Masquerade cage egress so Public routes to the internet by @0xchasercat in #17
- Exec the static init as PID 1 when configured by @0xchasercat in #18
- Supervisor lifecycle policy: scale-to-zero, backoff, crash-loop by @0xchasercat in #19
- Supervisor runtime: on-demand boot with request coalescing by @0xchasercat in #20
- Router: lock-free host routing table and request-head parsing by @0xchasercat in #21
- Daemon front: route a request to its cage end to end by @0xchasercat in #22
- Daemon runtime: SQLite state to cold-boot request by @0xchasercat in #23
- Cage ingress: expose overlay-rooted app sockets by @0xchasercat in #24
- Supervisor: detect cages that exit after readiness by @0xchasercat in #25
- Tenant 0: add honest offline console runtime by @0xchasercat in #26
- Docs: update runtime and Tenant 0 status by @0xchasercat in #27
- Runtime: redirect Bun and Node servers to cage ingress by @0xchasercat in #28
- State: add engine, artifact, and deployment migrations by @0xchasercat in #29
- Cage: run finite captured build jobs by @0xchasercat in #30
- Deploy: build source into sealed Bun artifacts by @0xchasercat in #31
- Docs: record source deployment path by @0xchasercat in #32
- Cage: drop all capabilities before exec by @0xchasercat in #33
- Build dependency-bearing Bun sources in restricted cages by @0xchasercat in #34
- Add audited Tenant Zero admin control plane by @0xchasercat in #35
- Ship the public edge: persisted TLS, ACME, limits, and telemetry by @0xchasercat in #36
- Converge console UI into one live/preview shell by @0xchasercat in #37
- Add observability plane: metrics hub, events, runtime app logs by @0xchasercat in #38
- Rename cygnusctl to cygnus and restyle the CLI by @0xchasercat in #39
- Add upload deploy and asynchronous deploy jobs by @0xchasercat in #40
- Add macOS installer support by @0xchasercat in #41
- Frame upstream responses in the relay by @0xchasercat in #43
- Support zero-config static site deployments by @0xchasercat in #45
- Add account authentication and domain lifecycle by @0xchasercat in #46
- Add first-run setup wizard, password login, and domain management UI by @0xchasercat in #44
- Improve deployment workflows and console observability by @0xchasercat in #47
- Ship-readiness polish: dashboard feedback, CLI ergonomics, failure UX, docs by @0xchasercat in #48
- Serve static output for dev-server start scripts; align node page columns by @0xchasercat in #50
- Readable build logs, SPA fallbacks, self-diagnosing detection, macOS uninstall fix by @0xchasercat in #52
Full Changelog: https://github.com/0xchasercat/cygnus/commits/v0.1.0
Contributors
0xchasercat