can1357
bc355472af
- Added a Bun-based `scripts/ci-release-notes.ts` utility that extracts `## [version]` entries from `packages/*/CHANGELOG.md` and writes a combined `release-notes.md` for the release tag. - Updated the GitHub release workflow to install Bun, run the notes generator, and pass the generated `release-notes.md` to `softprops/action-gh-release` via `body_path`.
394 lines
16 KiB
YAML
394 lines
16 KiB
YAML
name: CI
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
tags: ["v*"]
|
|
pull_request:
|
|
branches: [main]
|
|
workflow_dispatch:
|
|
inputs:
|
|
skip_npm:
|
|
description: "Skip npm publish"
|
|
type: boolean
|
|
default: false
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
# Compute a stable hash of every input that affects the native cdylib output,
|
|
# then look for any prior successful main run that already uploaded the linux-x64
|
|
# artifacts for this hash. If found, test jobs reuse those artifacts instead of
|
|
# rebuilding them on non-release commits. The non-tag native_linux job is skipped
|
|
# in that case, so the canary's retention window (see build-native action) is the
|
|
# effective TTL of a cache hit before main rebuilds anyway.
|
|
rust-hash:
|
|
runs-on: ubuntu-22.04
|
|
outputs:
|
|
hash: ${{ steps.compute.outputs.hash }}
|
|
run-id: ${{ steps.find.outputs.run-id }}
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- name: Compute rust source hash
|
|
id: compute
|
|
shell: bash
|
|
run: |
|
|
hash=$(find crates Cargo.toml Cargo.lock rust-toolchain.toml \
|
|
packages/natives/scripts packages/natives/package.json \
|
|
scripts/ci-build-native.ts scripts/host-detect.ts \
|
|
-type f -print0 \
|
|
| sort -z \
|
|
| xargs -0 sha256sum \
|
|
| sha256sum \
|
|
| cut -c1-16)
|
|
echo "hash=$hash" >> "$GITHUB_OUTPUT"
|
|
echo "Rust source hash: $hash"
|
|
- name: Find prior main build with matching hash
|
|
id: find
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
shell: bash
|
|
run: |
|
|
hash="${{ steps.compute.outputs.hash }}"
|
|
# Canary artifact: native_linux builds baseline + modern together,
|
|
# so the modern artifact's presence on any prior main run implies
|
|
# both linux x64 test artifacts are cached and downloadable.
|
|
canary="pi-natives-linux-x64-modern-h${hash}"
|
|
run_id=""
|
|
for candidate in $(gh run list \
|
|
--workflow=ci.yml --branch=main --status=success --event=push \
|
|
--limit=20 --json databaseId --jq='.[].databaseId'); do
|
|
if gh api "/repos/${{ github.repository }}/actions/runs/$candidate/artifacts?per_page=100" \
|
|
--jq ".artifacts[] | select(.name == \"$canary\") | select(.expired == false) | .id" \
|
|
| grep -q .; then
|
|
run_id="$candidate"
|
|
break
|
|
fi
|
|
done
|
|
if [ -n "$run_id" ]; then
|
|
echo "Reusing native artifacts from run $run_id"
|
|
else
|
|
echo "No cached native artifacts for hash $hash; native job will rebuild."
|
|
fi
|
|
echo "run-id=$run_id" >> "$GITHUB_OUTPUT"
|
|
|
|
# Fast lint + type check (no Rust, no native build needed)
|
|
check:
|
|
runs-on: ubuntu-22.04
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: "1.3"
|
|
- name: Cache bun dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: ~/.bun/install/cache
|
|
key: bun-${{ runner.os }}-${{ hashFiles('**/bun.lock') }}
|
|
- run: bun install --frozen-lockfile
|
|
- name: Type check workspace
|
|
run: bun run ci:check:full
|
|
|
|
# Linux x64 baseline + modern: required by `test`, so it runs on every PR
|
|
# unless rust-hash found a cached run. Tags always rebuild for fresh artifacts.
|
|
native_linux:
|
|
needs: [rust-hash]
|
|
if: ${{ startsWith(github.ref, 'refs/tags/v') || needs.rust-hash.outputs.run-id == '' }}
|
|
runs-on: ubuntu-22.04
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- { variant: baseline, rust_checks: true }
|
|
- { variant: modern }
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: ./.github/actions/build-native
|
|
with:
|
|
hash: ${{ needs.rust-hash.outputs.hash }}
|
|
platform: linux
|
|
arch: x64
|
|
variant: ${{ matrix.variant }}
|
|
rust_checks: ${{ matrix.rust_checks && 'true' || 'false' }}
|
|
save_cache: ${{ github.event_name == 'push' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')) }}
|
|
|
|
# Remaining platforms only ship in release tags; PRs and main never build them.
|
|
native_release:
|
|
needs: [rust-hash]
|
|
if: ${{ startsWith(github.ref, 'refs/tags/v') }}
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- { os: ubuntu-22.04, platform: linux, arch: arm64, target: aarch64-unknown-linux-gnu }
|
|
- { os: macos-15-intel, platform: darwin, arch: x64, variant: baseline }
|
|
- { os: macos-14, platform: darwin, arch: arm64 }
|
|
- { os: windows-latest, platform: win32, arch: x64, variant: baseline }
|
|
runs-on: ${{ matrix.os }}
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: ./.github/actions/build-native
|
|
with:
|
|
hash: ${{ needs.rust-hash.outputs.hash }}
|
|
platform: ${{ matrix.platform }}
|
|
arch: ${{ matrix.arch }}
|
|
variant: ${{ matrix.variant }}
|
|
target: ${{ matrix.target }}
|
|
save_cache: ${{ github.event_name == 'push' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')) }}
|
|
|
|
test:
|
|
runs-on: ubuntu-22.04
|
|
needs: [native_linux, rust-hash]
|
|
if: ${{ !cancelled() && needs.native_linux.result != 'failure' }}
|
|
timeout-minutes: 30
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: "1.3"
|
|
- name: Cache bun dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: ~/.bun/install/cache
|
|
key: bun-${{ runner.os }}-${{ hashFiles('**/bun.lock') }}
|
|
- name: Install system deps
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y libcairo2-dev libpango1.0-dev libjpeg-dev libgif-dev librsvg2-dev fd-find ripgrep imagemagick
|
|
sudo ln -s $(which fdfind) /usr/local/bin/fd
|
|
sudo ln -sf /usr/bin/convert /usr/local/bin/magick
|
|
- run: bun install --frozen-lockfile
|
|
- name: Resolve native source run
|
|
id: source
|
|
shell: bash
|
|
run: |
|
|
if [ "${{ needs.native_linux.result }}" = "success" ]; then
|
|
echo "run-id=${{ github.run_id }}" >> "$GITHUB_OUTPUT"
|
|
else
|
|
echo "run-id=${{ needs.rust-hash.outputs.run-id }}" >> "$GITHUB_OUTPUT"
|
|
fi
|
|
- name: Download native addons
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
pattern: pi-natives-linux-x64-*-h${{ needs.rust-hash.outputs.hash }}
|
|
path: packages/natives/native
|
|
merge-multiple: true
|
|
run-id: ${{ steps.source.outputs.run-id }}
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
- name: Test workspace (TS)
|
|
env:
|
|
# Bun's `bun test` emits `::group::`/`::endgroup::` per file under
|
|
# GHA. `--workspaces` prefixes each output line with `<pkg> test: `,
|
|
# which breaks GHA's column-0 parsing and leaks the markers as
|
|
# literal text. Unset for this step only — the annotations would be
|
|
# equally broken by the prefix, so we lose nothing.
|
|
GITHUB_ACTIONS: ""
|
|
run: bun run test:ts
|
|
- name: CLI smoke test
|
|
run: bun run ci:test:smoke
|
|
|
|
install_methods:
|
|
runs-on: ubuntu-22.04
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: "1.3"
|
|
- uses: dtolnay/rust-toolchain@nightly
|
|
with:
|
|
toolchain: nightly-2026-04-29
|
|
- uses: Swatinem/rust-cache@v2
|
|
with:
|
|
shared-key: install-methods-linux-x64
|
|
cache-on-failure: true
|
|
save-if: ${{ github.event_name == 'push' && (github.ref == 'refs/heads/main' ||
|
|
startsWith(github.ref, 'refs/tags/v')) }}
|
|
cache-workspace-crates: true
|
|
- name: Cache bun dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: ~/.bun/install/cache
|
|
key: bun-${{ runner.os }}-${{ hashFiles('**/bun.lock') }}
|
|
- name: Install system deps
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y libcairo2-dev libpango1.0-dev libjpeg-dev libgif-dev librsvg2-dev fd-find ripgrep imagemagick
|
|
sudo ln -s $(which fdfind) /usr/local/bin/fd
|
|
sudo ln -sf /usr/bin/convert /usr/local/bin/magick
|
|
- run: bun install --frozen-lockfile
|
|
- name: Install method smoke tests
|
|
run: bun run ci:test:install-methods
|
|
|
|
release_binary:
|
|
if: ${{ startsWith(github.ref, 'refs/tags/v') && !cancelled() &&
|
|
needs.native_linux.result == 'success' && needs.native_release.result ==
|
|
'success' && needs.test.result == 'success' && needs.check.result ==
|
|
'success' && needs.install_methods.result == 'success' }}
|
|
needs: [check, native_linux, native_release, test, install_methods, rust-hash]
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- {
|
|
os: ubuntu-22.04,
|
|
platform: linux,
|
|
arch: x64,
|
|
target_id: linux-x64,
|
|
binary_path: packages/coding-agent/binaries/omp-linux-x64,
|
|
}
|
|
- {
|
|
os: ubuntu-24.04-arm,
|
|
platform: linux,
|
|
arch: arm64,
|
|
target_id: linux-arm64,
|
|
binary_path: packages/coding-agent/binaries/omp-linux-arm64,
|
|
}
|
|
- {
|
|
os: macos-15-intel,
|
|
platform: darwin,
|
|
arch: x64,
|
|
target_id: darwin-x64,
|
|
binary_path: packages/coding-agent/binaries/omp-darwin-x64,
|
|
}
|
|
- {
|
|
os: macos-14,
|
|
platform: darwin,
|
|
arch: arm64,
|
|
target_id: darwin-arm64,
|
|
binary_path: packages/coding-agent/binaries/omp-darwin-arm64,
|
|
}
|
|
- {
|
|
os: windows-latest,
|
|
platform: win32,
|
|
arch: x64,
|
|
target_id: win32-x64,
|
|
binary_path: packages/coding-agent/binaries/omp-windows-x64.exe,
|
|
}
|
|
runs-on: ${{ matrix.os }}
|
|
permissions:
|
|
contents: read
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: "1.3"
|
|
- name: Cache bun dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: ~/.bun/install/cache
|
|
key: bun-${{ runner.os }}-${{ hashFiles('**/bun.lock') }}
|
|
- run: bun install --frozen-lockfile
|
|
- name: Download native addon(s)
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
pattern: pi-natives-${{ matrix.platform }}-${{ matrix.arch }}*-h${{ needs.rust-hash.outputs.hash }}
|
|
path: packages/natives/native
|
|
merge-multiple: true
|
|
- name: Build release binary
|
|
env:
|
|
RELEASE_TARGETS: ${{ matrix.target_id }}
|
|
run: bun run ci:release:build-binaries
|
|
- name: Smoke release binary
|
|
if: runner.os != 'Windows'
|
|
run: |
|
|
runtime_dir="$(mktemp -d)"
|
|
HOME="$runtime_dir/home" XDG_DATA_HOME="$runtime_dir/xdg" "${{ matrix.binary_path }}" --version
|
|
HOME="$runtime_dir/home" XDG_DATA_HOME="$runtime_dir/xdg" "${{ matrix.binary_path }}" --smoke-test
|
|
- name: Smoke release binary (Windows)
|
|
if: runner.os == 'Windows'
|
|
shell: pwsh
|
|
run: |
|
|
$runtimeDir = Join-Path $env:TEMP ("omp-runtime-" + [System.Guid]::NewGuid().ToString("N"))
|
|
New-Item -ItemType Directory -Force -Path $runtimeDir | Out-Null
|
|
$env:HOME = Join-Path $runtimeDir "home"
|
|
$env:XDG_DATA_HOME = Join-Path $runtimeDir "xdg"
|
|
& "${{ matrix.binary_path }}" --version
|
|
& "${{ matrix.binary_path }}" --smoke-test
|
|
- name: Upload release binary artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: omp-binary-${{ matrix.target_id }}
|
|
path: ${{ matrix.binary_path }}
|
|
|
|
release-github:
|
|
if: ${{ startsWith(github.ref, 'refs/tags/v') && !cancelled() &&
|
|
needs.release_binary.result == 'success' }}
|
|
needs: [release_binary]
|
|
runs-on: ubuntu-22.04
|
|
permissions:
|
|
contents: write
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: "1.3"
|
|
- name: Generate release notes from CHANGELOGs
|
|
run: bun scripts/ci-release-notes.ts
|
|
- name: Download release binaries
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
pattern: omp-binary-*
|
|
path: packages/coding-agent/binaries
|
|
merge-multiple: true
|
|
- name: Create GitHub Release
|
|
uses: softprops/action-gh-release@v2
|
|
with:
|
|
files: |
|
|
packages/coding-agent/binaries/omp-*
|
|
body_path: release-notes.md
|
|
generate_release_notes: true
|
|
|
|
|
|
release_github_verify:
|
|
if: ${{ startsWith(github.ref, 'refs/tags/v') && !cancelled() &&
|
|
needs['release-github'].result == 'success' }}
|
|
needs: [release-github]
|
|
runs-on: macos-14
|
|
permissions:
|
|
contents: read
|
|
steps:
|
|
- name: Download published macOS arm64 binary
|
|
run: |
|
|
curl -fsSL -o omp-darwin-arm64 "https://github.com/${{ github.repository }}/releases/download/${{ github.ref_name }}/omp-darwin-arm64"
|
|
chmod +x omp-darwin-arm64
|
|
- name: Verify published macOS arm64 binary
|
|
run: |
|
|
codesign -dv ./omp-darwin-arm64
|
|
runtime_dir="$(mktemp -d)"
|
|
HOME="$runtime_dir/home" XDG_DATA_HOME="$runtime_dir/xdg" ./omp-darwin-arm64 --version
|
|
|
|
release-npm:
|
|
if: ${{ startsWith(github.ref, 'refs/tags/v') && !cancelled() &&
|
|
needs.release_binary.result == 'success' &&
|
|
needs.release_github_verify.result == 'success' &&
|
|
!inputs.skip_npm }}
|
|
needs: [release_binary, release_github_verify, rust-hash]
|
|
runs-on: ubuntu-22.04
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: "1.3"
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: "24"
|
|
registry-url: "https://registry.npmjs.org"
|
|
- name: Cache bun dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: ~/.bun/install/cache
|
|
key: bun-${{ runner.os }}-${{ hashFiles('**/bun.lock') }}
|
|
- run: bun install --frozen-lockfile
|
|
- name: Download native addons
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
pattern: pi-natives-*-h${{ needs.rust-hash.outputs.hash }}
|
|
path: packages/natives/native
|
|
merge-multiple: true
|
|
- name: Publish to npm
|
|
env:
|
|
NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
run: bun run ci:release:publish
|