Enhance CI workflows: multi-platform build, Rust quality gates, Windows release target

CodeGhost21 · claude · CodeGhost21 · commit 9ae82063ee20 · 2026-03-30T18:31:45.000+05:30
- build.yml: add rust-quality job (cargo fmt + clippy), matrix for Linux x86_64 and macOS ARM64
- test.yml: add cargo fmt, clippy checks to rust-tests job
- release.yml: add Windows x86_64 target with .exe sidecar handling

Co-Authored-By: Claude Opus 4.6 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -9,13 +9,68 @@ permissions:
   pull-requests: read
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.head_ref || github.ref }}
   cancel-in-progress: true
 
 jobs:
-  test-build:
-    name: Build Tauri App
+  rust-quality:
+    name: Rust Quality (fmt + clippy)
     runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Install Rust (rust-toolchain.toml)
+        uses: dtolnay/rust-toolchain@1.93.0
+        with:
+          components: rustfmt, clippy
+
+      - name: Install Tauri build dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libgtk-3-dev libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
+
+      - name: Cargo.lock fingerprint (deps only)
+        id: cargo-lock-fingerprint
+        shell: bash
+        run: |
+          echo "hash=$(tail -n +8 Cargo.lock | openssl dgst -sha256 | awk '{print $2}')" >> "$GITHUB_OUTPUT"
+
+      - name: Cache Cargo registry and git sources
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+          key: ${{ runner.os }}-cargo-registry-${{ steps.cargo-lock-fingerprint.outputs.hash }}
+          restore-keys: |
+            ${{ runner.os }}-cargo-registry-
+
+      - name: Check formatting (cargo fmt)
+        run: cargo fmt --all -- --check
+
+      - name: Run clippy (core crate)
+        run: cargo clippy -p openhuman -- -D warnings
+
+      - name: Run clippy (Tauri shell)
+        run: cargo clippy --manifest-path app/src-tauri/Cargo.toml -- -D warnings
+
+  build:
+    name: Build Tauri App (${{ matrix.settings.label }})
+    needs: rust-quality
+    runs-on: ${{ matrix.settings.platform }}
+    strategy:
+      fail-fast: false
+      matrix:
+        settings:
+          - platform: ubuntu-22.04
+            target: x86_64-unknown-linux-gnu
+            label: Linux x86_64
+          - platform: macos-latest
+            target: aarch64-apple-darwin
+            label: macOS ARM64
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -29,12 +84,13 @@ jobs:
           node-version: 24.x
           cache: "yarn"
 
-      - name: Install Rust stable
+      - name: Install Rust (rust-toolchain.toml)
         uses: dtolnay/rust-toolchain@1.93.0
         with:
-          targets: x86_64-unknown-linux-gnu
+          targets: ${{ matrix.settings.target }}
 
-      - name: Install Tauri dependencies
+      - name: Install Tauri dependencies (Linux)
+        if: matrix.settings.platform == 'ubuntu-22.04'
         run: |
           sudo apt-get update
           sudo apt-get install -y libgtk-3-dev libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
@@ -70,19 +126,19 @@ jobs:
         run: yarn install --frozen-lockfile
 
       - name: Build sidecar core binary
-        run: cargo build --manifest-path Cargo.toml --release --target x86_64-unknown-linux-gnu --bin openhuman
+        run: cargo build --manifest-path Cargo.toml --release --target ${{ matrix.settings.target }} --bin openhuman
 
       - name: Stage sidecar for Tauri bundler
+        shell: bash
         run: |
           mkdir -p app/src-tauri/binaries
-          # Release artifacts for the root package land in repo root target/
-          cp target/x86_64-unknown-linux-gnu/release/openhuman app/src-tauri/binaries/openhuman-x86_64-unknown-linux-gnu
-          chmod +x app/src-tauri/binaries/openhuman-x86_64-unknown-linux-gnu
+          cp target/${{ matrix.settings.target }}/release/openhuman app/src-tauri/binaries/openhuman-${{ matrix.settings.target }}
+          chmod +x app/src-tauri/binaries/openhuman-${{ matrix.settings.target }}
 
       - name: Build Tauri app
         working-directory: app
         run: |
           TAURI_CONFIG_OVERRIDE='{"bundle":{"createUpdaterArtifacts":false}}'
-          yarn tauri build -c "$TAURI_CONFIG_OVERRIDE" --bundles none -- --target x86_64-unknown-linux-gnu
+          yarn tauri build -c "$TAURI_CONFIG_OVERRIDE" --bundles none --target ${{ matrix.settings.target }} -- --bin OpenHuman
         env:
           NODE_ENV: production
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -221,6 +221,10 @@ jobs:
             args: --target x86_64-unknown-linux-gnu
             target: x86_64-unknown-linux-gnu
             artifact_suffix: ubuntu
+          - platform: windows-latest
+            args: --target x86_64-pc-windows-msvc
+            target: x86_64-pc-windows-msvc
+            artifact_suffix: windows
     env:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
@@ -376,10 +380,16 @@ jobs:
         shell: bash
         run: |
           mkdir -p app/src-tauri/binaries
-          SOURCE="$CORE_TARGET_DIR/$CORE_BIN_NAME"
-          DEST="app/src-tauri/binaries/$SIDECAR_BASE-$MATRIX_TARGET"
+          EXE_SUFFIX=""
+          if [[ "$MATRIX_TARGET" == *"windows"* ]]; then
+            EXE_SUFFIX=".exe"
+          fi
+          SOURCE="$CORE_TARGET_DIR/${CORE_BIN_NAME}${EXE_SUFFIX}"
+          DEST="app/src-tauri/binaries/${SIDECAR_BASE}-${MATRIX_TARGET}${EXE_SUFFIX}"
           cp "$SOURCE" "$DEST"
-          chmod +x "$DEST"
+          if [[ "$MATRIX_TARGET" != *"windows"* ]]; then
+            chmod +x "$DEST"
+          fi
         env:
           MATRIX_TARGET: ${{ matrix.settings.target }}
           CORE_TARGET_DIR: ${{ steps.core-paths.outputs.core_target_dir }}
@@ -389,7 +399,11 @@ jobs:
       - name: Verify staged sidecar for bundler (all platforms)
         shell: bash
         run: |
-          SIDE_CAR_PATH="app/src-tauri/binaries/$SIDECAR_BASE-$MATRIX_TARGET"
+          EXE_SUFFIX=""
+          if [[ "$MATRIX_TARGET" == *"windows"* ]]; then
+            EXE_SUFFIX=".exe"
+          fi
+          SIDE_CAR_PATH="app/src-tauri/binaries/${SIDECAR_BASE}-${MATRIX_TARGET}${EXE_SUFFIX}"
           echo "Checking staged sidecar: $SIDE_CAR_PATH"
           if [ ! -f "$SIDE_CAR_PATH" ]; then
             echo "Missing staged sidecar binary: $SIDE_CAR_PATH"
@@ -409,8 +423,12 @@ jobs:
         shell: bash
         run: |
           BASE_DIR="$CORE_TARGET_DIR"
+          EXE_SUFFIX=""
+          if [[ "$MATRIX_TARGET" == *"windows"* ]]; then
+            EXE_SUFFIX=".exe"
+          fi
           echo "base_dir=$BASE_DIR" >> "$GITHUB_OUTPUT"
-          echo "cli_path=$BASE_DIR/$CORE_BIN_NAME" >> "$GITHUB_OUTPUT"
+          echo "cli_path=$BASE_DIR/${CORE_BIN_NAME}${EXE_SUFFIX}" >> "$GITHUB_OUTPUT"
         env:
           MATRIX_TARGET: ${{ matrix.settings.target }}
           CORE_TARGET_DIR: ${{ steps.core-paths.outputs.core_target_dir }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -13,8 +13,8 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  test:
-    name: Run Unit Tests
+  unit-tests:
+    name: Frontend Unit Tests
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
@@ -56,7 +56,7 @@ jobs:
           retention-days: 7
 
   rust-tests:
-    name: Run Rust Tests
+    name: Rust Tests + Quality
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout code
@@ -67,6 +67,7 @@ jobs:
       - name: Install Rust (rust-toolchain.toml)
         uses: dtolnay/rust-toolchain@1.93.0
         with:
+          components: rustfmt, clippy
           targets: x86_64-unknown-linux-gnu
 
       - name: Install Tauri build dependencies
@@ -91,10 +92,19 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-rust-test-cargo-
 
-      - name: Test rust-core (openhuman)
+      - name: Check formatting (cargo fmt)
+        run: cargo fmt --all -- --check
+
+      - name: Run clippy (core crate)
+        run: cargo clippy -p openhuman -- -D warnings
+
+      - name: Run clippy (Tauri shell)
+        run: cargo clippy --manifest-path app/src-tauri/Cargo.toml -- -D warnings
+
+      - name: Test core crate (openhuman)
         run: cargo test -p openhuman
 
-      - name: Test src-tauri (OpenHuman)
+      - name: Test Tauri shell (OpenHuman)
         run: cargo test --manifest-path app/src-tauri/Cargo.toml
 
   e2e-macos:
