executor/.github/workflows/ci.yml at fccc181f22661ed24b8c886da70e15ff950eb4ea · UsefulSoftwareCo/executor · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
name: CI

on:
  pull_request:
  push:
    branches:
      - main

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

jobs:
  format:
    name: Format
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.11

      - run: bun install --frozen-lockfile

      - run: bun run format:check

  lint:
    name: Lint
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.11

      - run: bun install --frozen-lockfile

      - run: bun run lint

  typecheck:
    name: Typecheck
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.11

      - run: bun install --frozen-lockfile

      - run: bun run typecheck

  test:
    name: Test
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.11

      # apps/cloud's test script invokes `node` directly; undici 8.x (pulled
      # in by @cloudflare/vitest-pool-workers) calls webidl.markAsUncloneable
      # which only exists in Node 22.10+. Pin a known-good runtime.
      - uses: actions/setup-node@v4
        with:
          node-version: 22

      - run: bun install --frozen-lockfile

      - run: bun run test

  e2e-local:
    name: E2E (stdio MCP)
    # Skipped on pull_request: the local scenario boots a real `executor web`
    # plus a browser and is currently flaky on PRs. Still runs on push to main.
    if: github.event_name != 'pull_request'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.11

      # The local scenarios boot a real `executor web` (which spawns a Node
      # sidecar) and some drive a browser, so pin Node 22 and install Chromium.
      - uses: actions/setup-node@v4
        with:
          node-version: 22

      - run: bun install --frozen-lockfile

      # `chromium` and the new `chromium-headless-shell` ship as separate
      # downloads; the browser-driven scenarios launch the headless shell.
      # Install from e2e so bunx resolves ITS pinned playwright (the version the
      # tests run against) rather than floating to the latest, which would fetch
      # a browser build the test runtime does not look for.
      - name: Install Playwright Chromium
        run: bunx playwright install --with-deps chromium chromium-headless-shell
        working-directory: e2e

      # The `local` project is excluded from the default `test` chain (each
      # scenario boots its own `executor web`). Run just the stdio MCP scenario
      # here: it is the auto-connect / env-as-secret regression guard, and
      # running it alone avoids the boot-resource accumulation and the
      # pre-existing browser flakiness of the rest of the local suite. Expanding
      # to the full `local` project (bun run test:local) is a follow-up once
      # those are stabilized.
      - name: Run the stdio MCP scenario
        run: bunx vitest run --project local local/stdio-mcp.test.ts
        working-directory: e2e

  desktop-smoke:
    name: Desktop smoke build
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.11

      - run: bun install --frozen-lockfile

      - name: Build web app
        run: bun run --filter @executor-js/local build

      - name: Build bundled executor
        env:
          BUN_TARGET: bun-linux-x64
        run: bun ./scripts/build-sidecar.ts
        working-directory: apps/desktop

      - name: Build Electron main/preload/renderer
        run: bunx --bun electron-vite build
        working-directory: apps/desktop

  selfhost-docker-smoke:
    name: Self-host Docker image
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Build self-host image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: apps/host-selfhost/Dockerfile
          push: false
          tags: executor-selfhost:ci