Merge master

Author: kim

.github/CODEOWNERS

@@ -7,6 +7,10 @@ LICENSE.txt @cloutiertyler
 /crates/client-api-messages/src/websocket.rs @centril @gefjon
 
 /crates/cli/src/ @bfops @cloutiertyler @jdetter
+/tools/ci/ @bfops @cloutiertyler @jdetter
+/tools/upgrade-version/ @bfops @jdetter
+/tools/license-check/ @bfops @jdetter
+/.github/ @bfops @jdetter
 
 /crates/sdk/examples/quickstart-chat/ @gefjon
 /modules/quickstart-chat/ @gefjon

.github/GREMLINS.md

@@ -0,0 +1,33 @@
+# GREMLINS.md — Who Lives in the Pipes
+
+This file documents the automated agents and bots that operate on this repository.
+
+## Clawd 🔧
+
+- **What:** Anti-entropy gremlin / CI watchdog
+- **GitHub account:** `clockwork-labs-bot`
+- **Discord channel:** #gremlins (CL - SpacetimeDB)
+- **Powered by:** [OpenClaw](https://github.com/openclaw/openclaw) + Claude
+
+### What Clawd does
+
+- **Monitors CI** — watches for failures, flaky tests, and regressions
+- **Reviews PRs** — comments on obvious bugs (never approves)
+- **Surfaces stale PRs** — finds approved PRs that just need a rebase
+- **Documents testing** — creates and maintains `DEVELOP.md` files explaining CI and test infrastructure
+- **Alerts the team** — posts findings in #gremlins, pings DevOps when something needs attention
+
+### What Clawd does NOT do
+
+- Approve or merge PRs
+- Take any destructive action (delete branches, close PRs, force push)
+- Modify production infrastructure
+
+### Contacting Clawd
+
+- Mention `@Openclaw` in #gremlins on Discord
+- Tag `@clockwork-labs-bot` on GitHub PRs/issues
+
+---
+
+*To add a new gremlin, document it here.*

.github/workflows/ci.yml

@@ -32,6 +32,7 @@ jobs:
     timeout-minutes: 120
     env:
       CARGO_TARGET_DIR: ${{ github.workspace }}/target
+      SPACETIMEDB_CPP_DIR: ${{ github.workspace }}/crates/bindings-cpp
     steps:
       - name: Find Git ref
         env:
@@ -79,6 +80,25 @@ jobs:
         with:
           run_install: true
 
+      # Install emscripten for C++ module compilation tests.
+      - name: Install emscripten (Linux)
+        if: runner.os == 'Linux'
+        shell: bash
+        run: |
+          git clone https://github.com/emscripten-core/emsdk.git ~/emsdk
+          cd ~/emsdk
+          ./emsdk install 4.0.21
+          ./emsdk activate 4.0.21
+
+      - name: Install emscripten (Windows)
+        if: runner.os == 'Windows'
+        shell: pwsh
+        run: |
+          git clone https://github.com/emscripten-core/emsdk.git $env:USERPROFILE\emsdk
+          cd $env:USERPROFILE\emsdk
+          .\emsdk install 4.0.21
+          .\emsdk activate 4.0.21
+
       - name: Install psql (Windows)
         if: runner.os == 'Windows'
         run: choco install psql -y --no-progress
@@ -122,11 +142,34 @@ jobs:
       - name: Install cargo-nextest
         uses: taiki-e/install-action@nextest
 
-      - name: Run smoketests
-        # --test-threads=1 eliminates contention in the C# tests where they fight over bindings
-        # build artifacts.
-        # It also seemed to improve performance a fair amount (11m -> 6m)
-        run: cargo ci smoketests -- --test-threads=1
+      # --test-threads=1 eliminates contention in the C# tests where they fight over bindings
+      # build artifacts.
+      # It also seemed to improve performance a fair amount (11m -> 6m)
+      - name: Run smoketests (Linux)
+        if: runner.os == 'Linux'
+        shell: bash
+        run: |
+          if [ -f ~/emsdk/emsdk_env.sh ]; then
+            source ~/emsdk/emsdk_env.sh
+          fi
+          cargo ci smoketests -- --test-threads=1
+
+      # Due to Emscripten PATH issues this was separated to make sure OpenSSL still builds correctly
+      - name: Run smoketests (Windows)
+        if: runner.os == 'Windows'
+        shell: pwsh
+        run: |
+          if (Test-Path "$env:USERPROFILE\emsdk\emsdk_env.ps1") {
+            & "$env:USERPROFILE\emsdk\emsdk_env.ps1" | Out-Null
+          }
+          cargo ci smoketests -- --test-threads=1          
+
+      - name: Check for changes
+        run: |
+          tools/check-diff.sh crates/smoketests || {
+              echo 'Error: There is a diff in the smoketests directory.'
+              exit 1
+          }
 
   smoketests-python:
     needs: [lints]
@@ -806,6 +849,12 @@ jobs:
           key: Unity-${{ github.head_ref }}
           restore-keys: Unity-
 
+      - name: Login to DockerHub
+        uses: docker/login-action@v2
+        with:
+          username: ${{ vars.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_PASSWORD }}
+
       - name: Run Unity tests
         uses: game-ci/unity-test-runner@v4
         with:
@@ -903,7 +952,7 @@ jobs:
           export CARGO_HOME="$HOME/.cargo"
           echo "$CARGO_HOME/bin" >> "$GITHUB_PATH"
           cargo install --force --path crates/cli --locked --message-format=short
-          cargo install --force --path crates/standalone --locked --message-format=short
+          cargo install --force --path crates/standalone --features allow_loopback_http_for_tests --locked --message-format=short
           # Add a handy alias using the old binary name, so that we don't have to rewrite all scripts (incl. in submodules).
           ln -sf $CARGO_HOME/bin/spacetimedb-cli $CARGO_HOME/bin/spacetime
 
@@ -916,14 +965,15 @@ jobs:
               exit 1
           }
 
-      - name: Check client-api bindings are up to date
-        working-directory: sdks/csharp
-        run: |
-          bash tools~/gen-client-api.sh
-          "${GITHUB_WORKSPACE}"/tools/check-diff.sh src/SpacetimeDB/ClientApi || {
-              echo 'Error: Client API bindings are dirty. Please run `sdks/csharp/tools~/gen-client-api.sh`.'
-              exit 1
-          }
+      # TODO: Re-enable this once csharp is using the v2 ws api.
+      # - name: Check client-api bindings are up to date
+      #   working-directory: sdks/csharp
+      #   run: |
+      #     bash tools~/gen-client-api.sh
+      #     "${GITHUB_WORKSPACE}"/tools/check-diff.sh src/SpacetimeDB/ClientApi || {
+      #         echo 'Error: Client API bindings are dirty. Please run `sdks/csharp/tools~/gen-client-api.sh`.'
+      #         exit 1
+      #     }
 
       - name: Start SpacetimeDB
         run: |

.github/workflows/package.yml

@@ -14,7 +14,9 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - { name: x86_64 Linux, target: x86_64-unknown-linux-gnu, runner: spacetimedb-new-runner-2 }
+          # WARNING - do not upgrade this runner to 24.04 or the self hosted runners because it will break downloads for
+          #   anyone who uses a linux distro that doesn't have glibc >= GLIBC_2.38
+          - { name: x86_64 Linux, target: x86_64-unknown-linux-gnu, runner: ubuntu-22.04 }
           - { name: aarch64 Linux, target: aarch64-unknown-linux-gnu, runner: arm-runner }
           # Disabled because musl builds weren't working and we didn't want to investigate. See https://github.com/clockworklabs/SpacetimeDB/pull/2964.
           # - { name: x86_64 Linux musl, target: x86_64-unknown-linux-musl, runner: bare-metal, container: alpine }

.gitignore

@@ -225,6 +225,9 @@ new.json
 *.pem
 .ok.sql
 
+# Intermediate file generated when updating the external client SDKs' WS format bindings
+crates/client-api-messages/ws_schema.json
+
 # Test data
 !crates/core/testdata/
 
@@ -234,6 +237,10 @@ new.json
 # C++ build data
 modules/benchmarks-cpp/build/
 modules/module-test-cpp/build/
+modules/sdk-test-cpp/build/
+modules/sdk-test-connect-disconnect-cpp/build/
+modules/sdk-test-procedure-cpp/build/
+modules/sdk-test-view-cpp/build/
 
 # Symlinked output from `nix build`
 result
@@ -253,3 +260,7 @@ nul
 # csharp SDK packages
 /sdks/csharp/packages/
 /sdks/csharp/packages.meta
+
+# AI agent config
+.codex
+.claude