ci: fix workflows and align test globs with canonical workspace

- release.yml: replace archived actions/create-release@v1 and
  upload-release-asset@v1 with softprops/action-gh-release@v2; add
  contents:write permission; download all artifacts via merge-multiple.
- publish.yml: skip cargo publish if version already exists on
  crates.io; switch to CARGO_REGISTRY_TOKEN env var; add --locked.
- ci.yml: drop redundant build-tag job (now lives in release.yml);
  add --locked to check/clippy/build/test.
- test_code_writer_mode: canonicalize workspace path so glob
  assertions match BashState on macOS (/var → /private/var symlink).

Author: gabrielmaialva33

.github/workflows/ci.yml

@@ -15,6 +15,7 @@ jobs:
     name: Rust CI
     runs-on: ${{ matrix.os }}
     strategy:
+      fail-fast: false
       matrix:
         os: [ ubuntu-latest, macos-latest ]
     steps:
@@ -27,64 +28,20 @@ jobs:
 
       - name: Rust Cache
         uses: Swatinem/rust-cache@v2
+        with:
+          key: ${{ matrix.os }}-ci
 
       - name: Check
-        run: cargo check --all-features
+        run: cargo check --all-features --locked
 
       - name: Format
         run: cargo fmt --all -- --check
 
       - name: Clippy
-        run: cargo clippy --all-features -- -W clippy::all -A clippy::missing_docs_in_private_items -A clippy::pedantic
+        run: cargo clippy --all-features --locked -- -W clippy::all -A clippy::missing_docs_in_private_items -A clippy::pedantic
 
       - name: Build
-        run: cargo build --all-features
+        run: cargo build --all-features --locked
 
       - name: Test
-        run: cargo test --all-features
-  
-  build-tag:
-    name: Build Tag Release
-    # Only run this job when a tag is pushed
-    if: startsWith(github.ref, 'refs/tags/v')
-    runs-on: ${{ matrix.os }}
-    strategy:
-      matrix:
-        os: [ ubuntu-latest, macos-latest, windows-latest ]
-        include:
-          - os: ubuntu-latest
-            artifact_name: winx
-            asset_name: winx-linux-amd64
-          - os: macos-latest
-            artifact_name: winx
-            asset_name: winx-macos-amd64
-          - os: windows-latest
-            artifact_name: winx.exe
-            asset_name: winx-windows-amd64.exe
-    steps:
-      - uses: actions/checkout@v6
-
-      - name: Setup Rust
-        uses: dtolnay/rust-toolchain@stable
-
-      - name: Rust Cache
-        uses: Swatinem/rust-cache@v2
-
-      - name: Build release binary
-        run: cargo build --release
-
-      - name: Rename binary
-        shell: bash
-        run: |
-          if [ "${{ matrix.os }}" = "windows-latest" ]; then
-            cp target/release/winx-code-agent.exe ${{ matrix.artifact_name }}
-          else
-            cp target/release/winx-code-agent ${{ matrix.artifact_name }}
-          fi
-
-      - name: Upload build artifact
-        uses: actions/upload-artifact@v6
-        with:
-          name: ${{ matrix.asset_name }}
-          path: ${{ matrix.artifact_name }}
-          retention-days: 5
+        run: cargo test --all-features --locked

.github/workflows/publish.yml

@@ -15,23 +15,36 @@ jobs:
       - name: Setup Rust
         uses: dtolnay/rust-toolchain@stable
 
-      - name: Verify tag version matches Cargo.toml
+      - name: Rust Cache
+        uses: Swatinem/rust-cache@v2
+        with:
+          key: publish
+
+      - name: Verify tag matches Cargo.toml
         run: |
-          # Extract version from Cargo.toml
-          CARGO_VERSION=$(grep -m1 'version =' Cargo.toml | cut -d '"' -f2)
-          # Extract version from git tag
-          TAG_VERSION=${GITHUB_REF#refs/tags/v}
-          
-          # Check if versions match
+          CARGO_VERSION=$(grep -m1 '^version = ' Cargo.toml | cut -d '"' -f2)
+          TAG_VERSION="${GITHUB_REF#refs/tags/v}"
           if [ "$CARGO_VERSION" != "$TAG_VERSION" ]; then
-            echo "Version mismatch: Cargo.toml version ($CARGO_VERSION) does not match tag version ($TAG_VERSION)"
+            echo "::error::Cargo.toml version ($CARGO_VERSION) != tag ($TAG_VERSION)"
             exit 1
           fi
-          
-          echo "Version $CARGO_VERSION matches tag $TAG_VERSION"
+          echo "version=$CARGO_VERSION" >> "$GITHUB_ENV"
 
-      - name: Cargo login
-        run: cargo login ${{ secrets.CRATES_IO_TOKEN }}
+      - name: Skip if version already on crates.io
+        id: check
+        run: |
+          status=$(curl -sf -A "winx-ci/1.0" \
+            "https://crates.io/api/v1/crates/winx-code-agent/${{ env.version }}" \
+            -o /dev/null -w "%{http_code}" || true)
+          if [ "$status" = "200" ]; then
+            echo "winx-code-agent ${{ env.version }} already exists on crates.io — skipping"
+            echo "skip=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "skip=false" >> "$GITHUB_OUTPUT"
+          fi
 
       - name: Cargo publish
-        run: cargo publish
+        if: steps.check.outputs.skip != 'true'
+        env:
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CRATES_IO_TOKEN }}
+        run: cargo publish --locked

.github/workflows/release.yml

@@ -5,40 +5,25 @@ on:
     tags:
       - 'v*'
 
-jobs:
-  create-release:
-    name: Create GitHub Release
-    runs-on: ubuntu-latest
-    outputs:
-      upload_url: ${{ steps.create_release.outputs.upload_url }}
-    steps:
-      - name: Create Release
-        id: create_release
-        uses: actions/create-release@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          tag_name: ${{ github.ref }}
-          release_name: Release ${{ github.ref_name }}
-          draft: false
-          prerelease: false
+permissions:
+  contents: write
 
+jobs:
   build:
     name: Build Release
-    needs: create-release
     runs-on: ${{ matrix.os }}
     strategy:
+      fail-fast: false
       matrix:
-        os: [ ubuntu-latest, macos-latest, windows-latest ]
         include:
           - os: ubuntu-latest
-            artifact_name: winx
+            artifact_name: winx-code-agent
             asset_name: winx-linux-amd64
           - os: macos-latest
-            artifact_name: winx
-            asset_name: winx-macos-amd64
+            artifact_name: winx-code-agent
+            asset_name: winx-macos-arm64
           - os: windows-latest
-            artifact_name: winx.exe
+            artifact_name: winx-code-agent.exe
             asset_name: winx-windows-amd64.exe
 
     steps:
@@ -49,25 +34,43 @@ jobs:
 
       - name: Rust Cache
         uses: Swatinem/rust-cache@v2
+        with:
+          key: ${{ matrix.os }}-release
 
       - name: Build release binary
-        run: cargo build --release
+        run: cargo build --release --locked
 
-      - name: Rename binary
+      - name: Stage artifact
         shell: bash
         run: |
-          if [ "${{ matrix.os }}" = "windows-latest" ]; then
-            cp target/release/winx-code-agent.exe ${{ matrix.artifact_name }}
-          else
-            cp target/release/winx-code-agent ${{ matrix.artifact_name }}
-          fi
+          mkdir -p dist
+          cp "target/release/${{ matrix.artifact_name }}" "dist/${{ matrix.asset_name }}"
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v6
+        with:
+          name: ${{ matrix.asset_name }}
+          path: dist/${{ matrix.asset_name }}
+          retention-days: 5
+
+  release:
+    name: Publish GitHub Release
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Download all artifacts
+        uses: actions/download-artifact@v6
+        with:
+          path: dist
+          merge-multiple: true
 
-      - name: Upload release asset
-        uses: actions/upload-release-asset@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Publish release
+        uses: softprops/action-gh-release@v2
         with:
-          upload_url: ${{ needs.create-release.outputs.upload_url }}
-          asset_path: ./${{ matrix.artifact_name }}
-          asset_name: ${{ matrix.asset_name }}
-          asset_content_type: application/octet-stream
+          tag_name: ${{ github.ref_name }}
+          name: ${{ github.ref_name }}
+          generate_release_notes: true
+          fail_on_unmatched_files: true
+          files: dist/*