hyperagent/.github/workflows/pr-validate.yml at 29c2ee9862336e19f12603b630fa232eadb1f49d · hyperlight-dev/hyperagent · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json

name: Validate Pull Request

on:
  pull_request:
    branches: [main]
  push:
    branches: [main]

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  # Lint, typecheck, and unit tests (needs KVM for sandbox tests)
  lint-and-test:
    name: Lint & Test
    runs-on: [self-hosted, Linux, X64, "1ES.Pool=hld-kvm-amd"]
    steps:
      - uses: actions/checkout@v6

      - uses: actions/setup-node@v6
        with:
          node-version: "22"

      - uses: hyperlight-dev/ci-setup-workflow@v1.8.0
        with:
          rust-toolchain: "1.89"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Setup
        run: just setup

      - name: Lint (TS + Rust)
        run: just lint-all

      - name: Test (TS + Rust)
        run: just test-all

  # Build and test on all hypervisor configurations (1ES runners have Rust + just)
  # NOTE: Windows WHP support is temporarily disabled pending upstream
  # hyperlight fix for multiple SurrogateProcessManager instances.
  # See: https://github.com/hyperlight-dev/hyperagent/issues/1
  build-and-test:
    name: Build & Test (${{ matrix.hypervisor }}-${{ matrix.config }})
    strategy:
      fail-fast: false
      matrix:
        build:
          - linux-kvm-debug
          - linux-kvm-release
          - linux-mshv-debug
          - linux-mshv-release
        include:
          - build: linux-kvm-debug
            os: [self-hosted, Linux, X64, "1ES.Pool=hld-kvm-amd"]
            hypervisor: kvm
            config: debug
          - build: linux-kvm-release
            os: [self-hosted, Linux, X64, "1ES.Pool=hld-kvm-amd"]
            hypervisor: kvm
            config: release
          - build: linux-mshv-debug
            os: [self-hosted, Linux, X64, "1ES.Pool=hld-azlinux3-mshv-amd"]
            hypervisor: mshv
            config: debug
          - build: linux-mshv-release
            os: [self-hosted, Linux, X64, "1ES.Pool=hld-azlinux3-mshv-amd"]
            hypervisor: mshv
            config: release
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v6

      - uses: actions/setup-node@v6
        with:
          node-version: "22"

      - uses: hyperlight-dev/ci-setup-workflow@v1.8.0
        with:
          rust-toolchain: "1.89"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Setup
        run: just setup

      - name: Build binary
        run: node scripts/build-binary.js ${{ matrix.config == 'release' && '--release' || '' }}

      - name: Run tests
        run: just test

      - name: Upload binary artifact
        if: matrix.config == 'release'
        uses: actions/upload-artifact@v7
        with:
          name: hyperagent-linux-x64-${{ matrix.hypervisor }}
          path: dist/
          retention-days: 7

  # Build Docker image (just setup clones deps so Dockerfile COPY works)
  build-docker:
    name: Build Docker Image
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - uses: actions/setup-node@v6
        with:
          node-version: "22"

      - uses: hyperlight-dev/ci-setup-workflow@v1.8.0
        with:
          rust-toolchain: "1.89"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Setup
        run: just setup

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Build Docker image
        uses: docker/build-push-action@v6
        with:
          context: .
          push: false
          tags: hyperagent:test
          build-args: |
            VERSION=${{ github.sha }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

  # Gate PR merges on all jobs passing
  ci-status:
    name: CI Status
    needs: [lint-and-test, build-and-test, build-docker]
    if: always()
    runs-on: ubuntu-latest
    steps:
      - name: Check all jobs passed
        run: jq --exit-status 'all(.result == "success" or .result == "skipped")' <<< '${{ toJson(needs) }}'