starred/orca
1
0
Fork 0
mirror of https://github.com/stablyai/orca.git synced 2026-10-31 00:57:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

Overlap native qualification setup with the mobile bundle build (#31336)

Browse Source 
* Prepare server native lanes alongside the shared mobile bundle

* Expect read-only Actions access in template callers
This commit is contained in:
Neil
2026-10-20 19:57:29 -07:00
committed by GitHub
parent fece03b5ac
commit 71cf31bf69
12 changed files with 225 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/adhoc-mac-build.yml
+1
View File
@@ -221,6 +221,7 @@ jobs:
if: needs.orcad-template-support.outputs.ships == 'true'
permissions:
contents: read
actions: read
uses: ./.github/workflows/adhoc-orcad-template.yml
with:
ref: ${{ needs.resolve-ref.outputs.sha }}
.github/workflows/adhoc-orcad-template.yml
+3
View File
@@ -69,6 +69,9 @@ jobs:
retention-days: 7
qualify:
permissions:
contents: read
actions: read
needs: cache
if: needs.cache.outputs.hit != 'true'
uses: ./.github/workflows/node-server-tests.yml
.github/workflows/daily-mac-build.yml
+1
View File
@@ -94,6 +94,7 @@ jobs:
needs: resolve-main
permissions:
contents: read
actions: read
uses: ./.github/workflows/node-server-tests.yml
with:
ref: ${{ needs.resolve-main.outputs.head_sha }}
.github/workflows/hourly-mac-build.yml
+1
View File
@@ -122,6 +122,7 @@ jobs:
if: needs.preflight.outputs.should_build == 'true'
permissions:
contents: read
actions: read
uses: ./.github/workflows/node-server-tests.yml
with:
ref: ${{ needs.preflight.outputs.head_sha }}
.github/workflows/node-server-tests.yml
+65 -15
View File
@@ -136,7 +136,10 @@ jobs:
fi
persistence:
needs: [changes, mobile_web_bundle]
needs: changes
permissions:
contents: read
actions: read
concurrency:
group: node-server-persistence-${{ matrix.os }}-${{ github.event_name == 'push' && !inputs.build_template && inputs.ref == '' && github.ref || github.run_id }}
cancel-in-progress: ${{ github.event_name == 'push' && !inputs.build_template && inputs.ref == '' }}
@@ -144,7 +147,6 @@ jobs:
# Drafts re-trigger at readiness; inherited caller events must not depend on PR fields.
if: >-
${{ !cancelled() && needs.changes.outputs.should_run != 'false' &&
(needs.changes.outputs.qualification == 'false' || needs.mobile_web_bundle.result == 'success') &&
(github.event_name != 'pull_request' || github.event.pull_request.draft != true) }}
strategy:
fail-fast: false
@@ -211,6 +213,32 @@ jobs:
if: runner.os == 'Windows'
with:
arches: ${{ (inputs.build_template && matrix.os == 'windows-2022') && 'x64 arm64' || (runner.arch == 'ARM64' && 'arm64' || 'x64') }}
- name: Wait for the qualified mobile bundle
if: needs.changes.outputs.qualification != 'false'
uses: actions/github-script@v8
with: &mobile-bundle-wait
script: |
const deadline = Date.now() + 15 * 60_000
while (Date.now() < deadline) {
const jobs = await github.paginate(github.rest.actions.listJobsForWorkflowRun, {
...context.repo, run_id: context.runId, filter: 'latest', per_page: 100
})
const producers = jobs.filter(job => job.name === 'mobile_web_bundle' ||
job.name.endsWith(' / mobile_web_bundle'))
if (producers.length > 1) throw new Error('Ambiguous mobile bundle producer')
const producer = producers[0]
if (producer?.status === 'completed') {
if (producer.conclusion !== 'success') {
throw new Error(`Mobile bundle production did not succeed: ${producer.conclusion}`)
}
const artifacts = await github.paginate(github.rest.actions.listWorkflowRunArtifacts, {
...context.repo, run_id: context.runId, per_page: 100
})
if (artifacts.some(artifact => artifact.name === 'orcad-mobile-web-bundle' && !artifact.expired)) return
}
await new Promise(resolve => setTimeout(resolve, 5_000))
}
throw new Error('Timed out waiting for the qualified mobile bundle')
- uses: actions/download-artifact@v8
if: needs.changes.outputs.qualification != 'false'
with:
@@ -351,16 +379,19 @@ jobs:
overwrite: true
linux_glibc_floor:
needs: [changes, mobile_web_bundle]
needs: changes
permissions:
contents: read
actions: read
concurrency:
group: node-server-linux_glibc_floor-${{ matrix.os }}-${{ github.event_name == 'push' && !inputs.build_template && inputs.ref == '' && github.ref || github.run_id }}
cancel-in-progress: ${{ github.event_name == 'push' && !inputs.build_template && inputs.ref == '' }}
# Each Linux lane owns its inputs; the template still requires every lane to pass.
if: >-
${{ !cancelled() &&
needs.mobile_web_bundle.result == 'success' &&
needs.changes.outputs.should_run != 'false' &&
needs.changes.outputs.qualification != 'false' }}
needs.changes.outputs.qualification != 'false' &&
(github.event_name != 'pull_request' || github.event.pull_request.draft != true) }}
strategy:
fail-fast: false
matrix:
@@ -407,6 +438,9 @@ jobs:
pnpm build:orcad-prebuilds
pnpm build:orcad-prebuilds --require-slots "$(node config/scripts/build-orcad-prebuilds.mjs --print-slot)"
pnpm build:orcad-prebuilds --smoke
- name: Wait for the qualified mobile bundle
uses: actions/github-script@v8
with: *mobile-bundle-wait
- uses: actions/download-artifact@v8
with:
name: orcad-mobile-web-bundle
@@ -481,15 +515,18 @@ jobs:
overwrite: true
linux_musl:
needs: [changes, mobile_web_bundle]
needs: changes
permissions:
contents: read
actions: read
concurrency:
group: node-server-linux_musl-${{ matrix.os }}-${{ github.event_name == 'push' && !inputs.build_template && inputs.ref == '' && github.ref || github.run_id }}
cancel-in-progress: ${{ github.event_name == 'push' && !inputs.build_template && inputs.ref == '' }}
if: >-
${{ !cancelled() &&
needs.mobile_web_bundle.result == 'success' &&
needs.changes.outputs.should_run != 'false' &&
needs.changes.outputs.qualification != 'false' }}
needs.changes.outputs.qualification != 'false' &&
(github.event_name != 'pull_request' || github.event.pull_request.draft != true) }}
strategy:
fail-fast: false
matrix:
@@ -507,21 +544,19 @@ jobs:
id: pnpm-verification
with:
container-toolchain: 'true'
- uses: actions/download-artifact@v8
with:
name: orcad-mobile-web-bundle
path: out/mobile-web
- name: Verify native Alpine artifact and persistence
- name: Prepare native Alpine artifact
env:
VERIFICATION_CACHE_PATH: ${{ steps.pnpm-verification.outputs.path }}
run: |
touch "$VERIFICATION_CACHE_PATH"
mkdir -p out/mobile-web
# Multi-arch index digest of the tag; re-resolve it whenever NODE_RUNTIME_PIN moves.
docker run --rm --init -i \
docker run --rm --init --detach --name orcad-alpine \
-e ORCA_BACKGROUND_LAUNCH=1 \
-v "$VERIFICATION_CACHE_PATH:/root/.cache/pnpm/lockfile-verified.jsonl" \
-v "$GITHUB_WORKSPACE:/work" -w /work \
node:24.21.0-alpine@sha256:ebfe2f90462722a7a4de65e91990e97fe0d401c70e0e762c5b53302f905ec1c1 sh -s <<'NODE_SERVER_QUALIFICATION'
node:24.21.0-alpine@sha256:ebfe2f90462722a7a4de65e91990e97fe0d401c70e0e762c5b53302f905ec1c1 sleep infinity
docker exec -i orcad-alpine sh -s <<'NODE_SERVER_PREPARATION'
set -eu
apk add --no-cache bash git libstdc++ python3 make g++
git config --global --add safe.directory /work
@@ -530,9 +565,24 @@ jobs:
pnpm build:orcad-prebuilds
pnpm build:orcad-prebuilds --require-slots "$(node config/scripts/build-orcad-prebuilds.mjs --print-slot)"
pnpm build:orcad-prebuilds --smoke
NODE_SERVER_PREPARATION
- name: Wait for the qualified mobile bundle
uses: actions/github-script@v8
with: *mobile-bundle-wait
- uses: actions/download-artifact@v8
with:
name: orcad-mobile-web-bundle
path: out/mobile-web
- name: Verify native Alpine artifact and persistence
run: |
docker exec -i orcad-alpine sh -s <<'NODE_SERVER_QUALIFICATION'
set -eu
pnpm build:orcad
pnpm test:node-server --artifact
NODE_SERVER_QUALIFICATION
- name: Clean up the Alpine qualification container
if: always()
run: docker rm --force orcad-alpine
- name: Keep this runner's musl slot for the desktop template
if: inputs.build_template
uses: actions/upload-artifact@v7
.github/workflows/release-cut.yml
+1
View File
@@ -1183,6 +1183,7 @@ jobs:
if: needs.cut.outputs.should_release == 'true' && needs.cut.outputs.ships_orcad_template == 'true'
permissions:
contents: read
actions: read
uses: ./.github/workflows/node-server-tests.yml
with:
ref: refs/tags/${{ needs.cut.outputs.tag }}
.github/workflows/release-mac-build.yml
+1
View File
@@ -39,6 +39,7 @@ jobs:
if: inputs.qualification_only
permissions:
contents: read
actions: read
uses: ./.github/workflows/node-server-tests.yml
with:
ref: ${{ github.sha }}