84 lines
3.0 KiB
YAML
84 lines
3.0 KiB
YAML
name: Testing build (all platforms)
|
|
|
|
# Unsigned testing builds for Linux + Windows + macOS in one matrix. Click
|
|
# "Run workflow" in the Actions tab, or push a 0.0.0-testing-* tag. All three jobs
|
|
# publish to a single 0.0.0-testing-<short-sha> prerelease (distinct asset names).
|
|
#
|
|
# Per OS:
|
|
# Linux -> .deb
|
|
# Windows -> Setup.exe (+ .nupkg / RELEASES)
|
|
# macOS -> .zip (arm64; dmg + signing are follow-ups)
|
|
#
|
|
# Unsigned: macOS is quarantined/Gatekeeper-blocked once downloaded
|
|
# (xattr -dr com.apple.quarantine "Agent Orchestrator.app"); Windows SmartScreen
|
|
# warns ("More info" -> "Run anyway"). Each OS builds on its own native runner so
|
|
# build-daemon.mjs compiles the bundled ao for that platform (host == target).
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
push:
|
|
tags:
|
|
- "0.0.0-testing-*"
|
|
|
|
jobs:
|
|
build:
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
include:
|
|
- os: ubuntu-latest
|
|
target: "@electron-forge/maker-deb"
|
|
- os: windows-latest
|
|
target: "@electron-forge/maker-squirrel"
|
|
- os: macos-latest
|
|
target: "@electron-forge/maker-zip"
|
|
runs-on: ${{ matrix.os }}
|
|
permissions:
|
|
contents: write
|
|
defaults:
|
|
run:
|
|
working-directory: frontend
|
|
env:
|
|
# Pure-Go sqlite (modernc) needs no cgo; on Linux this also keeps the daemon
|
|
# static and portable across glibc.
|
|
CGO_ENABLED: 0
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 20
|
|
cache: npm
|
|
cache-dependency-path: frontend/package-lock.json
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version-file: backend/go.mod
|
|
cache-dependency-path: backend/go.sum
|
|
- run: npm ci
|
|
- name: Build (unsigned)
|
|
# `npm run make` keeps the premake daemon build; --targets restricts to this
|
|
# platform's maker.
|
|
run: npm run make -- --targets ${{ matrix.target }}
|
|
- name: Publish to a 0.0.0-testing-<sha> prerelease
|
|
shell: bash
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
set -euo pipefail
|
|
# Tag push: use the pushed tag. Manual run: mint 0.0.0-testing-<sha>.
|
|
if [ "${GITHUB_REF_TYPE}" = "tag" ]; then
|
|
TAG="${GITHUB_REF_NAME}"
|
|
else
|
|
TAG="0.0.0-testing-${GITHUB_SHA::7}"
|
|
fi
|
|
# Matrix jobs race here; first one creates the release, the rest hit
|
|
# "already exists" which is fine (|| true). Distinct asset names + --clobber
|
|
# make uploads idempotent across re-runs.
|
|
gh release create "$TAG" --prerelease --target "$GITHUB_SHA" --title "$TAG" \
|
|
--notes "Unsigned testing build (Linux .deb / Windows Setup.exe / macOS .zip). Not signed; for testing only." \
|
|
|| true
|
|
# NUL-delimited to survive spaces in the app name ("Agent Orchestrator-...").
|
|
find out/make -type f -print0 | while IFS= read -r -d '' f; do
|
|
echo "uploading: $f"
|
|
gh release upload "$TAG" "$f" --clobber
|
|
done
|