ShadowCode/.github/workflows/windows.yml at main · ShadowfetchStudio/ShadowCode · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
name: Windows
# The Windows port (docs/WINDOWS_PORT.md). The whole workspace must compile
# on Windows without warnings (every error is reported at once with
# --keep-going), and the engine's unit and integration tests must pass. The
# logs are kept as artifacts. The installer job
# builds an unsigned preview installer (NSIS, per-user) as an artifact; it is
# not attached to any release.
on:
  push:
    branches: [main]
    paths: ['native/**', 'src-tauri/**', 'ui/**', 'Cargo.toml', 'Cargo.lock', '.github/workflows/windows.yml', 'scripts/build-llama.cpp.sh', 'scripts/stage-windows-crt.ps1', 'scripts/test-windows-installed-runtime.ps1', 'tools/llama.cpp.pin', 'scripts/build-busybox-w32.sh', 'tools/busybox-w32.pin', 'tools/busybox-w32-patches/**', 'packaging/windows/**']
  pull_request:
    paths: ['native/**', 'src-tauri/**', 'ui/**', 'Cargo.toml', 'Cargo.lock', '.github/workflows/windows.yml', 'scripts/build-llama.cpp.sh', 'scripts/stage-windows-crt.ps1', 'scripts/test-windows-installed-runtime.ps1', 'tools/llama.cpp.pin', 'scripts/build-busybox-w32.sh', 'tools/busybox-w32.pin', 'tools/busybox-w32-patches/**', 'packaging/windows/**']
permissions:
  contents: read
concurrency:
  group: windows-${{ github.ref }}
  cancel-in-progress: true
jobs:
  # The sandbox's shell, cross-compiled from pinned source (see the script).
  busybox:
    runs-on: ubuntu-24.04
    timeout-minutes: 20
    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
      - name: Cross compiler
        run: sudo apt-get update && sudo apt-get install -y gcc-mingw-w64-x86-64 bzip2
      - run: bash scripts/build-busybox-w32.sh
      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
        with:
          name: busybox-w32
          path: packaging/busybox-w32/bin/
          if-no-files-found: error
          retention-days: 7
  build:
    needs: busybox
    runs-on: windows-latest
    timeout-minutes: 150
    env:
      RUSTUP_TOOLCHAIN: '1.95.0'
      CARGO_PROFILE_DEV_DEBUG: line-tables-only
      CARGO_PROFILE_TEST_DEBUG: line-tables-only
      CARGO_TERM_COLOR: never
      # Job-wide so the check and the test build share one compilation.
      RUSTFLAGS: -D warnings
    defaults:
      run:
        shell: bash
    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
        with:
          node-version: '22'
          cache: npm
          cache-dependency-path: ui/package-lock.json
      - name: Install pinned Rust toolchain
        run: rustup toolchain install 1.95.0 --profile minimal --component clippy
      # The desktop crate embeds the built interface (tauri.conf.json frontendDist).
      - run: npm --prefix ui ci
      - run: npm --prefix ui run build
      - name: Windows editor shortcuts and native clipboard regression tests
        working-directory: ui
        run: |
          npx playwright install chromium
          npx playwright test e2e/editor.spec.ts e2e/markdownWorker.spec.ts
      - name: Compile everything for Windows (all errors at once)
        run: |
          set -o pipefail
          cargo +1.95.0 check --workspace --all-targets --locked --keep-going --message-format=short 2>&1 | tee windows-check.log
      - name: Summarize the errors
        if: always()
        run: |
          echo "errors: $(grep -c ': error' windows-check.log || true)"
          { grep ': error' windows-check.log || true; } | sed -E 's/:[0-9]+:[0-9]+:/:/' | sort | uniq -c | sort -rn | head -80
      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
        with:
          name: busybox-w32
          path: packaging/busybox-w32/bin
      # The runner's Git converts line endings on checkout (core.autocrlf);
      # the tests' repositories expect the bytes they committed.
      - name: Neutral Git settings for the tests
        run: git config --global core.autocrlf false
      - name: Engine unit tests on Windows
        id: unit
        env:
          # An error's backtrace says which call failed, not only its message.
          RUST_LIB_BACKTRACE: '1'
        run: |
          set -o pipefail
          cargo +1.95.0 test -p shadowcode-core --lib --locked --no-fail-fast 2>&1 | tee windows-test.log
      - name: Engine integration tests on Windows
        id: integration
        env:
          RUST_LIB_BACKTRACE: '1'
        run: |
          export SHADOWCODE_BUSYBOX="$(cygpath -w "$PWD/packaging/busybox-w32/bin/busybox.exe")"
          set -o pipefail
          cargo +1.95.0 test -p shadowcode-core --test '*' --locked --no-fail-fast 2>&1 | tee windows-integration.log
      - name: Summarize the tests
        if: always() && steps.unit.outcome != 'skipped'
        run: |
          for log in windows-test.log windows-integration.log; do
            [ -f "$log" ] || continue
            echo "== $log"
            grep -E '^test result:' "$log" | sort | uniq -c || true
            echo "failing tests:"
            { grep -E '^test .* \.\.\. FAILED$' "$log" || true; } | sed -E 's/^test //; s/ \.\.\. FAILED$//' | sort
            grep -E '^error: (test failed|could not compile)' "$log" || true
          done
      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
        if: always()
        with:
          name: windows-check-log
          path: |
            windows-check.log
            windows-test.log
            windows-integration.log
          if-no-files-found: ignore
          retention-days: 14
  installer:
    needs: busybox
    runs-on: windows-latest
    timeout-minutes: 150
    env:
      RUSTUP_TOOLCHAIN: '1.95.0'
      CARGO_TERM_COLOR: never
    defaults:
      run:
        shell: bash
    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
        with:
          node-version: '22'
          cache: npm
          cache-dependency-path: ui/package-lock.json
      - name: Install pinned Rust toolchain
        run: rustup toolchain install 1.95.0 --profile minimal
      - run: npm --prefix ui ci
      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
        with:
          name: busybox-w32
          path: packaging/busybox-w32/bin
      # The pinned llama.cpp (CPU variants, clang-cl), bundled as llama.cpp\.
      - name: Build the local model runtime
        run: bash scripts/build-llama.cpp.sh --no-user-install --cpu-only
      - name: The runtime starts and reports its version
        run: |
          ls packaging/llama.cpp/bin
          packaging/llama.cpp/bin/llama-server.exe --version
          packaging/llama.cpp/bin/llama-server.exe --list-devices
      - name: Stage app-local Microsoft CRT
        shell: powershell
        run: ./scripts/stage-windows-crt.ps1
      - name: Build the preview installer (NSIS, current user)
        run: CI=true ui/node_modules/.bin/tauri build --bundles nsis --config packaging/windows/bundle-runtime.conf.json
      - name: The app starts and reports its version
        run: |
          version="$(node -p "require('./src-tauri/tauri.conf.json').version")"
          ls target/release/bundle/nsis/
          out="$(timeout 60 target/release/shadowcode.exe --version 2>&1 || true)"
          echo "$out"
          grep -Fx "ShadowCode $version" <<<"$out"
      # Started from Explorer, Windows programs have no HOME (Git Bash sets
      # one): the app must still find its folders.
      - name: The app finds its folders without HOME
        run: |
          out="$(env -u HOME timeout 60 target/release/shadowcode.exe status 2>&1 || true)"
          echo "$out"
          ! grep -q "HOME is not set" <<<"$out"
          test -d "$(cygpath -u "$LOCALAPPDATA")/ShadowCode/state"
          test -d "$(cygpath -u "$APPDATA")/ShadowCode/config"
      - name: Install and check with a clean runtime search path
        shell: powershell
        run: |
          $setup = Get-ChildItem target/release/bundle/nsis/*-setup.exe | Select-Object -First 1
          if (!$setup) { throw 'Preview installer missing' }
          $install = Start-Process $setup.FullName -ArgumentList '/S' -PassThru
          $handle = $install.Handle
          $install.WaitForExit()
          if ($install.ExitCode -ne 0) { throw "Installer failed: $($install.ExitCode)" }
          ./scripts/test-windows-installed-runtime.ps1 -AppDirectory "$env:LOCALAPPDATA\ShadowCode"
      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
        with:
          name: windows-preview-installer
          path: target/release/bundle/nsis/*.exe
          if-no-files-found: error
          compression-level: 0
          retention-days: 14