ci: cancel superseded user-facing IDE workflow runs

2026-10-20 17:45:08 +03:00
1 parent 1aa033a751
commit fb62f31be3
@@ -1,98 +1,102 @@
-name: Server CI and Windows package
+name: Server CI and Windows package
-
+
-on:
+on:
-  push:
+  push:
-    branches: [aiturk/main, fix/ide-windows-vcruntime]
+    branches: [aiturk/main, fix/ide-windows-vcruntime]
-  workflow_dispatch:
+  workflow_dispatch:
-
+
-permissions:
+concurrency:
-  contents: read
+  group: ${{ github.workflow }}-${{ github.ref }}
-
+  cancel-in-progress: true
-jobs:
+
-  verify:
+permissions:
-    runs-on: ubuntu-24.04
+  contents: read
-    timeout-minutes: 40
+
-    env:
+jobs:
-      NODE_OPTIONS: --max-old-space-size=2560
+  verify:
-      PYTHONDONTWRITEBYTECODE: '1'
+    runs-on: ubuntu-24.04
-    steps:
+    timeout-minutes: 40
-      - uses: actions/checkout@v4
+    env:
-        with:
+      NODE_OPTIONS: --max-old-space-size=2560
-          github-server-url: https://gitea.turkservis.online
+      PYTHONDONTWRITEBYTECODE: '1'
-      - name: Exact source and Linux test environment
+    steps:
-        run: |
+      - uses: actions/checkout@v4
-          set -eu
+        with:
-          test "$(git rev-parse HEAD)" = "$GITHUB_SHA"
+          github-server-url: https://gitea.turkservis.online
-          apt-get update
+      - name: Exact source and Linux test environment
-          apt-get install -y --no-install-recommends ripgrep
+        run: |
-          rg --version
+          set -eu
-          python3 -m venv "$RUNNER_TEMP/bootstrap"
+          test "$(git rev-parse HEAD)" = "$GITHUB_SHA"
-          "$RUNNER_TEMP/bootstrap/bin/pip" install uv
+          apt-get update
-          "$RUNNER_TEMP/bootstrap/bin/uv" venv --python 3.11 "$RUNNER_TEMP/ci-venv"
+          apt-get install -y --no-install-recommends ripgrep
-          "$RUNNER_TEMP/bootstrap/bin/uv" pip install --python "$RUNNER_TEMP/ci-venv/bin/python" -e . pytest zstandard
+          rg --version
-      - name: Approval gate and file safety on the server
+          python3 -m venv "$RUNNER_TEMP/bootstrap"
-        run: |
+          "$RUNNER_TEMP/bootstrap/bin/pip" install uv
-          "$RUNNER_TEMP/ci-venv/bin/python" -m pytest tests/tools/test_protected_instruction_unattended.py tests/tools/test_file_write_safety.py tests/tools/test_computer_use_approval_isolation.py tests/cli/test_cli_approval_ui.py tests/cli/test_single_query_session_finalize.py -q -p no:cacheprovider -rf
+          "$RUNNER_TEMP/bootstrap/bin/uv" venv --python 3.11 "$RUNNER_TEMP/ci-venv"
-      - name: Codex bridge regression tests
+          "$RUNNER_TEMP/bootstrap/bin/uv" pip install --python "$RUNNER_TEMP/ci-venv/bin/python" -e . pytest zstandard
-        run: '"$RUNNER_TEMP/ci-venv/bin/python" -m unittest discover -s apps/desktop/assets/codex-bridge'
+      - name: Approval gate and file safety on the server
-      - name: Managed Python update preservation
+        run: |
-        run: '"$RUNNER_TEMP/ci-venv/bin/python" -m pytest tests/test_install_ps1_reuse_healthy_venv.py tests/test_install_ps1_python_fallback_venv.py -q -p no:cacheprovider -rf'
+          "$RUNNER_TEMP/ci-venv/bin/python" -m pytest tests/tools/test_protected_instruction_unattended.py tests/tools/test_file_write_safety.py tests/tools/test_computer_use_approval_isolation.py tests/cli/test_cli_approval_ui.py tests/cli/test_single_query_session_finalize.py -q -p no:cacheprovider -rf
-      - name: Project scoped and bounded search regressions
+      - name: Codex bridge regression tests
-        run: '"$RUNNER_TEMP/ci-venv/bin/python" -m pytest tests/tools/test_search_project_scope.py tests/tools/test_search_files_cpu_windows.py tests/tools/test_search_zero_match_and_multipath.py tests/tools/test_search_giant_line_containment.py tests/tools/test_search_budget_truncation.py -q -p no:cacheprovider -rf'
+        run: '"$RUNNER_TEMP/ci-venv/bin/python" -m unittest discover -s apps/desktop/assets/codex-bridge'
-      - name: Desktop browser control lane (AITURK Chrome)
+      - name: Managed Python update preservation
-        run: '"$RUNNER_TEMP/ci-venv/bin/python" -m pytest tests/gateway/test_browser_control_local_lane.py tests/gateway/test_browser_control_broker.py tests/gateway/test_browser_control_broker_hardening.py tests/gateway/test_browser_control_cloud.py tests/tools/test_browser_extension_router.py tests/tools/test_browser_extension_router_wiring.py -q -p no:cacheprovider -rf'
+        run: '"$RUNNER_TEMP/ci-venv/bin/python" -m pytest tests/test_install_ps1_reuse_healthy_venv.py tests/test_install_ps1_python_fallback_venv.py -q -p no:cacheprovider -rf'
-      - name: Native watch and speech mux pytest regressions
+      - name: Project scoped and bounded search regressions
-        run: '"$RUNNER_TEMP/ci-venv/bin/python" -m pytest apps/desktop/assets/codex-bridge/test_bekci_watch.py apps/desktop/assets/codex-bridge/test_native_speech_mux.py apps/desktop/assets/codex-bridge/test_live_limits.py -q -p no:cacheprovider -rf'
+        run: '"$RUNNER_TEMP/ci-venv/bin/python" -m pytest tests/tools/test_search_project_scope.py tests/tools/test_search_files_cpu_windows.py tests/tools/test_search_zero_match_and_multipath.py tests/tools/test_search_giant_line_containment.py tests/tools/test_search_budget_truncation.py -q -p no:cacheprovider -rf'
-      - name: Mobile and desktop startup regression tests
+      - name: Desktop browser control lane (AITURK Chrome)
-        run: |
+        run: '"$RUNNER_TEMP/ci-venv/bin/python" -m pytest tests/gateway/test_browser_control_local_lane.py tests/gateway/test_browser_control_broker.py tests/gateway/test_browser_control_broker_hardening.py tests/gateway/test_browser_control_cloud.py tests/tools/test_browser_extension_router.py tests/tools/test_browser_extension_router_wiring.py -q -p no:cacheprovider -rf'
-          npm install --prefix "$RUNNER_TEMP/mobile-tests" --no-save --ignore-scripts --no-audit --no-fund --legacy-peer-deps vitest@4.1.10 ws@8.21.1
+      - name: Native watch and speech mux pytest regressions
-          ln -s "$RUNNER_TEMP/mobile-tests/node_modules" node_modules
+        run: '"$RUNNER_TEMP/ci-venv/bin/python" -m pytest apps/desktop/assets/codex-bridge/test_bekci_watch.py apps/desktop/assets/codex-bridge/test_native_speech_mux.py apps/desktop/assets/codex-bridge/test_live_limits.py -q -p no:cacheprovider -rf'
-          node node_modules/vitest/vitest.mjs run --root apps/desktop --config vitest.mobile.config.ts --maxWorkers=2
+      - name: Mobile and desktop startup regression tests
-
+        run: |
-  windows-package:
+          npm install --prefix "$RUNNER_TEMP/mobile-tests" --no-save --ignore-scripts --no-audit --no-fund --legacy-peer-deps vitest@4.1.10 ws@8.21.1
-    if: github.ref == 'refs/heads/fix/ide-windows-vcruntime'
+          ln -s "$RUNNER_TEMP/mobile-tests/node_modules" node_modules
-    needs: verify
+          node node_modules/vitest/vitest.mjs run --root apps/desktop --config vitest.mobile.config.ts --maxWorkers=2
-    runs-on: ubuntu-24.04
+
-    timeout-minutes: 60
+  windows-package:
-    # Windows packaging runs on Linux/Wine in the new server. No laptop runner.
+    if: github.ref == 'refs/heads/fix/ide-windows-vcruntime'
-    container: electronuserland/builder@sha256:b226b27b1a7e95ad25eb3d6414ea90c56c04eb6d8329967f4d721dce50b989ff
+    needs: verify
-    env:
+    runs-on: ubuntu-24.04
-      NODE_OPTIONS: --max-old-space-size=2560
+    timeout-minutes: 60
-      CSC_IDENTITY_AUTO_DISCOVERY: 'false'
+    # Windows packaging runs on Linux/Wine in the new server. No laptop runner.
-    steps:
+    container: electronuserland/builder@sha256:b226b27b1a7e95ad25eb3d6414ea90c56c04eb6d8329967f4d721dce50b989ff
-      - uses: actions/checkout@v4
+    env:
-        with:
+      NODE_OPTIONS: --max-old-space-size=2560
-          github-server-url: https://gitea.turkservis.online
+      CSC_IDENTITY_AUTO_DISCOVERY: 'false'
-      - name: Install locked source dependencies
+    steps:
-        run: npm ci --no-audit --no-fund
+      - uses: actions/checkout@v4
-      - name: Chrome extension, agent control and bridge tests
+        with:
-        run: node --test apps/chrome/tests/agent.test.mjs apps/chrome/tests/bridge.test.mjs apps/chrome/tests/panel.test.mjs
+          github-server-url: https://gitea.turkservis.online
-      - name: Install Windows launcher cross compiler and framework reference
+      - name: Install locked source dependencies
-        run: |
+        run: npm ci --no-audit --no-fund
-          set -eu
+      - name: Chrome extension, agent control and bridge tests
-          apt-get update
+        run: node --test apps/chrome/tests/agent.test.mjs apps/chrome/tests/bridge.test.mjs apps/chrome/tests/panel.test.mjs
-          apt-get install -y --no-install-recommends mono-mcs=6.8.0.105+dfsg-3.2 libmono-system-web-extensions4.0-cil=6.8.0.105+dfsg-3.2
+      - name: Install Windows launcher cross compiler and framework reference
-      - name: Compile Windows launcher from source and verify failure gate
+        run: |
-        run: node --test apps/desktop/scripts/build-native-watch-launcher.test.mjs
+          set -eu
-      - name: Native dependency staging regression tests
+          apt-get update
-        run: npx vitest run --root apps/desktop scripts/stage-native-deps.test.mjs --maxWorkers=2
+          apt-get install -y --no-install-recommends mono-mcs=6.8.0.105+dfsg-3.2 libmono-system-web-extensions4.0-cil=6.8.0.105+dfsg-3.2
-      - name: Codex connection settings regression tests
+      - name: Compile Windows launcher from source and verify failure gate
-        run: npx vitest run --root apps/desktop electron/codex-link.test.ts electron/codex-link-config.test.ts electron/staged-transition.test.ts electron/compression-settings.test.ts src/app/settings/codex-link-settings.test.tsx src/app/settings/staged-transition-settings.test.tsx src/app/settings/compression-settings.test.tsx --maxWorkers=2
+        run: node --test apps/desktop/scripts/build-native-watch-launcher.test.mjs
-      - name: Build and package Windows x64
+      - name: Native dependency staging regression tests
-        run: |
+        run: npx vitest run --root apps/desktop scripts/stage-native-deps.test.mjs --maxWorkers=2
-          set -eu
+      - name: Codex connection settings regression tests
-          test "$(git rev-parse HEAD)" = "$GITHUB_SHA"
+        run: npx vitest run --root apps/desktop electron/codex-link.test.ts electron/codex-link-config.test.ts electron/staged-transition.test.ts electron/compression-settings.test.ts src/app/settings/codex-link-settings.test.tsx src/app/settings/staged-transition-settings.test.tsx src/app/settings/compression-settings.test.tsx --maxWorkers=2
-          npm run build --workspace=apps/desktop
+      - name: Build and package Windows x64
-          npm run builder --workspace=apps/desktop -- --win nsis zip --x64 --publish never
+        run: |
-          git diff --exit-code
+          set -eu
-          cd apps/desktop/release
+          test "$(git rev-parse HEAD)" = "$GITHUB_SHA"
-          sha256sum *.exe *.zip > SHA256SUMS
+          npm run build --workspace=apps/desktop
-      - name: Preserve exact-source Windows package
+          npm run builder --workspace=apps/desktop -- --win nsis zip --x64 --publish never
-        uses: actions/upload-artifact@v3
+          git diff --exit-code
-        with:
+          cd apps/desktop/release
-          name: aiturk-ide-windows-${{ github.sha }}
+          sha256sum *.exe *.zip > SHA256SUMS
-          if-no-files-found: error
+      - name: Preserve exact-source Windows package
-          path: |
+        uses: actions/upload-artifact@v3
-            apps/desktop/release/*.exe
+        with:
-            apps/desktop/release/*.zip
+          name: aiturk-ide-windows-${{ github.sha }}
-            apps/desktop/release/SHA256SUMS
+          if-no-files-found: error
          path: |
            apps/desktop/release/*.exe
            apps/desktop/release/*.zip
            apps/desktop/release/SHA256SUMS