spec(open-knowledge): remove Bun, Node as sole execution engine (#2375) #24
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: native-config prebuild | |
| # Cross-platform prebuild matrix for the `@inkeep/open-knowledge-native-config` | |
| # napi-rs addon (the toml_edit parse + format-preserving Codex TOML edit engine). | |
| # Builds one `.node` per target so the published CLI can bundle all of them into | |
| # `packages/cli/dist/native/` (Option 3 — bundle into the CLI tarball; see | |
| # reports/native-addon-npm-distribution/REPORT.md). Standalone by design: it is | |
| # NOT grafted into release.yml so the pure-JS beta-cadence publisher stays | |
| # untouched; the release flow downloads these artifacts before the CLI build. | |
| # | |
| # Mirrors the napi-rs package-template CI build matrix (runner mapping + | |
| # --use-napi-cross for linux-gnu cross builds + cargo-zigbuild for musl). Every | |
| # `uses:` is SHA-pinned with a version comment, matching release.yml. | |
| on: | |
| workflow_dispatch: | |
| push: | |
| paths: | |
| - "packages/native-config/**" | |
| - ".github/workflows/native-config-prebuild.yml" | |
| pull_request: | |
| paths: | |
| - "packages/native-config/**" | |
| - ".github/workflows/native-config-prebuild.yml" | |
| # Per-ref isolation — a new push to the same branch cancels the in-flight run. | |
| # Deliberately NOT the `ok-release-cadence` group (that serializes beta/stable | |
| # cuts); this prebuild is independent of the release pipeline. | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| jobs: | |
| build: | |
| name: build - ${{ matrix.settings.target }} | |
| runs-on: ${{ matrix.settings.host }} | |
| timeout-minutes: 30 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| settings: | |
| # macos-26 is Apple-Silicon (arm64); it cross-builds the x64 darwin | |
| # target with the same SDK, so both darwin targets share the host. | |
| - host: macos-26 | |
| target: aarch64-apple-darwin | |
| napiFlags: "" | |
| - host: macos-26 | |
| target: x86_64-apple-darwin | |
| napiFlags: "" | |
| # --use-napi-cross pulls the zig-backed cross toolchain napi-rs ships | |
| # for glibc Linux targets, so an x64 ubuntu host builds both arches. | |
| - host: ubuntu-latest | |
| target: x86_64-unknown-linux-gnu | |
| napiFlags: "--use-napi-cross" | |
| - host: ubuntu-latest | |
| target: aarch64-unknown-linux-gnu | |
| napiFlags: "--use-napi-cross" | |
| # -x routes the build through cargo-zigbuild for musl (Alpine) targets. | |
| - host: ubuntu-latest | |
| target: x86_64-unknown-linux-musl | |
| napiFlags: "-x" | |
| - host: ubuntu-latest | |
| target: aarch64-unknown-linux-musl | |
| napiFlags: "-x" | |
| - host: windows-latest | |
| target: x86_64-pc-windows-msvc | |
| napiFlags: "" | |
| - host: windows-latest | |
| target: aarch64-pc-windows-msvc | |
| napiFlags: "" | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5 | |
| - name: Get pnpm store directory | |
| shell: bash | |
| run: echo "STORE_PATH=$(pnpm store path --silent)" >> "$GITHUB_ENV" | |
| - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: ${{ env.STORE_PATH }} | |
| key: ${{ runner.os }}-ok-pnpm-store-${{ hashFiles('pnpm-lock.yaml') }} | |
| restore-keys: | | |
| ${{ runner.os }}-ok-pnpm-store- | |
| - name: Setup Node | |
| uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 | |
| with: | |
| node-version: "24" | |
| - name: Setup Rust toolchain | |
| uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable | |
| with: | |
| toolchain: stable | |
| targets: ${{ matrix.settings.target }} | |
| - name: Cache cargo + target | |
| uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 | |
| with: | |
| path: | | |
| ~/.cargo/registry/index/ | |
| ~/.cargo/registry/cache/ | |
| ~/.cargo/git/db/ | |
| packages/native-config/target/ | |
| # Hash the manifest + lockfile into the key so a crate bump can't be | |
| # served a stale registry/target tree from an older resolution. The | |
| # restore-keys prefix still allows a partial warm-start (registry + | |
| # unchanged crates) on a manifest change. | |
| key: ${{ matrix.settings.target }}-cargo-${{ matrix.settings.host }}-${{ hashFiles('packages/native-config/Cargo.lock', 'packages/native-config/Cargo.toml') }} | |
| restore-keys: | | |
| ${{ matrix.settings.target }}-cargo-${{ matrix.settings.host }}- | |
| - name: Setup Zig (musl targets only) | |
| if: contains(matrix.settings.target, 'musl') | |
| uses: mlugg/setup-zig@d1434d08867e3ee9daa34448df10607b98908d29 # v2.2.1 | |
| with: | |
| version: 0.14.1 | |
| - name: Install cargo-zigbuild (musl targets only) | |
| if: contains(matrix.settings.target, 'musl') | |
| uses: taiki-e/install-action@bffeee26d4db9be238a4ea78d8826604ebcb594d # v2.82.5 | |
| with: | |
| tool: cargo-zigbuild | |
| - name: Install JS dependencies | |
| run: pnpm install --frozen-lockfile | |
| - name: Build addon | |
| working-directory: packages/native-config | |
| shell: bash | |
| # Appends the per-target flags to the package's own | |
| # `napi build --platform --release` script. | |
| run: pnpm run build -- --target ${{ matrix.settings.target }} ${{ matrix.settings.napiFlags }} | |
| - name: Upload binding | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: bindings-${{ matrix.settings.target }} | |
| path: packages/native-config/*.node | |
| if-no-files-found: error | |
| combine: | |
| name: combine + verify all targets present | |
| needs: build | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Download all bindings | |
| uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 | |
| with: | |
| path: artifacts | |
| - name: Assert every target produced exactly one binding | |
| shell: bash | |
| run: | | |
| set -euo pipefail | |
| targets=( | |
| aarch64-apple-darwin | |
| x86_64-apple-darwin | |
| x86_64-unknown-linux-gnu | |
| aarch64-unknown-linux-gnu | |
| x86_64-unknown-linux-musl | |
| aarch64-unknown-linux-musl | |
| x86_64-pc-windows-msvc | |
| aarch64-pc-windows-msvc | |
| ) | |
| missing=0 | |
| for t in "${targets[@]}"; do | |
| dir="artifacts/bindings-$t" | |
| count=$(find "$dir" -name '*.node' 2>/dev/null | wc -l | tr -d ' ') | |
| if [ "$count" -lt 1 ]; then | |
| echo "::error::no .node found for target $t (artifact bindings-$t)" | |
| missing=1 | |
| else | |
| echo "ok: $t -> $(find "$dir" -name '*.node')" | |
| fi | |
| done | |
| total=$(find artifacts -name '*.node' | wc -l | tr -d ' ') | |
| echo "total .node files: $total" | |
| if [ "$total" -ne 8 ]; then | |
| echo "::error::expected 8 .node binaries (one per target), found $total" | |
| missing=1 | |
| fi | |
| [ "$missing" -eq 0 ] | |
| - name: Upload combined bindings bundle | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: native-config-bindings-all | |
| path: artifacts/**/*.node | |
| if-no-files-found: error |