PHONY: stable-ghc-9.14 additions

.envrc

@@ -0,0 +1,7 @@
+# Check if nix-direnv is already loaded; if not, source it
+if ! has nix_direnv_reload; then
+  source_url "https://raw.githubusercontent.com/nix-community/nix-direnv/3.0.7/direnvrc" "sha256-bn8WANE5a91RusFmRI7kS751ApelG02nMcwRekC/qzc="
+fi
+
+# Use the specified flake to enter the Nix development environment
+use flake github:input-output-hk/devx#ghc98-minimal-ghc

.github/actions/download/action.yml

@@ -0,0 +1,25 @@
+name: 'Download artifact'
+description: 'Download artifacts with normalized names'
+inputs:
+  name:
+    required: true
+    type: string
+  path:
+    required: true
+    type: string
+
+runs:
+  using: "composite"
+  steps:
+    - name: Normalise name
+      run: |
+        name=${{ inputs.name }}
+        echo "NAME=${name//\//_}" >> "$GITHUB_ENV"
+      shell: bash
+
+    - name: Download artifact
+      uses: actions/download-artifact@v4
+      with:
+        name: ${{ env.NAME }}
+        path: ${{ inputs.path }}
+

.github/actions/upload/action.yml

@@ -0,0 +1,33 @@
+name: 'Upload artifact'
+description: 'Upload artifacts with normalized names'
+inputs:
+  if-no-files-found:
+    default: 'error'
+    type: string
+  name:
+    required: true
+    type: string
+  path:
+    required: true
+    type: string
+  retention-days:
+    default: 0
+    type: number
+
+runs:
+  using: "composite"
+  steps:
+    - name: Normalise name
+      run: |
+        name=${{ inputs.name }}
+        echo "NAME=${name//\//_}" >> "$GITHUB_ENV"
+      shell: bash
+
+    - name: Upload artifact
+      uses: actions/upload-artifact@v4
+      with:
+        if-no-files-found: ${{ inputs.if-no-files-found }}
+        retention-days: ${{ inputs.retention-days }}
+        name: ${{ env.NAME }}
+        path: ${{ inputs.path }}
+

.github/workflows/ci.yml

@@ -0,0 +1,233 @@
+name: CI
+
+on:
+  pull_request:
+    types: [opened, synchronize]
+  push:
+    branches: [stable-ghc-9.14, stable-master]
+  workflow_dispatch:
+
+env:
+  CABAL_CACHE_PATH: _build/cabal/bin
+
+jobs:
+  cabal:
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - plat: x86_64-linux
+            runner: ubuntu-24.04
+            ghc: '98'
+            dynamic: 0
+          - plat: x86_64-linux
+            runner: ubuntu-24.04
+            ghc: '98'
+            dynamic: 1
+          # - plat: aarch64-linux  # disabled: waiting for devx images to be fixed
+          #   runner: ubuntu-24.04-arm
+          #   ghc: '98'
+          #   dynamic: 0
+          # - plat: aarch64-linux
+          #   runner: ubuntu-24.04-arm
+          #   ghc: '98'
+          #   dynamic: 1
+          - plat: aarch64-darwin
+            runner: macos-latest
+            ghc: '98'
+            dynamic: 0
+          - plat: aarch64-darwin
+            runner: macos-latest
+            ghc: '98'
+            dynamic: 1
+
+    name: "${{ matrix.plat }} / ghc ${{ matrix.ghc }} / dynamic=${{ matrix.dynamic }}"
+    runs-on: ${{ matrix.runner }}
+
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        submodules: "recursive"
+
+    - uses: input-output-hk/actions/devx@latest
+      with:
+        platform: ${{ matrix.plat }}
+        compiler-nix-name: 'ghc98'
+        minimal: true
+        ghc: true
+
+    - name: Cache stage0 cabal binary
+      id: cabal-cache
+      uses: actions/cache@v5
+      with:
+        path: ${{ env.CABAL_CACHE_PATH }}
+        key: cabal-${{ vars.CACHE_VERSION || 'v1' }}-${{ matrix.plat }}-${{ hashFiles('cabal.project.stage0') }}
+
+    - name: Update hackage
+      shell: devx {0}
+      run: cabal update
+
+    # The Makefile will run configure (and boot), we also need to create a
+    # synthetic package before running configure.  Once this nuisance is fixed
+    # we can do proper configure + make again. Until then... we have to live
+    # with the hack of running everything from the make target.
+    # - name: Configure the build
+    #   shell: devx {0}
+    #   run: ./configure
+
+    - name: Start metrics collection
+      shell: bash  # bash (not devx): metrics tools use absolute paths to system binaries
+      run: ./mk/collect-metrics.sh start _build/metrics 0.5
+
+    - name: Build (dynamic=${{ matrix.dynamic }})
+      shell: devx {0}
+      run: make QUIET=1 DYNAMIC=${{ matrix.dynamic }} ${{ steps.cabal-cache.outputs.cache-hit == 'true' && 'USE_SYSTEM_CABAL=1' || '' }}
+
+    - name: Display build timings
+      if: ${{ !cancelled() }}
+      shell: devx {0}
+      run: make timing-summary
+
+    - name: Upload artifacts
+      uses: actions/upload-artifact@v4
+      with:
+        name: ${{ matrix.plat }}-dynamic${{ matrix.dynamic }}-dist
+        path: _build/dist
+
+    - name: Upload build logs and timing
+      uses: actions/upload-artifact@v4
+      if: ${{ !cancelled() }}
+      with:
+        name: ${{ matrix.plat }}-dynamic${{ matrix.dynamic }}-build-logs
+        path: |
+          _build/logs/
+          _build/timing/
+
+    - name: Run the testsuite (dynamic=${{ matrix.dynamic }})
+      shell: devx {0}
+      run: make test QUIET=1 DYNAMIC=${{ matrix.dynamic }} ${{ steps.cabal-cache.outputs.cache-hit == 'true' && 'USE_SYSTEM_CABAL=1' || '' }}
+
+    - name: Stop metrics collection
+      if: ${{ !cancelled() }}
+      shell: bash  # bash (not devx): metrics tools use absolute paths to system binaries
+      run: ./mk/collect-metrics.sh stop _build/metrics
+
+    - name: Display test timings
+      if: ${{ !cancelled() }}
+      shell: devx {0}
+      run: make timing-summary
+
+    - name: Generate metrics plots
+      if: ${{ !cancelled() }}
+      continue-on-error: true
+      shell: bash
+      run: |
+        # Generate separate build and test SVG plots.
+        # Use bash (not devx) because nix is not available inside the devx shell.
+        PYTHON_MPL=$(nix build --impure --no-link --print-out-paths \
+          --expr 'let pkgs = (builtins.getFlake "nixpkgs").legacyPackages.${builtins.currentSystem}; in pkgs.python3.withPackages (ps: [ps.matplotlib])')
+        "$PYTHON_MPL/bin/python3" ./mk/plot-metrics.py _build/metrics _build/timing _build/metrics/metrics
+
+    - name: Upload metrics plots to R2
+      if: ${{ !cancelled() }}
+      continue-on-error: true
+      env:
+        AWS_ACCESS_KEY_ID: ${{ secrets.R2_METRICS_ACCESS_KEY_ID }}
+        AWS_SECRET_ACCESS_KEY: ${{ secrets.R2_METRICS_SECRET_ACCESS_KEY }}
+        R2_ENDPOINT: ${{ secrets.R2_METRICS_ENDPOINT }}
+        R2_PUBLIC_URL: ${{ vars.R2_METRICS_PUBLIC_URL }}
+        R2_BUCKET: ${{ vars.R2_METRICS_BUCKET_NAME }}
+      shell: bash
+      run: |
+        RUN_ID="${{ github.run_id }}"
+        PLAT="${{ matrix.plat }}"
+        DYN="${{ matrix.dynamic }}"
+
+        export AWS_ENDPOINT_URL="${R2_ENDPOINT}"
+        export AWS_DEFAULT_REGION=auto
+
+        # Use bash (not devx) because nix is not available inside the devx shell.
+        AWSCLI=$(nix build --no-link --print-out-paths nixpkgs#awscli2)
+        AWS="$AWSCLI/bin/aws"
+
+        # Upload build plot if it exists
+        if [[ -f "_build/metrics/metrics-build.svg" ]]; then
+          BUILD_PATH="runs/${RUN_ID}/${PLAT}-dynamic${DYN}-build.svg"
+          "$AWS" s3 cp _build/metrics/metrics-build.svg "s3://${R2_BUCKET}/${BUILD_PATH}" --content-type 'image/svg+xml' || echo "Failed to upload build plot (non-fatal)"
+          echo "BUILD_PLOT_URL=${R2_PUBLIC_URL}/${BUILD_PATH}" >> $GITHUB_ENV
+        fi
+
+        # Upload test plot if it exists
+        if [[ -f "_build/metrics/metrics-test.svg" ]]; then
+          TEST_PATH="runs/${RUN_ID}/${PLAT}-dynamic${DYN}-test.svg"
+          "$AWS" s3 cp _build/metrics/metrics-test.svg "s3://${R2_BUCKET}/${TEST_PATH}" --content-type 'image/svg+xml' || echo "Failed to upload test plot (non-fatal)"
+          echo "TEST_PLOT_URL=${R2_PUBLIC_URL}/${TEST_PATH}" >> $GITHUB_ENV
+        fi
+
+    - name: Write metrics summary
+      if: ${{ !cancelled() }}
+      shell: devx {0}
+      run: |
+        echo "## Build Metrics Summary" >> $GITHUB_STEP_SUMMARY
+        echo "" >> $GITHUB_STEP_SUMMARY
+
+        # Embed build plot if available
+        if [[ -n "${BUILD_PLOT_URL:-}" ]]; then
+          echo "### Build Phases (CPU & Memory)" >> $GITHUB_STEP_SUMMARY
+          echo "<img src=\"${BUILD_PLOT_URL}\" alt=\"Build Metrics\" width=\"100%\">" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+        fi
+
+        # Embed test plot if available
+        if [[ -n "${TEST_PLOT_URL:-}" ]]; then
+          echo "### Test Phase (CPU & Memory)" >> $GITHUB_STEP_SUMMARY
+          echo "<img src=\"${TEST_PLOT_URL}\" alt=\"Test Metrics\" width=\"100%\">" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+        fi
+
+        echo "### Phase Timings" >> $GITHUB_STEP_SUMMARY
+        echo "| Phase | Duration | Status |" >> $GITHUB_STEP_SUMMARY
+        echo "|-------|----------|--------|" >> $GITHUB_STEP_SUMMARY
+
+        # Auto-discover phases from timing files (summary.txt is generated
+        # by timing-summary.sh with ordered top-level + sub-phases)
+        make timing-summary 2>/dev/null || true
+        if [[ -f "_build/timing/summary.txt" ]]; then
+          while read -r phase dur status; do
+            mins=$((dur / 60))
+            secs=$((dur % 60))
+            status_str="OK"
+            [[ "$status" == "1" ]] && status_str="FAIL"
+            # Indent sub-phases (contain a dot) with leading spaces
+            if [[ "$phase" == *.* ]]; then
+              echo "| &nbsp;&nbsp;$phase | ${mins}m ${secs}s | $status_str |" >> $GITHUB_STEP_SUMMARY
+            else
+              echo "| **$phase** | **${mins}m ${secs}s** | $status_str |" >> $GITHUB_STEP_SUMMARY
+            fi
+          done < "_build/timing/summary.txt"
+        fi
+        echo "" >> $GITHUB_STEP_SUMMARY
+        # Add memory stats from metrics
+        if [[ -f "_build/metrics/metrics.csv" ]]; then
+          max_mem=$(awk -F',' 'NR>1 {if($3>max) max=$3} END {printf "%.1f", max/1024}' _build/metrics/metrics.csv)
+          echo "**Peak Memory:** ${max_mem} GB" >> $GITHUB_STEP_SUMMARY
+        fi
+
+    - name: Upload test results
+      uses: actions/upload-artifact@v4
+      if: ${{ !cancelled() }}
+      with:
+        name: ${{ matrix.plat }}-dynamic${{ matrix.dynamic }}-testsuite-results
+        path: |
+          _build/test-perf.csv
+          _build/test-summary.txt
+          _build/test-junit.xml
+          _build/timing/
+
+    - name: Upload metrics
+      uses: actions/upload-artifact@v4
+      if: ${{ !cancelled() }}
+      with:
+        name: ${{ matrix.plat }}-dynamic${{ matrix.dynamic }}-metrics
+        path: |
+          _build/metrics/

.github/workflows/release.yml

@@ -0,0 +1,46 @@
+name: Build and release
+
+on:
+  push:
+    tags: ['*']
+  pull_request:
+    types: [opened, synchronize, reopened, labeled]
+    branches:
+      - stable-ghc-9.14
+  schedule:
+    - cron: '0 0 * * *'
+  workflow_dispatch:
+
+permissions:
+  pull-requests: read
+  contents: write
+
+jobs:
+  release-workflow:
+    uses: ./.github/workflows/reusable-release.yml
+    with:
+      branches: '["${{ github.ref }}"]'
+
+  release:
+    name: release
+    needs: [ "release-workflow" ]
+    runs-on: ubuntu-latest
+    if: ${{ startsWith(github.ref, 'refs/tags/') || github.event_name == 'workflow_dispatch' }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Download artifacts
+        uses: actions/download-artifact@v4
+        with:
+          pattern: artifacts-*
+          merge-multiple: true
+          path: ./out
+
+      - name: Release
+        uses: softprops/action-gh-release@v2
+        with:
+          draft: true
+          files: |
+            ./out/*
+