chore: merge upstream main and regenerate desktop bindings

Author: bellabaelfire

.claude/agents/coderabbit-pr-reviewer.md

@@ -70,15 +70,15 @@ After implementing all fixes:
 
 1. **Format Code**
    - Rust: `cargo fmt --all`
-   - TypeScript: `pnpm format`
+   - TypeScript: `bun run format`
 
 2. **Check Compilation**
    - Rust: `cargo check -p affected_crate`
-   - TypeScript: `pnpm typecheck`
+   - TypeScript: `bun run typecheck`
 
 3. **Lint Check**
    - Rust: `cargo clippy`
-   - TypeScript: `pnpm lint`
+   - TypeScript: `bun run lint`
 
 ## Critical Rules
 

.github/actions/setup-js/action.yml

@@ -1,29 +1,42 @@
-name: Setup JS (pnpm & node)
-description: Sets up pnpm & node with dependencies and caching
+name: Setup JS (Bun & Node)
+description: Sets up Bun 1.4.0 and Node with frozen dependencies and caching
 runs:
   using: "composite"
   steps:
-    - name: Install pnpm
-      uses: pnpm/action-setup@v6
-      with:
-        run_install: false
-
-    - name: Setup node
+    - name: Setup Node
       uses: actions/setup-node@v4
       with:
         node-version: 20
-        cache: pnpm
+
+    - name: Setup Bun
+      uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6
+      with:
+        bun-version: 1.4.0
+
+    - name: Cache Bun packages
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830
+      with:
+        path: ${{ runner.temp }}/bun-cache
+        key: ${{ runner.os }}-${{ runner.arch }}-bun-1.4.0-${{ hashFiles('bun.lock') }}
+        restore-keys: |
+          ${{ runner.os }}-${{ runner.arch }}-bun-1.4.0-
 
     - name: Install frontend dependencies
       shell: bash
+      env:
+        BUN_INSTALL_CACHE_DIR: ${{ runner.temp }}/bun-cache
       run: |
         set -euo pipefail
         for attempt in 1 2 3; do
-          if pnpm install; then
+          if bun install --frozen-lockfile; then
             exit 0
           fi
           if [[ "$attempt" == "3" ]]; then
             exit 1
           fi
           sleep $((attempt * 30))
         done
+
+    - name: Verify Bun installation
+      shell: bash
+      run: bun run check:bun

.github/workflows/ci.yml

@@ -34,6 +34,7 @@ jobs:
             desktop:
               - '.gitattributes'
               - '.github/actions/install-desktop-deps/**'
+              - '.github/actions/setup-js/**'
               - '.github/workflows/ci.yml'
               - 'apps/cli/**'
               - 'apps/desktop/**'
@@ -52,7 +53,9 @@ jobs:
               - 'scripts/verify-gpui-release-inputs.mjs'
               - 'Cargo.toml'
               - 'Cargo.lock'
-              - 'pnpm-lock.yaml'
+              - 'bun.lock'
+              - 'bunfig.toml'
+              - 'package.json'
             rust:
               - '.cargo/**'
               - '.github/**'
@@ -64,7 +67,9 @@ jobs:
               - 'Cargo.lock'
             tauri-plugins:
               - 'Cargo.lock'
-              - 'pnpm-lock.yaml'
+              - 'bun.lock'
+              - 'scripts/check-tauri-plugin-versions*'
+              - 'apps/desktop/package.json'
 
       - name: Output branch name
         id: branch
@@ -80,10 +85,25 @@ jobs:
 
       - uses: ./.github/actions/setup-js
 
-      - run: pnpm web exec next typegen
+      - run: bun run --cwd apps/web next typegen
+
+      - name: Test workspace tooling
+        run: node --test scripts/bun-scripts.test.mjs scripts/check-tauri-plugin-versions.test.mjs
+
+      - name: Test web React compatibility
+        run: >-
+          bun run --cwd apps/web test
+          __tests__/unit/embed-video-playback-chrome.test.ts
+          __tests__/unit/homepage-demo-accessibility.test.ts
+          __tests__/unit/linkified-text.test.ts
+          __tests__/unit/loom-import-ui.test.ts
+          __tests__/unit/media-player-store-refs.test.ts
+          __tests__/unit/signed-baa-card.test.ts
+          __tests__/unit/summary-editor.test.ts
+          __tests__/unit/sso-login-pages.test.ts
 
       - name: Typecheck
-        run: pnpm typecheck
+        run: bun run typecheck
 
   mobile:
     name: Mobile
@@ -97,19 +117,19 @@ jobs:
       - name: Check Expo dependencies
         env:
           EXPO_OFFLINE: "1"
-        run: pnpm --dir apps/mobile exec expo install --check
+        run: bun run --cwd apps/mobile expo install --check
 
       - name: Run Expo Doctor
         env:
           EXPO_OFFLINE: "1"
         working-directory: apps/mobile
-        run: pnpm dlx expo-doctor@1.20.1
+        run: bunx expo-doctor@1.20.1
 
       - name: Typecheck
-        run: pnpm --dir apps/mobile typecheck
+        run: bun run --cwd apps/mobile typecheck
 
       - name: Test
-        run: pnpm --dir apps/mobile test
+        run: bun run --cwd apps/mobile test
 
   format-biome:
     name: Format (Biome)
@@ -271,7 +291,7 @@ jobs:
 
       - name: Run cap-setup
         shell: bash
-        run: pnpm -w cap-setup
+        run: bun run cap-setup
         env:
           RUST_TARGET_TRIPLE: ${{ matrix.settings.target }}
 
@@ -284,7 +304,7 @@ jobs:
         shell: bash
         run: |
           node --test scripts/linux-bundle-config.test.mjs scripts/finalize-linux-appimage.test.mjs
-          pnpm --dir apps/desktop exec vitest run scripts/prepare.test.js
+          bun run --cwd apps/desktop vitest run scripts/prepare.test.js
           cargo test --locked -p cap-utils -p cap-cli-install --lib
           cargo test --locked -p cap --bin cap record::tests
           cargo test --locked -p cap-recording --lib -- --test-threads=1
@@ -317,7 +337,7 @@ jobs:
 
       - name: Build app
         working-directory: apps/desktop
-        run: pnpm tauri build --debug --target ${{ matrix.settings.target }} --no-bundle
+        run: bun run tauri build --debug --target ${{ matrix.settings.target }} --no-bundle
         env:
           LD_LIBRARY_PATH: ${{ runner.os == 'Linux' && format('{0}/target/native-deps/lib:{0}/target/debug:{0}/target/{1}/debug', github.workspace, matrix.settings.target) || '' }}
           RUST_TARGET_TRIPLE: ${{ matrix.settings.target }}
@@ -331,10 +351,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Setup node
-        uses: actions/setup-node@v3
-        with:
-          node-version: 20
+      - uses: ./.github/actions/setup-js
 
       - name: Run verify
         shell: bash

.github/workflows/desktop-release.yml

@@ -301,7 +301,7 @@ jobs:
 
       - name: Run cap-setup
         shell: bash
-        run: pnpm -w cap-setup
+        run: bun run cap-setup
         env:
           RUST_TARGET_TRIPLE: ${{ matrix.settings.target }}
           APPLE_SIGNING_IDENTITY: ${{ runner.os == 'macOS' && secrets.APPLE_SIGNING_IDENTITY || '' }}
@@ -348,7 +348,7 @@ jobs:
 
       - name: Build app
         working-directory: apps/desktop
-        run: ${{ runner.os == 'Linux' && 'CARGO_PROFILE_RELEASE_DEBUG=0 node ../../scripts/build-linux-packages.mjs' || runner.os == 'macOS' && hashFiles('scripts/build-macos-packages.mjs') != '' && 'node ../../scripts/build-macos-packages.mjs' || 'pnpm build:tauri --target' }} ${{ matrix.settings.target }} --config src-tauri/tauri.prod.conf.json ${{ runner.os == 'Windows' && '--bundles nsis' || runner.os == 'Linux' && '--verbose' || '' }}
+        run: ${{ runner.os == 'Linux' && 'CARGO_PROFILE_RELEASE_DEBUG=0 node ../../scripts/build-linux-packages.mjs' || runner.os == 'macOS' && hashFiles('scripts/build-macos-packages.mjs') != '' && 'node ../../scripts/build-macos-packages.mjs' || 'bun run build:tauri --target' }} ${{ matrix.settings.target }} --config src-tauri/tauri.prod.conf.json ${{ runner.os == 'Windows' && '--bundles nsis' || runner.os == 'Linux' && '--verbose' || '' }}
         env:
           # https://github.com/tauri-apps/tauri-action/issues/740
           CI: false
@@ -411,7 +411,7 @@ jobs:
         if: ${{ runner.os == 'Windows' }}
         working-directory: apps/desktop
         shell: bash
-        run: pnpm tauri bundle --target ${{ matrix.settings.target }} --bundles nsis --config src-tauri/tauri.prod.conf.json
+        run: bun run tauri bundle --target ${{ matrix.settings.target }} --bundles nsis --config src-tauri/tauri.prod.conf.json
         env:
           TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
           TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
@@ -792,7 +792,7 @@ jobs:
           for exe in "$BUNDLE_DIR"/*.exe; do
             echo "Re-signing $(basename "$exe") for Tauri updater..."
             rm -f "${exe}.sig"
-            pnpm tauri signer sign -k "$TAURI_SIGNING_PRIVATE_KEY" -p "$TAURI_SIGNING_PRIVATE_KEY_PASSWORD" "$exe"
+            bun run tauri signer sign -k "$TAURI_SIGNING_PRIVATE_KEY" -p "$TAURI_SIGNING_PRIVATE_KEY_PASSWORD" "$exe"
             if [[ ! -s "${exe}.sig" ]]; then
               echo "::error::Windows production updater signature missing for $exe"
               exit 1

.github/workflows/docker-build-media-server.yml

@@ -13,17 +13,43 @@ on:
       - main
     paths:
       - "apps/media-server/**"
+      - "scripts/benchmark-instant-audio.py"
+      - "scripts/benchmark-audio-intelligibility.py"
+      - "scripts/test-audio-intelligibility.py"
       - ".github/workflows/docker-build-media-server.yml"
   pull_request:
     paths:
       - "apps/media-server/**"
+      - "scripts/benchmark-instant-audio.py"
+      - "scripts/benchmark-audio-intelligibility.py"
+      - "scripts/test-audio-intelligibility.py"
       - ".github/workflows/docker-build-media-server.yml"
 
+permissions: {}
+
 concurrency:
   group: media-server-${{ github.head_ref || github.ref_name }}-${{ inputs.tag || 'latest' }}
   cancel-in-progress: true
 
 jobs:
+  audio-metrics:
+    name: Audio intelligibility alignment
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        with:
+          persist-credentials: false
+      - name: Verify aligned audio metrics
+        env:
+          PYTHONDONTWRITEBYTECODE: "1"
+        run: |
+          python3 -m venv "$RUNNER_TEMP/audio-metrics"
+          "$RUNNER_TEMP/audio-metrics/bin/python" -m pip install --disable-pip-version-check --no-input --only-binary=:all: numpy==2.4.1 scipy==1.18.1 pystoi==0.4.1
+          "$RUNNER_TEMP/audio-metrics/bin/python" scripts/test-audio-intelligibility.py
+
   build:
     name: Build Docker Image (${{ matrix.platform }})
     runs-on: ${{ matrix.runner }}
@@ -77,6 +103,13 @@ jobs:
         env:
           MEDIA_IMAGE: ${{ github.event_name == 'pull_request' && 'cap-media-server:verification' || format('ghcr.io/{0}/cap-media-server@{1}', env.REPOSITORY_OWNER, steps.build.outputs.digest) }}
         run: |
+          docker run --rm --network none --entrypoint bun "$MEDIA_IMAGE" test \
+            src/__tests__/lib/audio-quality-policy.test.ts \
+            src/__tests__/lib/audio-quality.integration.test.ts \
+            src/__tests__/lib/audio-quality-formats.integration.test.ts \
+            src/__tests__/lib/audio-quality-benchmark.test.ts
+          docker run --rm --network none --entrypoint bun "$MEDIA_IMAGE" test \
+            src/__tests__/lib/audio-levels.integration.test.ts
           docker run --rm --network none --entrypoint bun "$MEDIA_IMAGE" test \
             src/__tests__/lib/recording-verification.integration.test.ts \
             src/__tests__/lib/job-manager.test.ts

.github/workflows/publish-chrome-extension.yml

@@ -67,21 +67,21 @@ jobs:
           done
 
       - name: Typecheck
-        run: pnpm --filter "@cap/chrome-extension..." typecheck
+        run: bun run --filter "@cap/chrome-extension..." typecheck
 
       - name: Test
-        run: pnpm --filter @cap/chrome-extension test
+        run: bun run --filter @cap/chrome-extension test
 
       - name: Install Playwright browser
         if: ${{ inputs.run_e2e }}
-        run: pnpm --filter @cap/chrome-extension test:e2e:install
+        run: bun run --filter @cap/chrome-extension test:e2e:install
 
       - name: Test E2E
         if: ${{ inputs.run_e2e }}
-        run: pnpm --filter @cap/chrome-extension test:e2e
+        run: bun run --filter @cap/chrome-extension test:e2e
 
       - name: Build
-        run: pnpm --filter @cap/chrome-extension build
+        run: bun run --filter @cap/chrome-extension build
 
       - name: Package
         id: package

.github/workflows/recording-reliability.yml

@@ -9,7 +9,7 @@ on:
       - "packages/database/**"
       - "packages/web-*/**"
       - "crates/recording/**"
-      - "pnpm-lock.yaml"
+      - "bun.lock"
       - ".github/workflows/recording-reliability.yml"
   push:
     branches: [main]
@@ -19,7 +19,7 @@ on:
       - "packages/database/**"
       - "packages/web-*/**"
       - "crates/recording/**"
-      - "pnpm-lock.yaml"
+      - "bun.lock"
       - ".github/workflows/recording-reliability.yml"
 
 permissions:
@@ -40,11 +40,20 @@ jobs:
       - name: Verify recording contracts
         working-directory: apps/web
         run: |
-          pnpm exec vitest run \
+          bun run vitest run \
+            __tests__/unit/audio-level-publication.test.ts \
+            __tests__/unit/recording-output.test.ts \
+            __tests__/unit/recording-storage-lifecycle.test.ts \
             __tests__/unit/desktop-recording-*.test.ts \
             __tests__/unit/desktop-segments-*.test.ts \
             __tests__/unit/finalize-desktop-recording.test.ts \
             __tests__/unit/media-server-progress.test.ts \
             __tests__/unit/media-processing-budget.test.ts \
             __tests__/unit/playback-source.test.ts \
-            __tests__/unit/upload-progress-playback.test.ts
+            __tests__/unit/share-page-loading.test.ts \
+            __tests__/unit/media-player-store-refs.test.ts \
+            __tests__/unit/video-edit-processing.test.ts \
+            __tests__/unit/video-edit-published-output.test.ts \
+            __tests__/unit/upload-progress-playback.test.ts \
+            __tests__/unit/recording-prepare.test.ts \
+            __tests__/unit/s3-bucket-connections.test.ts

.github/workflows/sync-tests.yml

@@ -137,6 +137,7 @@ jobs:
         shell: bash
         run: |
           cargo test --locked -p cap-timestamp -p cap-enc-ffmpeg
+          cargo test --locked -p cap-camera-effects --lib
           cargo test --locked -p cap-recording --lib -- --test-threads=1
           # --nocapture so a WARP-adapter notch skip prints instead of
           # looking identical to a pass in the CI log.