codex-app-transfer/.github/workflows/ci.yml at 07a5c191fc513f0ca9b130e9609f82e58a9987fc · Cmochance/codex-app-transfer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
name: ci

# 回归门禁分两层:
# 1. rust-fast-check (always run, 无 apt) — fmt + workspace check/test (exclude
#    src-tauri) + xtask gen-fixtures 反向 diff. 1-2 min, 覆盖 docs/xtask/普通
#    crate 的 PR.
# 2. rust-tauri-check (conditional run, 需 apt 装 webkit2gtk 等) — 仅 Tauri
#    相关路径变动 (src-tauri/, frontend/, crates/, Cargo.{toml,lock}, 本
#    workflow) 才跑 cargo check/test -p codex-app-transfer. 不跑就 skip 报
#    success (job-level if 跳过 = 不卡 required check, 而 workflow-level
#    paths filter 跳过会让 required check 永久 pending).
#
# 历史 job 演进:
# - Leptos UI WASM build 已废弃 (v2.0.0 改 frontend/ + cas://)
# - python-replay-tests 已废弃 (Phase 3 删 Python)
# - 早期单一 rust-workspace-check 每 PR 都 apt (~7 min) → 拆成上述 2 层
# 详见 docs/refactor/migration.md / docs/refactor/cleanup.md / 本仓 PR codex review

on:
  push:
    branches: [main]
  # `ready_for_review` 让 draft → ready 转换触发 CI。`synchronize` 在 draft
  # 期间仍 fire,但下面 job-level `if` 把 draft job 跳过(skip = pass,不卡
  # required check),开发期 draft PR 全程 0 实跑 = 省 push-time CI 资源。
  # branches 不限制, 让 stacked PR (base=feature/* 而非 main) 也跑 CI.
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review]
  workflow_dispatch:

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

jobs:
  # 路径变动检测 (always runs, 极快 ~10s, 不装任何系统包).
  # tauri 输出供 rust-tauri-check job-level if 用.
  changes:
    name: Detect changed paths
    # draft PR 期间所有 job 跳过(branch protection 把 skip 视作 pass)。
    # push 到 main / workflow_dispatch / non-draft PR 正常跑。
    if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
    runs-on: ubuntu-latest
    outputs:
      tauri: ${{ steps.filter.outputs.tauri }}
    steps:
      - uses: actions/checkout@v5
      - uses: dorny/paths-filter@v4
        id: filter
        with:
          filters: |
            tauri:
              - 'src-tauri/**'
              - 'frontend/**'
              - 'crates/**'
              - 'Cargo.toml'
              - 'Cargo.lock'
              - '.github/workflows/**'

  # 快速门禁: always runs, 无 apt. 覆盖 fmt + 非 Tauri crate 的 check/test +
  # xtask gen-fixtures 反向 diff. 排除 codex-app-transfer (src-tauri 包名),
  # 因 src-tauri 编译需要 webkit2gtk 等系统依赖, 留给 rust-tauri-check.
  rust-fast-check:
    name: Rust · fast workspace check (no Tauri sysdeps)
    if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5

      - uses: dtolnay/rust-toolchain@stable

      - uses: Swatinem/rust-cache@v2
        with:
          workspaces: '. -> target'
          key: fast

      - name: cargo fmt --check (workspace)
        run: cargo fmt --all -- --check

      - name: cargo check --workspace (exclude codex-app-transfer)
        run: cargo check --workspace --all-targets --exclude codex-app-transfer

      - name: cargo test --workspace (exclude codex-app-transfer)
        run: cargo test --workspace --no-fail-fast --exclude codex-app-transfer

      - name: Verify fixtures regenerable from Rust (xtask gen-fixtures)
        run: |
          cargo run -p xtask --release -- gen-fixtures
          git diff --exit-code -- tests/replay/fixtures/registry/

  # Tauri 相关检查: 仅 Tauri 路径有变动时才跑. 否则 skip = success, 不卡
  # required check. apt 仍保留 retry + 8min timeout 兜底.
  rust-tauri-check:
    name: Rust · Tauri (src-tauri) check
    needs: changes
    # 双重条件:non-draft (省 push-time CI) + 路径变动检测命中。
    # `needs: changes` 在 draft 时 changes 已 skip → 此 job 跟着 skip → pass。
    if: |
      (github.event_name != 'pull_request' || github.event.pull_request.draft == false)
      && needs.changes.outputs.tauri == 'true'
    runs-on: ubuntu-22.04
    steps:
      - uses: actions/checkout@v5

      - name: Install Tauri Linux system deps (with retry)
        timeout-minutes: 20
        run: |
          set -e
          for attempt in 1 2 3; do
            echo "::group::apt attempt $attempt"
            if sudo apt-get update && sudo apt-get install -y --no-install-recommends \
                libwebkit2gtk-4.1-dev \
                libssl-dev \
                libayatana-appindicator3-dev \
                librsvg2-dev \
                patchelf \
                build-essential \
                curl \
                wget \
                file; then
              echo "::endgroup::"
              exit 0
            fi
            echo "::endgroup::"
            echo "::warning::apt attempt $attempt failed, sleeping 30s before retry"
            sleep 30
          done
          echo "::error::apt failed after 3 attempts"
          exit 1

      - uses: dtolnay/rust-toolchain@stable

      - uses: Swatinem/rust-cache@v2
        with:
          workspaces: '. -> target'
          key: tauri

      - name: cargo check -p codex-app-transfer
        run: cargo check -p codex-app-transfer --all-targets

      - name: cargo test -p codex-app-transfer
        run: cargo test -p codex-app-transfer --no-fail-fast