refactor(nix): colocate overlay patch stacks #2286
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| jobs: | |
| # Run flake checks on Linux (NixOS configurations) | |
| check-linux: | |
| name: Flake Check (Linux) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: "22" | |
| - name: Run changed packages/pi-packages QA | |
| shell: bash | |
| run: | | |
| set -euo pipefail | |
| if [[ "$GITHUB_EVENT_NAME" == "pull_request" ]]; then | |
| base_sha="${{ github.event.pull_request.base.sha }}" | |
| else | |
| base_sha="${{ github.event.before }}" | |
| fi | |
| if [[ "$base_sha" == "0000000000000000000000000000000000000000" ]]; then | |
| base_sha="$(git rev-list --max-parents=0 HEAD)" | |
| fi | |
| ./bin/qa-changed --base-ref "$base_sha" --head-ref "${{ github.sha }}" | |
| - uses: DeterminateSystems/nix-installer-action@main | |
| - uses: DeterminateSystems/magic-nix-cache-action@main | |
| - uses: DeterminateSystems/flake-checker-action@main | |
| - name: Run flake checks | |
| run: | | |
| # Check x86_64-linux specific outputs | |
| echo "::group::treefmt" && time nix build .#checks.x86_64-linux.treefmt --no-link && echo "::endgroup::" | |
| echo "::group::pre-commit" && time nix build .#checks.x86_64-linux.pre-commit --no-link && echo "::endgroup::" | |
| echo "::group::zunit-tests" && time nix build .#checks.x86_64-linux.zunit-tests --no-link && echo "::endgroup::" | |
| - name: Validate agent documentation contract | |
| shell: bash | |
| run: | | |
| set -euo pipefail | |
| if [[ "$GITHUB_EVENT_NAME" == "pull_request" ]]; then | |
| base_sha="${{ github.event.pull_request.base.sha }}" | |
| else | |
| base_sha="${{ github.event.before }}" | |
| fi | |
| if [[ "$base_sha" == "0000000000000000000000000000000000000000" ]]; then | |
| base_sha="$(git rev-list --max-parents=0 HEAD)" | |
| fi | |
| docs=(AGENTS.md AGENT_WORKFLOW.md docs/README.md) | |
| while IFS= read -r doc; do | |
| case "$doc" in | |
| docs/agent-quality.md) ;; | |
| docs/*.md | */AGENTS.md) docs+=("$doc") ;; | |
| esac | |
| done < <(git diff --name-only --diff-filter=ACMR "$base_sha" "${{ github.sha }}" -- '*.md') | |
| for doc in "${docs[@]}"; do | |
| summary="$(head -n 7 "$doc")" | |
| for key in purpose applies_to entrypoint verification update_when; do | |
| grep -q "^${key}:" <<<"$summary" || { echo "FAIL: $doc missing $key in first 7 lines"; exit 1; } | |
| done | |
| test "$(sed -n '7p' "$doc")" = "---" || { echo "FAIL: $doc summary must close on line 7"; exit 1; } | |
| done | |
| - name: Skip NixOS config eval | |
| run: | | |
| echo "Skipping nuc eval in CI; openclaw-workspace is private" | |
| # Run flake checks on macOS (Darwin configurations) | |
| check-darwin: | |
| name: Flake Check (Darwin) | |
| runs-on: macos-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: "22" | |
| - name: Run changed packages/pi-packages QA | |
| shell: bash | |
| run: | | |
| set -euo pipefail | |
| if [[ "$GITHUB_EVENT_NAME" == "pull_request" ]]; then | |
| base_sha="${{ github.event.pull_request.base.sha }}" | |
| else | |
| base_sha="${{ github.event.before }}" | |
| fi | |
| if [[ "$base_sha" == "0000000000000000000000000000000000000000" ]]; then | |
| base_sha="$(git rev-list --max-parents=0 HEAD)" | |
| fi | |
| ./bin/qa-changed --base-ref "$base_sha" --head-ref "${{ github.sha }}" | |
| - uses: DeterminateSystems/nix-installer-action@main | |
| - uses: DeterminateSystems/magic-nix-cache-action@main | |
| - name: Run flake checks | |
| run: | | |
| # Check aarch64-darwin specific outputs | |
| echo "::group::treefmt" && time nix build .#checks.aarch64-darwin.treefmt --no-link && echo "::endgroup::" | |
| echo "::group::pre-commit" && time nix build .#checks.aarch64-darwin.pre-commit --no-link && echo "::endgroup::" | |
| echo "::group::zunit-tests" && time nix build .#checks.aarch64-darwin.zunit-tests --no-link && echo "::endgroup::" | |
| - name: Check Darwin configurations evaluate | |
| run: | | |
| time nix eval .#darwinConfigurations.MacTraitor-Pro.system --apply 'x: "OK"' | |
| time nix eval .#darwinConfigurations.Seqeratop.system --apply 'x: "OK"' | |
| # Formatting check (runs on Linux, faster) | |
| format: | |
| name: Check Formatting | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - uses: DeterminateSystems/nix-installer-action@main | |
| - uses: DeterminateSystems/magic-nix-cache-action@main | |
| - name: Check formatting | |
| run: time nix build .#checks.x86_64-linux.treefmt --no-link |