Skip to content

feat(kernel): cli-in-place, a local coding CLI on the worktree it is … #2292

feat(kernel): cli-in-place, a local coding CLI on the worktree it is …

feat(kernel): cli-in-place, a local coding CLI on the worktree it is … #2292

Workflow file for this run

name: CI
on:
push:
branches: [main]
pull_request:
branches: [main]
permissions:
contents: read
jobs:
ci:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
# check:version-bump diffs this branch's package manifests against the
# merge base, so the base commit has to be in the clone.
fetch-depth: 0
- uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: 22
cache: pnpm
- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
with:
python-version: '3.12'
- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
with:
version: '0.11.32'
- name: Install deps
run: pnpm install --frozen-lockfile
- name: Check publish credential isolation
run: pnpm run check:publish-workflow
# GITHUB_BASE_REF is the base BRANCH. The webhook's frozen
# pull_request.base.sha is deliberately not used: the checked-out merge ref
# is recomputed against the current base tip, so the frozen sha can name a
# commit that is no longer the merge parent, and a release merged in the
# meantime would pay for this pull request's unpaid change.
- name: Check consumer-visible changes carry a version bump
run: pnpm run check:version-bump
- name: Lint (biome)
run: pnpm run lint
- name: Test
run: pnpm run test
- name: Build
run: pnpm run build
- name: Typecheck (src + examples; examples resolve against built dist)
run: pnpm run typecheck
- name: Verify packed package exports
run: pnpm run verify:package
- name: Verify PrimeIntellect package integration
run: pnpm run verify:primeintellect
- name: Docs (regenerate API reference + freshness gate)
run: pnpm run docs:check
packed-cohort:
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: tangle-network/agent-sdk
ref: 57a073cf53bbdd44ddc97855a60aa78afb522f5c # @tangle-network/agent-interface@1.6.0
path: .cohort/agent-sdk
persist-credentials: false
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: tangle-network/agent-eval
ref: 2e001002539f53bf62d7ce4ad0c1c78031be9fa1 # @tangle-network/agent-eval@0.163.2
path: .cohort/agent-eval
persist-credentials: false
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: tangle-network/agent-knowledge
ref: 0775b82336ce33dcdd0bde8ace2aa4c16af18e83 # @tangle-network/agent-knowledge@10.7.0
path: .cohort/agent-knowledge
persist-credentials: false
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: 22
- name: Verify exact Interface, Eval, Knowledge, and Runtime archives together
run: >-
node scripts/verify-packed-cohort.mjs
--agent-interface-repo .cohort/agent-sdk
--agent-eval-repo .cohort/agent-eval
--agent-knowledge-repo .cohort/agent-knowledge
agent-bench:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: 22
cache: pnpm
cache-dependency-path: pnpm-lock.yaml
- name: Install package set
run: pnpm install --frozen-lockfile
- name: Build current agent-runtime
run: pnpm run build
- name: Verify agent-bench against current agent-runtime
env:
AGENT_BENCH_PACKAGE_TEST_TIMEOUT_MS: 900000
run: pnpm run verify:bench
official-optimizers:
runs-on: ubuntu-latest
timeout-minutes: 60
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: 22
cache: pnpm
- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
with:
python-version: '3.12'
- name: Install package set
run: pnpm install --frozen-lockfile
- name: Verify packed Runtime with official GEPA and SkillOpt
run: pnpm run verify:official-optimizers