mirror of
https://github.com/Kilo-Org/kilocode.git
synced 2026-08-28 19:11:03 +08:00
kiloconnect[bot]
3ea1e8f400
When the publish workflow is dispatched with pre_release=true, the CLI and SDK packages are now published to npm under the "rc" dist-tag with a semver prerelease version (e.g. 7.1.24-rc.202604081425) instead of going to the "latest" tag as a stable release. This ensures that pre-release VS Code extension builds ship with a matching pre-release CLI on npm, so users on the stable channel are never affected by pre-release publishes.
413 lines
14 KiB
YAML
413 lines
14 KiB
YAML
name: publish
|
|
run-name: "${{ format('{0} {1}', inputs.pre_release && 'pre-release' || 'release', inputs.bump) }}"
|
|
|
|
on:
|
|
# push:
|
|
# branches:
|
|
# - ci
|
|
# - dev
|
|
# - beta
|
|
# - snapshot-*
|
|
workflow_dispatch:
|
|
inputs:
|
|
bump:
|
|
description: "Bump major, minor, or patch"
|
|
required: false
|
|
type: choice
|
|
options:
|
|
- patch
|
|
- minor
|
|
- major
|
|
version:
|
|
description: "Override version (optional)"
|
|
required: false
|
|
type: string
|
|
pre_release:
|
|
description: "Publish as pre-release (VS Code marketplace + npm rc channel)"
|
|
required: false
|
|
type: boolean
|
|
default: false
|
|
|
|
concurrency: ${{ github.workflow }}-${{ github.ref }}-${{ inputs.version || inputs.bump }}
|
|
|
|
permissions:
|
|
id-token: write
|
|
contents: write
|
|
packages: write
|
|
|
|
jobs:
|
|
version:
|
|
runs-on: blacksmith-4vcpu-ubuntu-2404
|
|
if: github.repository == 'Kilo-Org/kilocode'
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- uses: ./.github/actions/setup-bun
|
|
|
|
- name: Install Kilo
|
|
if: inputs.bump || inputs.version
|
|
run: bun i -g @kilocode/cli
|
|
|
|
- id: version
|
|
run: |
|
|
./script/version.ts
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
GH_REPO: ${{ github.repository }}
|
|
KILO_BUMP: ${{ inputs.bump }}
|
|
KILO_VERSION: ${{ inputs.version }}
|
|
KILO_PRE_RELEASE: ${{ inputs.pre_release }}
|
|
KILO_API_KEY: ${{ secrets.KILO_API_KEY }}
|
|
KILO_ORG_ID: ${{ secrets.KILO_ORG_ID }}
|
|
outputs:
|
|
version: ${{ steps.version.outputs.version }}
|
|
release: ${{ steps.version.outputs.release }}
|
|
tag: ${{ steps.version.outputs.tag }}
|
|
|
|
build-cli:
|
|
needs: version
|
|
runs-on: blacksmith-4vcpu-ubuntu-2404
|
|
if: github.repository == 'Kilo-Org/kilocode'
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
with:
|
|
fetch-tags: true
|
|
|
|
- uses: ./.github/actions/setup-bun
|
|
|
|
- name: Build
|
|
id: build
|
|
run: |
|
|
./packages/opencode/script/build.ts
|
|
env:
|
|
KILO_VERSION: ${{ needs.version.outputs.version }}
|
|
KILO_RELEASE: ${{ needs.version.outputs.release }}
|
|
KILO_PRE_RELEASE: ${{ inputs.pre_release }}
|
|
GH_TOKEN: ${{ github.token }}
|
|
GH_REPO: ${{ github.repository }}
|
|
|
|
- uses: actions/upload-artifact@v4
|
|
with:
|
|
name: kilo-cli
|
|
path: packages/opencode/dist
|
|
|
|
outputs:
|
|
version: ${{ needs.version.outputs.version }}
|
|
|
|
build-vscode:
|
|
needs: build-cli
|
|
runs-on: blacksmith-4vcpu-ubuntu-2404
|
|
if: github.repository == 'Kilo-Org/kilocode'
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
|
|
- uses: ./.github/actions/setup-bun
|
|
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: "24"
|
|
registry-url: "https://registry.npmjs.org"
|
|
|
|
- name: Install @vscode/vsce
|
|
run: bun install -g @vscode/vsce
|
|
|
|
- uses: actions/download-artifact@v4
|
|
with:
|
|
name: kilo-cli
|
|
path: packages/opencode/dist
|
|
|
|
- name: Build VSIX packages
|
|
run: bun script/build.ts
|
|
working-directory: ./packages/kilo-vscode
|
|
env:
|
|
CLI_DIST_DIR: ../../packages/opencode/dist
|
|
KILO_VERSION: ${{ needs.build-cli.outputs.version }}
|
|
KILO_PRE_RELEASE: ${{ inputs.pre_release }}
|
|
GH_REPO: ${{ github.repository }}
|
|
|
|
- uses: actions/upload-artifact@v4
|
|
with:
|
|
name: kilo-vscode
|
|
path: packages/kilo-vscode/out
|
|
|
|
# build-tauri:
|
|
# needs:
|
|
# - build-cli
|
|
# - version
|
|
# continue-on-error: false
|
|
# strategy:
|
|
# fail-fast: false
|
|
# matrix:
|
|
# settings:
|
|
# - host: macos-latest
|
|
# target: x86_64-apple-darwin
|
|
# - host: macos-latest
|
|
# target: aarch64-apple-darwin
|
|
# - host: blacksmith-4vcpu-windows-2025
|
|
# target: x86_64-pc-windows-msvc
|
|
# - host: blacksmith-4vcpu-ubuntu-2404
|
|
# target: x86_64-unknown-linux-gnu
|
|
# - host: blacksmith-8vcpu-ubuntu-2404-arm
|
|
# target: aarch64-unknown-linux-gnu
|
|
# runs-on: ${{ matrix.settings.host }}
|
|
# steps:
|
|
# - uses: actions/checkout@v3
|
|
# with:
|
|
# fetch-tags: true
|
|
|
|
# - uses: apple-actions/import-codesign-certs@v2
|
|
# if: ${{ runner.os == 'macOS' }}
|
|
# with:
|
|
# keychain: build
|
|
# p12-file-base64: ${{ secrets.APPLE_CERTIFICATE }}
|
|
# p12-password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
|
|
|
|
# - name: Verify Certificate
|
|
# if: ${{ runner.os == 'macOS' }}
|
|
# run: |
|
|
# CERT_INFO=$(security find-identity -v -p codesigning build.keychain | grep "Developer ID Application")
|
|
# CERT_ID=$(echo "$CERT_INFO" | awk -F'"' '{print $2}')
|
|
# echo "CERT_ID=$CERT_ID" >> $GITHUB_ENV
|
|
# echo "Certificate imported."
|
|
|
|
# - name: Setup Apple API Key
|
|
# if: ${{ runner.os == 'macOS' }}
|
|
# run: |
|
|
# echo "${{ secrets.APPLE_API_KEY_PATH }}" > $RUNNER_TEMP/apple-api-key.p8
|
|
|
|
# - uses: ./.github/actions/setup-bun
|
|
|
|
# - name: Cache apt packages
|
|
# if: contains(matrix.settings.host, 'ubuntu')
|
|
# uses: actions/cache@v4
|
|
# with:
|
|
# path: /var/cache/apt/archives
|
|
# key: ${{ runner.os }}-${{ matrix.settings.target }}-apt-${{ hashFiles('.github/workflows/publish.yml') }}
|
|
# restore-keys: |
|
|
# ${{ runner.os }}-${{ matrix.settings.target }}-apt-
|
|
|
|
# - name: install dependencies (ubuntu only)
|
|
# if: contains(matrix.settings.host, 'ubuntu')
|
|
# run: |
|
|
# sudo apt-get update
|
|
# sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
|
|
|
|
# - name: install Rust stable
|
|
# uses: dtolnay/rust-toolchain@stable
|
|
# with:
|
|
# targets: ${{ matrix.settings.target }}
|
|
|
|
# - uses: Swatinem/rust-cache@v2
|
|
# with:
|
|
# workspaces: packages/desktop/src-tauri
|
|
# shared-key: ${{ matrix.settings.target }}
|
|
|
|
# - name: Prepare
|
|
# run: |
|
|
# cd packages/desktop
|
|
# bun ./scripts/prepare.ts
|
|
# env:
|
|
# KILO_VERSION: ${{ needs.version.outputs.version }}
|
|
# GITHUB_TOKEN: ${{ steps.committer.outputs.token }}
|
|
# RUST_TARGET: ${{ matrix.settings.target }}
|
|
# GH_TOKEN: ${{ github.token }}
|
|
# GITHUB_RUN_ID: ${{ github.run_id }}
|
|
|
|
# # Fixes AppImage build issues, can be removed when https://github.com/tauri-apps/tauri/pull/12491 is released
|
|
# - name: Install tauri-cli from portable appimage branch
|
|
# if: contains(matrix.settings.host, 'ubuntu')
|
|
# run: |
|
|
# cargo install tauri-cli --git https://github.com/tauri-apps/tauri --branch feat/truly-portable-appimage --force
|
|
# echo "Installed tauri-cli version:"
|
|
# cargo tauri --version
|
|
|
|
# - name: Build and upload artifacts
|
|
# uses: tauri-apps/tauri-action@390cbe447412ced1303d35abe75287949e43437a
|
|
# timeout-minutes: 60
|
|
# with:
|
|
# projectPath: packages/desktop
|
|
# uploadWorkflowArtifacts: true
|
|
# tauriScript: ${{ (contains(matrix.settings.host, 'ubuntu') && 'cargo tauri') || '' }}
|
|
# args: --target ${{ matrix.settings.target }} --config ./src-tauri/tauri.prod.conf.json --verbose
|
|
# updaterJsonPreferNsis: true
|
|
# releaseId: ${{ needs.version.outputs.release }}
|
|
# tagName: ${{ needs.version.outputs.tag }}
|
|
# releaseDraft: true
|
|
# releaseAssetNamePattern: opencode-desktop-[platform]-[arch][ext]
|
|
# env:
|
|
# GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
# TAURI_BUNDLER_NEW_APPIMAGE_FORMAT: true
|
|
# TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
|
|
# TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
|
|
# APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
|
|
# APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
|
|
# APPLE_SIGNING_IDENTITY: ${{ env.CERT_ID }}
|
|
# APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
|
|
# APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
|
|
# APPLE_API_KEY_PATH: ${{ runner.temp }}/apple-api-key.p8
|
|
|
|
# kilocode_change start
|
|
# Smoke test disabled as a release gate due to infrastructure issues.
|
|
# The job is skipped via `if: false` so it no longer blocks publishing.
|
|
# Re-enable by restoring the original `if:` condition and uncommenting
|
|
# `- smoke-test` in the publish job's `needs` list below.
|
|
smoke-test:
|
|
name: Smoke Test (pre-publish gate) [DISABLED]
|
|
needs:
|
|
- version
|
|
- build-cli
|
|
if: false # was: github.repository == 'Kilo-Org/kilocode'
|
|
runs-on: ubuntu-24.04
|
|
steps:
|
|
- name: Trigger kilo-bench smoke test
|
|
id: trigger
|
|
env:
|
|
GH_TOKEN: ${{ secrets.BENCH_GITHUB_TOKEN }}
|
|
run: |
|
|
BEFORE=$(date -u -d '60 seconds ago' +%Y-%m-%dT%H:%M:%SZ)
|
|
|
|
gh api repos/Kilo-Org/kilo-bench/dispatches \
|
|
--method POST \
|
|
-f event_type=smoke-test \
|
|
-f 'client_payload[release_tag]=${{ needs.version.outputs.tag }}' \
|
|
-f 'client_payload[source_run_id]=${{ github.run_id }}'
|
|
|
|
# Poll for the run created after our dispatch timestamp.
|
|
# The dispatch API returns no run ID, so we query by created time
|
|
# and pick the oldest match to avoid grabbing an unrelated run.
|
|
echo "Waiting for smoke-test run to appear (dispatched after $BEFORE)..."
|
|
for attempt in $(seq 1 30); do
|
|
RUN_ID=$(gh api \
|
|
"repos/Kilo-Org/kilo-bench/actions/workflows/smoke-test.yml/runs?event=repository_dispatch&created=>=$BEFORE" \
|
|
--jq '.workflow_runs | sort_by(.created_at) | .[0].id // empty')
|
|
|
|
if [[ -n "$RUN_ID" && "$RUN_ID" != "null" ]]; then
|
|
echo "run_id=$RUN_ID" >> "$GITHUB_OUTPUT"
|
|
echo "::notice::Smoke test run: https://github.com/Kilo-Org/kilo-bench/actions/runs/$RUN_ID"
|
|
exit 0
|
|
fi
|
|
|
|
echo " attempt $attempt: run not yet registered, retrying in 10s..."
|
|
sleep 10
|
|
done
|
|
|
|
echo "::error::Smoke test run did not appear within 5 minutes after dispatch."
|
|
exit 1
|
|
|
|
- name: Wait for smoke test to complete
|
|
env:
|
|
GH_TOKEN: ${{ secrets.BENCH_GITHUB_TOKEN }}
|
|
run: |
|
|
RUN_ID="${{ steps.trigger.outputs.run_id }}"
|
|
echo "Waiting for run $RUN_ID..."
|
|
|
|
for i in $(seq 1 60); do
|
|
CONCLUSION=$(gh run view "$RUN_ID" \
|
|
--repo Kilo-Org/kilo-bench \
|
|
--json conclusion \
|
|
--jq '.conclusion')
|
|
|
|
echo " attempt $i: $CONCLUSION"
|
|
|
|
if [[ "$CONCLUSION" == "success" ]]; then
|
|
echo "::notice::Smoke test passed."
|
|
exit 0
|
|
elif [[ "$CONCLUSION" != "null" && "$CONCLUSION" != "" ]]; then
|
|
echo "::error::Smoke test failed with conclusion: $CONCLUSION"
|
|
echo "See: https://github.com/Kilo-Org/kilo-bench/actions/runs/$RUN_ID"
|
|
exit 1
|
|
fi
|
|
|
|
sleep 30
|
|
done
|
|
|
|
echo "::error::Smoke test did not complete within 30 minutes."
|
|
exit 1
|
|
# kilocode_change end
|
|
publish:
|
|
needs:
|
|
- version
|
|
- build-cli
|
|
- build-vscode
|
|
# - smoke-test # disabled: infrastructure issues (see smoke-test job comment)
|
|
# - build-tauri
|
|
runs-on: ubuntu-24.04
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
|
|
- uses: ./.github/actions/setup-bun
|
|
|
|
- name: Login to GitHub Container Registry
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.repository_owner }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Set up QEMU
|
|
uses: docker/setup-qemu-action@v3
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version: "24"
|
|
registry-url: "https://registry.npmjs.org"
|
|
|
|
- name: Install @vscode/vsce
|
|
run: bun install -g @vscode/vsce
|
|
|
|
- name: Setup Git Committer
|
|
id: committer
|
|
uses: ./.github/actions/setup-git-committer
|
|
with:
|
|
# kilocode_change start
|
|
kilo-maintainer-app-id: ${{ secrets.KILO_MAINTAINER_APP_ID }}
|
|
kilo-maintainer-app-secret: ${{ secrets.KILO_MAINTAINER_APP_SECRET }}
|
|
# kilocode_change end
|
|
|
|
- uses: actions/download-artifact@v4
|
|
with:
|
|
name: kilo-cli
|
|
path: packages/opencode/dist
|
|
|
|
- uses: actions/download-artifact@v4
|
|
with:
|
|
name: kilo-vscode
|
|
path: packages/kilo-vscode/out
|
|
|
|
- name: Cache apt packages (AUR)
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: /var/cache/apt/archives
|
|
key: ${{ runner.os }}-apt-aur-${{ hashFiles('.github/workflows/publish.yml') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-apt-aur-
|
|
|
|
- name: Setup SSH for AUR
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y pacman-package-manager
|
|
mkdir -p ~/.ssh
|
|
echo "${{ secrets.AUR_KEY }}" > ~/.ssh/id_rsa
|
|
chmod 600 ~/.ssh/id_rsa
|
|
git config --global user.email "kilo-maintainer[bot]@users.noreply.github.com"
|
|
git config --global user.name "kilo-maintainer[bot]"
|
|
ssh-keyscan -H aur.archlinux.org >> ~/.ssh/known_hosts || true
|
|
|
|
- run: ./script/publish.ts
|
|
env:
|
|
KILO_VERSION: ${{ needs.version.outputs.version }}
|
|
KILO_RELEASE: ${{ needs.version.outputs.release }}
|
|
KILO_PRE_RELEASE: ${{ inputs.pre_release }}
|
|
GH_REPO: ${{ github.repository }}
|
|
AUR_KEY: ${{ secrets.AUR_KEY }}
|
|
GITHUB_TOKEN: ${{ steps.committer.outputs.token }}
|
|
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
NPM_CONFIG_PROVENANCE: true
|
|
VSCE_PAT: ${{ secrets.VSCE_TOKEN }}
|
|
OPENVSX_TOKEN: ${{ secrets.OVSX_TOKEN }}
|