Skip to content

Local-remote CI parity: unified venues, artifact/glibc/Defender lanes, dry-run red fixes #1280

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
DeusData merged 7 commits into from
Jul 26, 2026
Merged

Local-remote CI parity: unified venues, artifact/glibc/Defender lanes, dry-run red fixes #1280

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
3fc93d1
ci: unify smoke/soak/test venues onto canonical leg entries
DeusData Jul 26, 2026
afe38ab
fix(contract): retarget launcher-bundle contract onto canonical smoke…
DeusData Jul 26, 2026
0a40fe8
feat(ci): local-remote parity lanes — artifact-flow smoke, glibc floo…
DeusData Jul 26, 2026
a20a50d
fix(ci): executable bits on canonical entry scripts
DeusData Jul 26, 2026
040c7f4
fix(launcher): absorb the first-touch AV scan window on staged-copy s…
DeusData Jul 26, 2026
ad713bc
fix(mcp): guarantee valid UTF-8 in tree-format output
DeusData Jul 26, 2026
b5b96e7
fix(tests): leak-free teardown for the disconnect-cancel runtime test
DeusData Jul 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
98 changes: 20 additions & 78 deletions .github/workflows/_build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -79,15 +79,10 @@ jobs:
if: startsWith(matrix.os, 'macos')
run: codesign --sign - --force build/c/codebase-memory-mcp

- name: Archive standard binary
env:
GOOS: ${{ matrix.goos }}
GOARCH: ${{ matrix.goarch }}
run: |
cp LICENSE install.sh build/c/
scripts/gen-third-party-notices.sh build/c/THIRD_PARTY_NOTICES.md
tar -czf "codebase-memory-mcp-${GOOS}-${GOARCH}.tar.gz" \
-C build/c codebase-memory-mcp LICENSE install.sh THIRD_PARTY_NOTICES.md
# Archive layout/name live in the ONE canonical script the local
# artifact-flow smoke lane also runs (venue-parity contract).
- name: Archive standard binary (canonical package-release.sh)
run: scripts/package-release.sh ${{ matrix.goos }} ${{ matrix.goarch }}

- name: Attest standard binary provenance
if: ${{ inputs.attest }}
Expand Down Expand Up @@ -115,15 +110,8 @@ jobs:
if: matrix.goos == 'linux' && matrix.goarch == 'amd64'
run: scripts/security-ui.sh

- name: Archive UI binary
env:
GOOS: ${{ matrix.goos }}
GOARCH: ${{ matrix.goarch }}
run: |
cp LICENSE install.sh build/c/
scripts/gen-third-party-notices.sh build/c/THIRD_PARTY_NOTICES.md
tar -czf "codebase-memory-mcp-ui-${GOOS}-${GOARCH}.tar.gz" \
-C build/c codebase-memory-mcp LICENSE install.sh THIRD_PARTY_NOTICES.md
- name: Archive UI binary (canonical package-release.sh)
run: scripts/package-release.sh ${{ matrix.goos }} ${{ matrix.goarch }} --variant ui

- name: Attest UI binary provenance
if: ${{ inputs.attest }}
Expand Down Expand Up @@ -167,18 +155,11 @@ jobs:
scripts/build.sh CC=clang CXX=clang++
fi

- name: Archive standard binary
# Archive layout/name live in the ONE canonical script the local
# artifact-flow smoke lane also runs (venue-parity contract).
- name: Archive standard binary (canonical package-release.sh)
shell: msys2 {0}
run: |
make -f Makefile.cbm build/c/codebase-memory-mcp-launcher.exe CC=clang CXX=clang++
PAYLOAD=build/c/codebase-memory-mcp
[ -f "${PAYLOAD}.exe" ] && PAYLOAD="${PAYLOAD}.exe"
cp build/c/codebase-memory-mcp-launcher.exe codebase-memory-mcp.exe
cp "$PAYLOAD" codebase-memory-mcp.payload.exe
scripts/gen-third-party-notices.sh THIRD_PARTY_NOTICES.md
zip codebase-memory-mcp-windows-amd64.zip \
codebase-memory-mcp.exe codebase-memory-mcp.payload.exe \
LICENSE install.ps1 THIRD_PARTY_NOTICES.md
run: scripts/package-release.sh windows amd64 CC=clang CXX=clang++

- name: Attest standard binary provenance
if: ${{ inputs.attest }}
Expand All @@ -197,18 +178,9 @@ jobs:
scripts/build.sh --with-ui CC=clang CXX=clang++
fi

- name: Archive UI binary
- name: Archive UI binary (canonical package-release.sh)
shell: msys2 {0}
run: |
make -f Makefile.cbm build/c/codebase-memory-mcp-launcher.exe CC=clang CXX=clang++
PAYLOAD=build/c/codebase-memory-mcp
[ -f "${PAYLOAD}.exe" ] && PAYLOAD="${PAYLOAD}.exe"
cp build/c/codebase-memory-mcp-launcher.exe codebase-memory-mcp.exe
cp "$PAYLOAD" codebase-memory-mcp.payload.exe
scripts/gen-third-party-notices.sh THIRD_PARTY_NOTICES.md
zip codebase-memory-mcp-ui-windows-amd64.zip \
codebase-memory-mcp.exe codebase-memory-mcp.payload.exe \
LICENSE install.ps1 THIRD_PARTY_NOTICES.md
run: scripts/package-release.sh windows amd64 --variant ui CC=clang CXX=clang++

- name: Attest UI binary provenance
if: ${{ inputs.attest }}
Expand Down Expand Up @@ -256,18 +228,9 @@ jobs:
scripts/build.sh CC=clang CXX=clang++
fi

- name: Archive standard binary
- name: Archive standard binary (canonical package-release.sh)
shell: msys2 {0}
run: |
make -f Makefile.cbm build/c/codebase-memory-mcp-launcher.exe CC=clang CXX=clang++
PAYLOAD=build/c/codebase-memory-mcp
[ -f "${PAYLOAD}.exe" ] && PAYLOAD="${PAYLOAD}.exe"
cp build/c/codebase-memory-mcp-launcher.exe codebase-memory-mcp.exe
cp "$PAYLOAD" codebase-memory-mcp.payload.exe
scripts/gen-third-party-notices.sh THIRD_PARTY_NOTICES.md
zip codebase-memory-mcp-windows-arm64.zip \
codebase-memory-mcp.exe codebase-memory-mcp.payload.exe \
LICENSE install.ps1 THIRD_PARTY_NOTICES.md
run: scripts/package-release.sh windows arm64 CC=clang CXX=clang++

- name: Attest standard binary provenance
if: ${{ inputs.attest }}
Expand All @@ -286,18 +249,9 @@ jobs:
scripts/build.sh --with-ui CC=clang CXX=clang++
fi

- name: Archive UI binary
- name: Archive UI binary (canonical package-release.sh)
shell: msys2 {0}
run: |
make -f Makefile.cbm build/c/codebase-memory-mcp-launcher.exe CC=clang CXX=clang++
PAYLOAD=build/c/codebase-memory-mcp
[ -f "${PAYLOAD}.exe" ] && PAYLOAD="${PAYLOAD}.exe"
cp build/c/codebase-memory-mcp-launcher.exe codebase-memory-mcp.exe
cp "$PAYLOAD" codebase-memory-mcp.payload.exe
scripts/gen-third-party-notices.sh THIRD_PARTY_NOTICES.md
zip codebase-memory-mcp-ui-windows-arm64.zip \
codebase-memory-mcp.exe codebase-memory-mcp.payload.exe \
LICENSE install.ps1 THIRD_PARTY_NOTICES.md
run: scripts/package-release.sh windows arm64 --variant ui CC=clang CXX=clang++

- name: Attest UI binary provenance
if: ${{ inputs.attest }}
Expand Down Expand Up @@ -348,14 +302,8 @@ jobs:
file build/c/codebase-memory-mcp
ldd build/c/codebase-memory-mcp 2>&1 | grep -q "not a dynamic executable" || ldd build/c/codebase-memory-mcp 2>&1 | grep -q "statically linked"

- name: Archive standard binary
env:
ARCH: ${{ matrix.arch }}
run: |
cp LICENSE install.sh build/c/
scripts/gen-third-party-notices.sh build/c/THIRD_PARTY_NOTICES.md
tar -czf "codebase-memory-mcp-linux-${ARCH}-portable.tar.gz" \
-C build/c codebase-memory-mcp LICENSE install.sh THIRD_PARTY_NOTICES.md
- name: Archive standard binary (canonical package-release.sh)
run: scripts/package-release.sh linux ${{ matrix.arch }}-portable

- name: Attest standard binary provenance
if: ${{ inputs.attest }}
Expand All @@ -373,14 +321,8 @@ jobs:
scripts/build.sh --with-ui CC=gcc CXX=g++ STATIC=1
fi

- name: Archive UI binary
env:
ARCH: ${{ matrix.arch }}
run: |
cp LICENSE install.sh build/c/
scripts/gen-third-party-notices.sh build/c/THIRD_PARTY_NOTICES.md
tar -czf "codebase-memory-mcp-ui-linux-${ARCH}-portable.tar.gz" \
-C build/c codebase-memory-mcp LICENSE install.sh THIRD_PARTY_NOTICES.md
- name: Archive UI binary (canonical package-release.sh)
run: scripts/package-release.sh linux ${{ matrix.arch }}-portable --variant ui

- name: Attest UI binary provenance
if: ${{ inputs.attest }}
Expand Down
Loading
Loading