mirrors/composiohq--composio
1
0
Fork 0
Code Issues Pull Requests Actions 31 Deployments Models Agent Notes Packages Projects Releases Wiki Activity

chore: import upstream snapshot with attribution

Browse Source
This commit is contained in:
wehub-resource-sync
2026-07-13 12:38:34 +08:00
commit 0549b088a4
2405 changed files with 810255 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/build-cli-binaries.yml
+347
View File
@@ -0,0 +1,347 @@
name: Build CLI Binaries
on:
push:
branches: [next]
paths:
- 'ts/packages/cli/**'
- 'ts/packages/cli-local-tools/**'
- '.github/actions/setup-node-pnpm-bun/action.yml'
- '.github/scripts/cli-release/**'
- '.github/workflows/build-cli-binaries.yml'
- 'mise.toml'
- 'mise.lock'
workflow_dispatch:
inputs:
action:
description: 'What to do'
type: choice
options:
- build-beta
- promote-stable
default: build-beta
beta_tag:
description: 'Existing beta release tag to promote (only for promote-stable, e.g. @composio/cli@0.2.20-beta.42)'
required: false
# Least privilege by default: only the release job creates/edits releases and uploads assets.
# `prepare` reads releases (gh release list) and `build` uploads workflow artifacts — both work
# with read access. The release job opts up to `contents: write` for itself.
permissions:
contents: read
# Print Turborepo telemetry events to the logs instead of sending them.
env:
TURBO_TELEMETRY_DEBUG: 1
jobs:
prepare:
name: Resolve Release Metadata
runs-on: ubuntu-latest
outputs:
checkout_ref: ${{ steps.resolve.outputs.checkout_ref }}
release_name: ${{ steps.resolve.outputs.release_name }}
release_tag: ${{ steps.resolve.outputs.release_tag }}
release_version: ${{ steps.resolve.outputs.release_version }}
prerelease: ${{ steps.resolve.outputs.prerelease }}
make_latest: ${{ steps.resolve.outputs.make_latest }}
steps:
- name: Checkout
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
ref: ${{ github.sha }}
- name: Resolve release target
id: resolve
env:
EVENT_NAME: ${{ github.event_name }}
ACTION_INPUT: ${{ inputs.action }}
BETA_TAG_INPUT: ${{ inputs.beta_tag }}
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
REPOSITORY: ${{ github.repository }}
RUN_NUMBER: ${{ github.run_number }}
COMMIT_SHA: ${{ github.sha }}
run: bash .github/scripts/cli-release/resolve-release-target.sh
build:
name: Build ${{ matrix.artifact }}
needs: prepare
if: needs.prepare.result == 'success'
runs-on: ${{ matrix.runner }}
strategy:
# Never publish a partial platform set: with fail-fast disabled, the build job's
# result is `success` only when EVERY matrix leg passes, so a single failure makes
# `needs.build.result != 'success'` and the release job is skipped. It also surfaces
# all platform failures at once instead of cancelling siblings on the first error.
fail-fast: false
matrix:
include:
- target: bun-linux-x64
artifact: composio-linux-x64
runner: ubuntu-latest
local_tools_target: ''
- target: bun-linux-arm64
artifact: composio-linux-aarch64
runner: ubuntu-latest
local_tools_target: ''
- target: bun-darwin-x64
artifact: composio-darwin-x64
runner: macos-15-intel
local_tools_target: ''
- target: bun-darwin-arm64
artifact: composio-darwin-aarch64
runner: macos-15
local_tools_target: darwin-arm64
steps:
- name: Checkout
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
ref: ${{ needs.prepare.outputs.checkout_ref }}
- name: Setup Node.js, pnpm, Bun
uses: ./.github/actions/setup-node-pnpm-bun
- name: Install dependencies
run: pnpm install --frozen-lockfile
- name: Setup Swift 6.2 for local-tool sidecars
if: matrix.local_tools_target != ''
uses: swift-actions/setup-swift@364295d9c23900ce04d4e5cc708387921b4e50f9 # v3
with:
swift-version: '6.2'
- name: Verify Swift toolchain
if: matrix.local_tools_target != ''
run: swift --version
- name: Build packages
run: pnpm build:packages
- name: Build local-tool sidecar binaries
if: matrix.local_tools_target != ''
run: pnpm --filter @composio/cli-local-tools build:local-tool-binaries -- --target ${{ matrix.local_tools_target }}
- name: Verify local-tool sidecars
if: matrix.local_tools_target != ''
run: |
test -x ts/packages/cli-local-tools/local-tools-binaries/beeper-imessage/${{ matrix.local_tools_target }}/imessage-cli
test -x ts/packages/cli-local-tools/local-tools-binaries/peekaboo/${{ matrix.local_tools_target }}/peekaboo
test -x ts/packages/cli-local-tools/local-tools-binaries/composio-native-ui/${{ matrix.local_tools_target }}/composio-native-ui
- name: Cross-compile CLI binary
working-directory: ts/packages/cli
run: pnpm build:binary:cross --target ${{ matrix.target }}
- name: Verify binary
working-directory: ts/packages/cli
run: |
ls -la dist/binaries/${{ matrix.artifact }}
file dist/binaries/${{ matrix.artifact }}
- name: Test binary
if: matrix.target == 'bun-linux-x64'
working-directory: ts/packages/cli
env:
COMPOSIO_USER_API_KEY: test-dummy-api-key-for-ci
run: |
./dist/binaries/${{ matrix.artifact }} --version
./dist/binaries/${{ matrix.artifact }} --help | head -5
- name: Create archive
working-directory: ts/packages/cli
env:
RELEASE_TAG: ${{ needs.prepare.outputs.release_tag }}
run: pnpm build:binary:package
- name: Verify release metadata in archive
working-directory: ts/packages/cli
run: unzip -p dist/binaries/${{ matrix.artifact }}.zip ${{ matrix.artifact }}/release-tag.txt | grep -Fx '${{ needs.prepare.outputs.release_tag }}'
- name: Verify local-tool sidecars in archive
if: matrix.local_tools_target != ''
working-directory: ts/packages/cli
run: |
unzip -Z1 dist/binaries/${{ matrix.artifact }}.zip | grep -F "local-tools-binaries/beeper-imessage/${{ matrix.local_tools_target }}/imessage-cli"
unzip -Z1 dist/binaries/${{ matrix.artifact }}.zip | grep -F "local-tools-binaries/peekaboo/${{ matrix.local_tools_target }}/peekaboo"
unzip -Z1 dist/binaries/${{ matrix.artifact }}.zip | grep -F "local-tools-binaries/composio-native-ui/${{ matrix.local_tools_target }}/composio-native-ui"
- name: Upload artifact
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: ${{ matrix.artifact }}
path: ts/packages/cli/dist/binaries/${{ matrix.artifact }}.zip
retention-days: 7
release:
name: Release (draft → verify → publish)
needs: [prepare, build]
runs-on: ubuntu-latest
permissions:
contents: write # create/edit the GitHub Release and upload assets
# fail-fast: false on the build matrix ⇒ this is `success` only if ALL platforms built,
# so a partial set can never reach the release path.
if: needs.build.result == 'success'
# Serialize runs that target the SAME release tag (e.g. two quick pushes, or a re-run
# racing the original) so they cannot interleave uploads. Keyed on the resolved tag so
# unrelated beta builds are not serialized behind each other. Job-level concurrency may
# read `needs.*` outputs (workflow-level cannot). The serialized loser fails loudly at the
# "already published" guard in create-or-resume-draft.sh — that red ❌ is by design.
concurrency:
group: cli-release-${{ needs.prepare.outputs.release_tag }}
cancel-in-progress: false
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
RELEASE_TAG: ${{ needs.prepare.outputs.release_tag }}
RELEASE_NAME: ${{ needs.prepare.outputs.release_name }}
PRERELEASE: ${{ needs.prepare.outputs.prerelease }}
MAKE_LATEST: ${{ needs.prepare.outputs.make_latest }}
CHECKOUT_REF: ${{ needs.prepare.outputs.checkout_ref }}
RELEASE_HELPERS_DIR: ${{ github.workspace }}/.release-workflow/.github/scripts/cli-release
steps:
- name: Checkout
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
ref: ${{ needs.prepare.outputs.checkout_ref }}
- name: Setup Node.js, pnpm, Bun
uses: ./.github/actions/setup-node-pnpm-bun
- name: Install dependencies
run: pnpm install --frozen-lockfile
- name: Download all artifacts
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
path: ts/packages/cli/dist/binaries
merge-multiple: true
# Package skills BEFORE generating checksums so composio-skill.zip is included in
# checksums.txt alongside the platform binaries (generate-checksums hashes every .zip
# in dist/binaries).
- name: Package skill files
working-directory: ts/packages/cli
env:
PRERELEASE: ${{ needs.prepare.outputs.prerelease }}
run: |
pnpm run validate:skills
if [[ "$PRERELEASE" == "true" ]]; then
channel=beta
else
channel=stable
fi
pnpm run build:skills -- --channel "$channel" --output-dir ./dist/skills
cd dist/skills && zip -r ../binaries/composio-skill.zip composio-cli/
- name: Generate checksums
working-directory: ts/packages/cli
run: bun run ./scripts/generate-checksums.ts
- name: Display checksums
run: cat ts/packages/cli/dist/binaries/checksums.txt
- name: Checkout workflow release helpers
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
ref: ${{ github.workflow_sha }}
path: .release-workflow
sparse-checkout: |
.github/scripts/cli-release
sparse-checkout-cone-mode: false
# Build the release as a DRAFT first. Drafts fire no `release: published` event and are
# excluded from the `/releases/latest` redirect, so no anonymous consumer (install.sh,
# Homebrew, the redirect) can ever observe a release before its assets are attached and
# verified. The release is only flipped to published as the final step below.
- name: Create draft release with all assets
run: bash "$RELEASE_HELPERS_DIR/create-or-resume-draft.sh"
# Loud failure gate: assert the full canonical asset set is attached AND fully uploaded.
# An asset can appear in the list while still processing (`state != "uploaded"`), which is
# exactly how a release ends up serving 404s, so we require state == "uploaded".
- name: Verify all release assets are present and uploaded
run: bash "$RELEASE_HELPERS_DIR/verify-assets.sh"
# Publishing is the ONLY step that exposes the release. Do not edit the body here: a known
# GitHub PATCH race drops body changes made in the same call as the draft flip, and the
# notes were already generated at draft creation. Prerelease status was set on the draft.
- name: Publish release (flip draft → published)
run: gh release edit "$RELEASE_TAG" --draft=false --latest="$MAKE_LATEST"
test-installation:
name: Test Installation
needs: [prepare, release]
if: always() && !cancelled() && needs.release.result == 'success'
uses: ./.github/workflows/cli.test-installation.yml
with:
version: ${{ needs.prepare.outputs.release_tag }}
create-install-instructions:
name: Create Install Instructions
needs: [prepare, release]
runs-on: ubuntu-latest
if: always() && !cancelled() && needs.release.result == 'success'
steps:
- name: Checkout
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Create installation README
run: |
RELEASE_TAG="${{ needs.prepare.outputs.release_tag }}"
cat > INSTALL.md << 'EOF'
# Composio CLI Installation
## Quick Install (Recommended)
### Linux and macOS
```bash
curl -fsSL https://raw.githubusercontent.com/ComposioHQ/composio/next/install.sh | bash
```
### Install specific version
```bash
curl -fsSL https://raw.githubusercontent.com/ComposioHQ/composio/next/install.sh | bash -s -- RELEASE_TAG_PLACEHOLDER
```
## Manual Installation
1. Download the appropriate binary for your platform from the [releases page](https://github.com/ComposioHQ/composio/releases)
2. Extract the binary
3. Move it to a directory in your PATH (e.g., `/usr/local/bin`)
4. Make it executable: `chmod +x composio`
## Alternative: npm/pnpm Installation
```bash
npm install -g @composio/cli
# or
pnpm add -g @composio/cli
```
## Usage
```bash
composio --help
composio login
composio generate
```
## Supported Platforms
- Linux x64
- Linux ARM64
- macOS x64 (Intel)
- macOS ARM64 (Apple Silicon)
Windows support coming soon!
EOF
sed -i.bak "s|RELEASE_TAG_PLACEHOLDER|$RELEASE_TAG|g" INSTALL.md && rm -f INSTALL.md.bak
- name: Upload install instructions
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: install-instructions
path: INSTALL.md