elizaos--eliza/.github/workflows/test-packaging.yml

name: Test Packaging

on:
  pull_request:
    branches: [main]
    paths:
      - 'packages/app-core/packaging/**'
      - 'packages/core/**'
      - 'plugins/*/typescript/**'
      - 'packages/app-core/scripts/pack-upstreams.mjs'
      - 'packages/elizaos/**'
      - '.github/workflows/publish-packages.yml'
      - '.github/workflows/test-packaging.yml'
  push:
    branches: [main]
    paths:
      - 'packages/app-core/packaging/**'
      - 'packages/core/**'
      - 'plugins/*/typescript/**'
      - 'packages/elizaos/**'
  workflow_dispatch:

concurrency:
  group: test-packaging-${{ github.ref }}
  cancel-in-progress: true

# Default to least privilege. Override per-job where needed.
permissions:
  contents: read

jobs:
  validate:
    name: Validate Packaging Configs
    runs-on: ${{ fromJSON(vars.HETZNER_FLEET_ONLINE == 'false' && '["ubuntu-24.04"]' || '["self-hosted","hetzner-robot"]') }}
    steps:
      - name: Checkout
        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
        with:
          # Packaging validation checks source packaging metadata only; native
          # inference submodules are validated by dedicated native workflows.
          submodules: false

      - name: Setup Python
        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1
        with:
          python-version: "3.14"

      - name: Setup Node.js
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
        with:
          node-version: "24"
          check-latest: false

      - name: Install validation dependencies
        run: pip install pyyaml build twine

      - name: Run packaging validation suite
        run: bash packages/app-core/packaging/test-packaging.sh

  build-pypi:
    name: Build & Test PyPI Package
    runs-on: ${{ fromJSON(vars.HETZNER_FLEET_ONLINE == 'false' && '["ubuntu-24.04"]' || '["self-hosted","hetzner-robot"]') }}
    steps:
      - name: Checkout
        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
        with:
          # PyPI packaging does not need native inference submodules.
          submodules: false

      - name: Check for PyPI package directory
        id: pypi_check
        run: |
          if [[ -d packages/app-core/packaging/pypi ]]; then
            echo "present=true" >> "$GITHUB_OUTPUT"
          else
            echo "present=false" >> "$GITHUB_OUTPUT"
            echo "::notice::packages/app-core/packaging/pypi not present in this branch — skipping PyPI build"
          fi

      - name: Setup Python
        if: steps.pypi_check.outputs.present == 'true'
        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1
        with:
          python-version: "3.14"

      - name: Setup Node.js
        if: steps.pypi_check.outputs.present == 'true'
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
        with:
          node-version: "24"
          check-latest: false

      - name: Build
        if: steps.pypi_check.outputs.present == 'true'
        working-directory: packages/app-core/packaging/pypi
        run: |
          pip install build
          python -m build

      - name: Check dist
        if: steps.pypi_check.outputs.present == 'true'
        working-directory: packages/app-core/packaging/pypi
        run: |
          pip install twine
          twine check dist/*

      - name: Install and test
        if: steps.pypi_check.outputs.present == 'true'
        working-directory: packages/app-core/packaging/pypi
        run: |
          pip install dist/*.whl

          # Module import test
          python -c "
          import elizaos_app
          print(f'elizaos_app {elizaos_app.__version__}')
          assert elizaos_app.__version__
          assert hasattr(elizaos_app, 'run')
          assert hasattr(elizaos_app, 'ensure_runtime')
          assert hasattr(elizaos_app, 'get_version')
          "

          # Loader unit tests
          python -c "
          from elizaos_app.loader import (
              _parse_version,
              _find_node,
              _get_node_version,
              _check_node,
              ElizaOSAppError,
              NodeNotFoundError,
              RuntimeInstallError,
          )

          # Version parsing
          assert _parse_version('v22.12.0') == (22, 12, 0)
          assert _parse_version('v18.0.0') == (18, 0, 0)
          assert _parse_version('v1.2.3-nightly') == (1, 2, 3)
          assert _parse_version('not-a-version') is None
          assert _parse_version('') is None

          # Node detection (Node.js is installed in this runner)
          node = _find_node()
          assert node, 'Node not found on PATH'
          ver = _get_node_version(node)
          assert ver and ver >= (22, 0, 0), f'Node version too old: {ver}'
          checked = _check_node()
          assert checked == node

          # Exception hierarchy
          assert issubclass(NodeNotFoundError, ElizaOSAppError)
          assert issubclass(RuntimeInstallError, ElizaOSAppError)

          print('All loader unit tests passed')
          "

          # CLI entry point exists
          which elizaos-app

  build-pypi-matrix:
    name: PyPI on Python ${{ matrix.python }}
    runs-on: ${{ fromJSON(vars.HETZNER_FLEET_ONLINE == 'false' && '["ubuntu-24.04"]' || '["self-hosted","hetzner-robot"]') }}
    strategy:
      matrix:
        # PRs run a single Python version; pushes to main/develop run the
        # full 3.9–3.13 matrix. Release publishing re-runs the full matrix.
        python: ${{ github.event_name == 'pull_request' && fromJSON('["3.12"]') || fromJSON('["3.9", "3.10", "3.11", "3.12", "3.13"]') }}
    steps:
      - name: Checkout
        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
        with:
          # PyPI packaging does not need native inference submodules.
          submodules: false

      - name: Check for PyPI package directory
        id: pypi_check
        run: |
          if [[ -d packages/app-core/packaging/pypi ]]; then
            echo "present=true" >> "$GITHUB_OUTPUT"
          else
            echo "present=false" >> "$GITHUB_OUTPUT"
            echo "::notice::packages/app-core/packaging/pypi not present in this branch — skipping PyPI matrix build"
          fi

      - name: Setup Python ${{ matrix.python }}
        if: steps.pypi_check.outputs.present == 'true'
        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1
        with:
          python-version: ${{ matrix.python }}

      - name: Setup Node.js
        if: steps.pypi_check.outputs.present == 'true'
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
        with:
          node-version: "24"
          check-latest: false

      - name: Build and test
        if: steps.pypi_check.outputs.present == 'true'
        working-directory: packages/app-core/packaging/pypi
        run: |
          pip install build
          python -m build
          pip install dist/*.whl
          python -c "import elizaos_app; print(f'OK: elizaos_app {elizaos_app.__version__} on Python ${{ matrix.python }}')"

  pack-and-test-js:
    name: Pack & Test JS Tarballs
    runs-on: ${{ fromJSON(vars.HETZNER_FLEET_ONLINE == 'false' && '["ubuntu-24.04"]' || '["self-hosted","hetzner-robot"]') }}
    steps:
      - name: Checkout
        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
        with:
          # JS tarball packaging does not need native inference submodules.
          submodules: false

      - name: Setup Node.js
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
        with:
          node-version: "24"
          check-latest: false

      - name: Setup Bun
        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6
        with:
          bun-version: "canary"

      - name: Install dependencies
        run: bun install --ignore-scripts

      - name: Materialize bun npm package binary
        run: if [ -f node_modules/bun/install.js ]; then (cd node_modules/bun && node install.js); fi

      - name: Pack upstream tarballs
        run: node packages/app-core/scripts/pack-upstreams.mjs

      - name: Verify tarball installation
        run: |
          set -euo pipefail
          ARTIFACTS_DIR="artifacts"
          tarballs=("$ARTIFACTS_DIR"/*.tgz)
          if [ ! -f "${tarballs[0]}" ]; then
            echo "::error::No tarballs found in $ARTIFACTS_DIR"
            exit 1
          fi

          TEST_DIR=$(mktemp -d)
          ROOT_DIR="$PWD"
          install_paths=()
          for tarball in "${tarballs[@]}"; do
            install_paths+=("$ROOT_DIR/$tarball")
          done
          cd "$TEST_DIR"
          echo '{"name":"tarball-test","private":true,"type":"module"}' > package.json
          npm install "${install_paths[@]}" --ignore-scripts 2>&1

          for tarball in "${tarballs[@]}"; do
            echo "::group::Checking $(basename "$tarball")"
            PKG_NAME=$(tar -xOf "$ROOT_DIR/$tarball" package/package.json | node -e "process.stdin.setEncoding('utf8'); let data = ''; process.stdin.on('data', chunk => data += chunk); process.stdin.on('end', () => console.log(JSON.parse(data).name));")
            PKG_MANIFEST="node_modules/${PKG_NAME}/package.json"
            test -f "$PKG_MANIFEST"
            echo "Installed: $PKG_NAME"
            echo "::endgroup::"
          done

          cd "$ROOT_DIR"
          node packages/scripts/rm-path-recursive.mjs "$TEST_DIR"
          echo "All JS tarballs passed installation test"

      - name: Upload tarball artifacts
        if: always()
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
        with:
          name: js-tarballs
          path: artifacts/*.tgz
          retention-days: 7

  elizaos-cli-global-smoke:
    name: elizaos CLI global-install smoke (node + bun)
    runs-on: ${{ fromJSON(vars.HETZNER_FLEET_ONLINE == 'false' && '["ubuntu-24.04"]' || '["self-hosted","hetzner-robot"]') }}
    steps:
      - name: Checkout
        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
        with:
          submodules: false

      - name: Setup Node.js
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
        with:
          node-version: "24"
          check-latest: false

      - name: Setup Bun
        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6
        with:
          bun-version: "canary"

      - name: Install dependencies
        run: bun install --ignore-scripts

      - name: Materialize bun npm package binary
        run: if [ -f node_modules/bun/install.js ]; then (cd node_modules/bun && node install.js); fi

      # Static guard for #8000: a bin file must not import a dependency subpath
      # that the dependency's exports map forbids.
      - name: Lint bin exports (#8000 static guard)
        run: bun run --cwd packages/elizaos lint:bin-exports

      # End-to-end guard for #8000: npm pack -> global install (sandboxed
      # --prefix) under npm and bun, then run the bin under both node and bun.
      - name: Packaged smoke (global + local install, node + bun)
        run: bun run --cwd packages/elizaos test:packaged