elizaos--eliza/.github/workflows/windows-ci.yml

name: Windows CI

# Protect the Windows compatibility work documented in WINDOWS.md from
# regression. Runs the install + typecheck + the core/shared/app-core unit
# test suites that have been verified to pass on Windows.
#
# Scope is deliberately a subset of the Linux lanes: this guards the
# critical-path TypeScript packages (runtime/core, dashboard host, shared)
# and the helpers under `packages/scripts/`. iOS/macOS/RISC-V/cloud-e2e
# paths run on their existing dedicated workflows.

# CI fan-out fix: the PR-scoped concurrency from #14069 fell back to
# github.run_id on push, so every develop push got a unique group and
# nothing ever superseded. A 37-merge wave queued thousands of push runs
# and starved the self-hosted fleet. Fall back to github.ref (all develop
# pushes share a group) and cancel superseded runs on push too. PR behavior
# is unchanged (pull_request.number still wins the key); merge_group and
# schedule events are not in the cancel set, so the merge queue and nightly
# runs always complete.
concurrency:
  group: windows-ci-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' || github.event_name == 'push' }}

on:
  # Reusable entry for the scheduled exhaustive develop lane (#12342).
  workflow_call:
  push:
    branches: [main, develop]
    paths:
      - "package.json"
      - "bun.lock"
      - "packages/core/**"
      - "packages/shared/**"
      - "packages/app-core/**"
      - "packages/agent/**"
      - "packages/ui/**"
      - "packages/elizaos/**"
      - "packages/cloud/shared/**"
      - "packages/scenario-runner/**"
      - "packages/vault/**"
      - "packages/security/**"
      - "packages/scripts/**"
      - "plugins/plugin-coding-tools/**"
      - "plugins/plugin-elizacloud/**"
      - "plugins/plugin-discord/**"
      - "plugins/plugin-anthropic/**"
      - "plugins/plugin-openai/**"
      - "plugins/plugin-app-control/**"
      - "plugins/plugin-task-coordinator/**"
      - "plugins/plugin-browser/**"
      - "scripts/verify-riscv64-buildpaths.sh"
      - "WINDOWS.md"
      - ".github/workflows/windows-ci.yml"
  pull_request:
    branches: [main]
    paths:
      - "package.json"
      - "bun.lock"
      - "packages/core/**"
      - "packages/shared/**"
      - "packages/app-core/**"
      - "packages/agent/**"
      - "packages/ui/**"
      - "packages/elizaos/**"
      - "packages/cloud/shared/**"
      - "packages/scenario-runner/**"
      - "packages/vault/**"
      - "packages/security/**"
      - "packages/scripts/**"
      - "plugins/plugin-coding-tools/**"
      - "plugins/plugin-elizacloud/**"
      - "plugins/plugin-discord/**"
      - "plugins/plugin-anthropic/**"
      - "plugins/plugin-openai/**"
      - "plugins/plugin-app-control/**"
      - "plugins/plugin-task-coordinator/**"
      - "plugins/plugin-browser/**"
      - "scripts/verify-riscv64-buildpaths.sh"
      - "WINDOWS.md"
      - ".github/workflows/windows-ci.yml"
  workflow_dispatch:

env:
  NODE_NO_WARNINGS: "1"
  NODE_OPTIONS: "--max-old-space-size=8192"

permissions:
  contents: read

jobs:
  windows:
    runs-on: windows-latest
    timeout-minutes: ${{ matrix.timeout || 90 }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - lane: core-runtime
            timeout: 75
            commands:
              - node packages/scripts/run-turbo.mjs run typecheck --filter=@elizaos/core --filter=@elizaos/shared --filter=@elizaos/cloud-shared --concurrency=4
              - bun run --cwd packages/core test
              - bun run --cwd packages/shared test
          - lane: app-and-cli
            commands:
              - bun run --cwd packages/app-core test
              - bun run --cwd packages/elizaos test
              # The package test runner owns the Windows-only tenant-db PGlite
              # quarantine and bounded native-crash retry (#15785).
              - bun run --cwd packages/cloud/shared test
          - lane: framework-packages
            commands:
              - bun run --cwd packages/scenario-runner test
              - bun run --cwd packages/vault test
              - bun run --cwd packages/security test
              - bun run --cwd plugins/plugin-coding-tools test
          - lane: plugins
            commands:
              - bun run --cwd plugins/plugin-elizacloud test
              - bun run --cwd plugins/plugin-discord test
              - bun run --cwd plugins/plugin-anthropic test
              - bun run --cwd plugins/plugin-openai test
              - bun run --cwd plugins/plugin-app-control test
              - bun run --cwd plugins/plugin-task-coordinator test
              - bun run --cwd plugins/plugin-browser test
          - lane: build-and-helper-smokes
            timeout: 90
            commands:
              - node packages/scripts/run-turbo.mjs run build --filter=@elizaos/core --filter=@elizaos/shared --filter=@elizaos/agent --concurrency=4
              - node packages/scripts/run-bash-linux-only.mjs scripts/verify-riscv64-buildpaths.sh
              - node packages/scripts/run-python.mjs --version
              - node packages/scripts/test-cloud-run.mjs
              - node packages/scripts/clean-stray-dts.mjs

    steps:
      - name: Enable long paths
        shell: pwsh
        run: |
          New-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\FileSystem" `
            -Name "LongPathsEnabled" -Value 1 -PropertyType DWORD -Force | Out-Null

      - uses: actions/checkout@v4

      - name: Install bun
        uses: oven-sh/setup-bun@v2
        with:
          # Match the repo-wide pin (packageManager: bun@1.4.0-canary.1). `latest`
          # (stable) cannot parse the canary-written lockfile (`lockfileVersion: 2`)
          # and aborts install with "Unknown lockfile version". canary is exercised
          # on Windows by windows-dev-smoke, so it is known-good here.
          bun-version: canary

      - name: Configure Windows Defender exclusions
        shell: pwsh
        run: |
          Add-MpPreference -ExclusionPath "$PWD\node_modules" -ErrorAction SilentlyContinue
          Add-MpPreference -ExclusionPath "$env:LOCALAPPDATA\.bun" -ErrorAction SilentlyContinue

      - name: Install dependencies
        shell: pwsh
        # bun's `patchedDependencies` step occasionally races against the
        # Windows file indexer and hits ENOTEMPTY on directory rename. Retry
        # once with the cache warm; usually the second pass clears it.
        run: |
          $ErrorActionPreference = "Continue"
          bun install --no-progress
          if ($LASTEXITCODE -ne 0) {
            Write-Host "Install failed; retrying with cache warm."
            bun install --no-progress
          }
          if ($LASTEXITCODE -ne 0) {
            exit $LASTEXITCODE
          }

      - name: Prepare generated workspace artifacts
        shell: pwsh
        run: |
          node packages/scripts/ensure-workspace-symlinks.mjs
          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
          node packages/scripts/ensure-native-plugins-linked.mjs
          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
          node packages/app-core/scripts/ensure-shared-i18n-data.mjs
          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
          node packages/scripts/run-turbo.mjs run build --filter=@elizaos/logger --filter=@elizaos/contracts --concurrency=1
          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
          # Prompts codegen writes generated source consumed by core/shared; run
          # it outside Turbo so Windows prep does not build stale generated inputs.
          bun run --cwd packages/prompts build
          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
          node packages/scripts/run-turbo.mjs run build --filter=@elizaos/core --filter=@elizaos/shared --concurrency=1
          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }

      - name: Run shard "${{ matrix.lane }}"
        shell: pwsh
        run: |
          $ErrorActionPreference = "Stop"
          $commands = '${{ toJson(matrix.commands) }}' | ConvertFrom-Json
          foreach ($command in $commands) {
            Write-Host "::group::$command"
            Invoke-Expression $command
            $code = $LASTEXITCODE
            Write-Host "::endgroup::"
            if ($code -ne 0) {
              Write-Error "Command failed with exit code $code`: $command"
              exit $code
            }
          }