wehub-resource-sync
117 lines
4.0 KiB
YAML
117 lines
4.0 KiB
YAML
name: Windows Update-Survival E2E (branch build)
|
|
|
|
# Why: proves the Phase 1 daemon-host relocation actually makes terminal
|
|
# sessions SURVIVE a Windows update. Builds an (unsigned) installer FROM THIS
|
|
# BRANCH, then runs the win-update-e2e harness with --expect survival: install,
|
|
# open a terminal, silently update over it, relaunch, and assert the daemon PID
|
|
# is unchanged and the pre-update terminal is still interactive with no console
|
|
# flashing. Runs from the feature branch via push (workflow_dispatch only works
|
|
# on the default branch); main is never touched. A CI runner is the only safe
|
|
# place to install/update — see the relocation post-mortem.
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- Jinwoo-H/windows-update-survival
|
|
paths:
|
|
- 'src/main/daemon/**'
|
|
- 'src/main/pty/**'
|
|
- 'tools/win-update-e2e/**'
|
|
- 'config/electron-builder.config.cjs'
|
|
- '.github/workflows/win-update-survival-e2e.yml'
|
|
workflow_dispatch:
|
|
inputs:
|
|
expect:
|
|
description: Expected outcome profile
|
|
required: true
|
|
type: choice
|
|
default: survival
|
|
options:
|
|
- survival
|
|
- cold-restore
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: win-update-survival-e2e-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
survival:
|
|
name: survival (branch build over itself)
|
|
runs-on: windows-2022
|
|
timeout-minutes: 50
|
|
env:
|
|
EXPECT: ${{ inputs.expect || 'survival' }}
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v6
|
|
with:
|
|
# This job only builds and runs the harness locally; it never pushes.
|
|
persist-credentials: false
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@v6
|
|
with:
|
|
node-version-file: package.json
|
|
|
|
- name: Setup pnpm
|
|
uses: pnpm/action-setup@v6
|
|
with:
|
|
run_install: false
|
|
|
|
- name: Install dependencies
|
|
run: pnpm install --frozen-lockfile
|
|
|
|
# Why: cache the built installer keyed on the inputs that affect it, so a
|
|
# harness-only edit skips the ~20 min electron-builder build. The daemon
|
|
# relocation code lives under src/, so changing it correctly rebuilds.
|
|
- name: Cache branch installer
|
|
id: cache-installer
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: dist/orca-windows-setup.exe
|
|
key: branch-installer-${{ hashFiles('src/**', 'config/**', 'native/**', 'resources/win32/**', 'package.json', 'pnpm-lock.yaml') }}
|
|
|
|
- name: Build Windows installer (unsigned)
|
|
if: steps.cache-installer.outputs.cache-hit != 'true'
|
|
run: |
|
|
node config/scripts/ensure-native-runtime.mjs --runtime=electron
|
|
pnpm run build:desktop
|
|
pnpm exec electron-builder --config config/electron-builder.config.cjs --win --publish never
|
|
|
|
# Why: install the branch build, open a terminal, update the SAME build
|
|
# over it, and assert the relocated daemon survives. Same build on both
|
|
# sides isolates the survival mechanism (NSIS kill sweep + userData daemon
|
|
# + adoption) from cross-version staleness policy. No --install-dir: a CI
|
|
# runner has no real Orca to protect.
|
|
- name: Run survival harness
|
|
id: harness
|
|
shell: pwsh
|
|
env:
|
|
ORCA_E2E_DIAG_DIR: artifacts/diag
|
|
run: |
|
|
New-Item -ItemType Directory -Force artifacts | Out-Null
|
|
$exe = "dist/orca-windows-setup.exe"
|
|
if (-not (Test-Path $exe)) { throw "Installer not found at $exe" }
|
|
$log = "artifacts/survival-output.log"
|
|
node tools/win-update-e2e/run.mjs `
|
|
--from "$exe" `
|
|
--to "$exe" `
|
|
--expect "$env:EXPECT" `
|
|
--soak-seconds 60 2>&1 | Tee-Object -FilePath $log
|
|
exit $LASTEXITCODE
|
|
|
|
- name: Upload survival output
|
|
if: always()
|
|
uses: actions/upload-artifact@v7
|
|
with:
|
|
name: win-update-survival-output
|
|
path: |
|
|
artifacts/survival-output.log
|
|
artifacts/diag/**
|
|
retention-days: 7
|
|
if-no-files-found: warn
|