code-intel-pipeline/.github/workflows/codegraph-conformance.yml at main · 2233admin/code-intel-pipeline · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
name: CodeGraph provider conformance

on:
  push:
    paths:
      - 'crates/code-intel-cli/**'
      - 'orchestration/**'
      - '.github/workflows/codegraph-conformance.yml'
  pull_request:
    paths:
      - 'crates/code-intel-cli/**'
      - 'orchestration/**'
      - '.github/workflows/codegraph-conformance.yml'
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: codegraph-${{ github.head_ref || github.ref }}
  cancel-in-progress: true

jobs:
  codegraph-conformance:
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest, macos-latest]
    runs-on: ${{ vars.CI_5070X_ENABLED == 'true' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch') && github.ref == format('refs/heads/{0}', github.event.repository.default_branch) && contains(fromJSON('["ubuntu-latest","ubuntu-24.04"]'), matrix.os) && 'ci-5070x-linux' || matrix.os }}
    timeout-minutes: 30
    env:
      DO_NOT_TRACK: '1'
      CODEGRAPH_TELEMETRY: '0'
      CODEGRAPH_NO_UPDATE_CHECK: '1'
      CODEGRAPH_NO_DOWNLOAD: '1'
      CODEGRAPH_NO_DAEMON: '1'
      CODEGRAPH_NO_WATCH: '1'
    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
        with:
          fetch-depth: 0
      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
          node-version: '24'
      - name: Install reviewed precompiled CodeGraph
        run: npm install --global @colbymchenry/codegraph@1.6.2 --ignore-scripts
      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
        with:
          python-version: "3.14"
      - name: Install pinned ripgrep
        shell: bash
        run: python .github/scripts/ci.py install-tool rg
      - name: Setup repository Rust toolchain
        run: rustup toolchain install
      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
      - name: Format and public failure contracts
        run: |
          cargo fmt -p code-intel -- --check
          cargo test -p code-intel --locked --test codegraph_provider
      - name: Real upstream index, query and synchronization contracts
        run: cargo test -p code-intel --locked --test codegraph_provider -- --ignored --nocapture
      - name: Agent query boundary contracts
        run: cargo test -p code-intel --locked --bin code-intel mcp_serve
      - name: Existing admission and native CodeNexus contracts
        run: cargo test -p code-intel --locked --test internalization_record --test codenexus_adapter --test codenexus_generate
      - name: Build verified CLI for local smoke without host compilation
        run: cargo build -p code-intel --locked
      - name: Check hardcoded paths
        shell: bash
        run: ./target/debug/code-intel lint hardcoded-paths
      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
        with:
          name: codegraph-code-intel-${{ runner.os }}
          path: |
            target/debug/code-intel
            target/debug/code-intel.exe
          if-no-files-found: error