ci_node.yml

# SPDX-FileCopyrightText: Copyright (c) 2025-2026, NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0

name: Node.js

on:
  workflow_call:
    inputs:
      ref_type:
        description: 'The ref type from the triggering workflow'
        required: true
        type: string
      ref_name:
        description: 'The ref name from the triggering workflow'
        required: true
        type: string
      run_package:
        description: 'Whether to build package artifacts after tests pass'
        required: false
        default: true
        type: boolean
      run_openclaw:
        description: 'Whether to run OpenClaw integration checks'
        required: false
        default: false
        type: boolean
    secrets:
      CODECOV_TOKEN:
        required: false

defaults:
  run:
    shell: bash

env:
  GH_TOKEN: "${{ github.token }}"
  GIT_COMMIT: "${{ github.sha }}"
  NEMO_FLOW_CI_WORKSPACE: "${{ github.workspace }}"
  NEMO_FLOW_CI_WORKSPACE_TMP: "${{ github.workspace }}/tmp"
  UV_PYTHON_DOWNLOADS: never

jobs:
  Test:
    name: Test (${{ matrix.platform }})
    runs-on: ${{ matrix.runner }}
    timeout-minutes: 120
    continue-on-error: ${{ startsWith(matrix.platform, 'windows') }}
    permissions:
      contents: read
    strategy:
      fail-fast: false
      matrix:
        include:
          - platform: linux-amd64
            runner: ubuntu-latest
          - platform: linux-arm64
            runner: ubuntu-24.04-arm
          - platform: macos-arm64
            runner: macos-15
          - platform: windows-amd64
            runner: windows-2022
          - platform: windows-arm64
            runner: windows-11-arm

    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

      - name: Load CI tool versions
        id: ci-config
        uses: ./.github/actions/load-ci-tool-versions

      - uses: actions-rust-lang/setup-rust-toolchain@150fca883cd4034361b621bd4e6a9d34e5143606 # v1.15.4
        with:
          cache: false
          toolchain: ${{ steps.ci-config.outputs.rust_version }}

      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          shared-key: nemo-flow-rust-${{ runner.os }}-${{ runner.arch }}-${{ steps.ci-config.outputs.rust_version }}
          workspaces: . -> target
          cache-all-crates: true
          cache-bin: false
          save-if: false

      - uses: taiki-e/install-action@c070f87102a1c75b3183910f391c1cb887fe13c8 # v2.77.6
        with:
          tool: cargo-llvm-cov@${{ steps.ci-config.outputs.cargo_llvm_cov_version }},just@${{ steps.ci-config.outputs.just_version }}

      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
        with:
          node-version: ${{ steps.ci-config.outputs.node_version }}

      - name: Run Node tests with coverage
        working-directory: ${{ env.NEMO_FLOW_CI_WORKSPACE }}
        run: just --set ci true --set output_dir "${{ github.workspace }}" test-node

      - name: Run OpenClaw integration checks
        if: ${{ inputs.run_openclaw }}
        working-directory: ${{ env.NEMO_FLOW_CI_WORKSPACE }}
        run: just --set ci true test-openclaw

      - name: Upload Node coverage to Codecov
        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6
        if: ${{ !startsWith(matrix.platform, 'windows') }}
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          disable_search: true
          files: node-coverage.xml,node-rust.xml
          flags: node-${{ matrix.platform }}
          name: node-${{ matrix.platform }}
          verbose: true

  Package:
    name: Package (${{ matrix.platform }})
    needs: [Test]
    if: ${{ inputs.run_package && !cancelled() && needs.Test.result == 'success' }}
    runs-on: ${{ matrix.runner }}
    timeout-minutes: 30
    permissions:
      contents: read
    strategy:
      fail-fast: false
      matrix:
        include:
          - platform: linux-amd64
            runner: ubuntu-latest
          - platform: linux-arm64
            runner: ubuntu-24.04-arm
          - platform: macos-arm64
            runner: macos-15
          - platform: windows-amd64
            runner: windows-2022
          - platform: windows-arm64
            runner: windows-11-arm

    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

      - name: Load CI tool versions
        id: ci-config
        uses: ./.github/actions/load-ci-tool-versions

      - uses: actions-rust-lang/setup-rust-toolchain@150fca883cd4034361b621bd4e6a9d34e5143606 # v1.15.4
        with:
          cache: false
          toolchain: ${{ steps.ci-config.outputs.rust_version }}

      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          shared-key: nemo-flow-rust-${{ runner.os }}-${{ runner.arch }}-${{ steps.ci-config.outputs.rust_version }}
          workspaces: . -> target
          cache-all-crates: true
          cache-bin: false
          save-if: false

      - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8
        if: ${{ startsWith(matrix.platform, 'linux-') }}
        with:
          version: ${{ steps.ci-config.outputs.uv_version }}
          enable-cache: true
          cache-dependency-glob: ${{ env.NEMO_FLOW_CI_WORKSPACE }}/uv.lock

      - name: Install managed Python for Zig packaging
        if: ${{ startsWith(matrix.platform, 'linux-') }}
        run: |
          set -e
          UV_PYTHON_DOWNLOADS=manual uv python install --managed-python ${{ steps.ci-config.outputs.default_python_version }}

      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
        with:
          node-version: ${{ steps.ci-config.outputs.node_version }}

      - uses: taiki-e/install-action@c070f87102a1c75b3183910f391c1cb887fe13c8 # v2.77.6
        with:
          tool: just@${{ steps.ci-config.outputs.just_version }}

      - name: Create packaging output directory
        if: ${{ inputs.run_package }}
        run: |
          set -e
          mkdir -p "${{ env.NEMO_FLOW_CI_WORKSPACE_TMP }}/npm"

      - name: Derive Node package version
        if: ${{ inputs.run_package }}
        working-directory: ${{ env.NEMO_FLOW_CI_WORKSPACE }}
        run: |
          set -e
          version="$(node -e 'const fs = require("fs"); const pkg = JSON.parse(fs.readFileSync("crates/node/package.json", "utf8")); if (!pkg.version) { throw new Error("crates/node/package.json missing version field"); } console.log(pkg.version);')"
          sha="${GITHUB_SHA::8}"
          if [ "${{ inputs.ref_type }}" = "tag" ]; then
            version="${{ inputs.ref_name }}"
          else
            version="${version}+${sha}"
          fi
          printf 'NEMO_FLOW_PACKAGE_VERSION=%s\n' "$version" >> "$GITHUB_ENV"

      - name: Package Node
        if: ${{ inputs.run_package }}
        working-directory: ${{ env.NEMO_FLOW_CI_WORKSPACE }}
        run: |
          set -e
          just \
            --set ci true \
            --set output_dir "${{ env.NEMO_FLOW_CI_WORKSPACE_TMP }}" \
            --set ref_name "${NEMO_FLOW_PACKAGE_VERSION}" \
            package-node

      - name: Upload npm package artifact
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
        if: ${{ inputs.run_package }}
        with:
          name: npm-${{ matrix.platform }}
          path: ${{ env.NEMO_FLOW_CI_WORKSPACE_TMP }}/npm/*.tgz
          if-no-files-found: error

  PackageOpenClaw:
    name: Package OpenClaw plugin
    needs: [Test]
    if: ${{ inputs.run_openclaw && !cancelled() && needs.Test.result == 'success' }}
    runs-on: ubuntu-latest
    timeout-minutes: 30
    permissions:
      contents: read
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

      - name: Load CI tool versions
        id: ci-config
        uses: ./.github/actions/load-ci-tool-versions

      - uses: actions-rust-lang/setup-rust-toolchain@150fca883cd4034361b621bd4e6a9d34e5143606 # v1.15.4
        with:
          cache: false
          toolchain: ${{ steps.ci-config.outputs.rust_version }}

      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
        with:
          shared-key: nemo-flow-rust-openclaw-package-${{ runner.os }}-${{ runner.arch }}-${{ steps.ci-config.outputs.rust_version }}
          workspaces: . -> target
          cache-all-crates: true
          cache-bin: false
          save-if: false

      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
        with:
          node-version: ${{ steps.ci-config.outputs.node_version }}

      - uses: taiki-e/install-action@c070f87102a1c75b3183910f391c1cb887fe13c8 # v2.77.6
        with:
          tool: just@${{ steps.ci-config.outputs.just_version }}

      - name: Derive OpenClaw package version
        working-directory: ${{ env.NEMO_FLOW_CI_WORKSPACE }}
        run: |
          set -e
          version="$(node -e 'const fs = require("fs"); const pkg = JSON.parse(fs.readFileSync("integrations/openclaw/package.json", "utf8")); if (!pkg.version) { throw new Error("integrations/openclaw/package.json missing version field"); } console.log(pkg.version);')"
          sha="${GITHUB_SHA::8}"
          if [ "${{ inputs.ref_type }}" = "tag" ]; then
            version="${{ inputs.ref_name }}"
          else
            version="${version}+${sha}"
          fi
          printf 'NEMO_FLOW_OPENCLAW_PACKAGE_VERSION=%s\n' "$version" >> "$GITHUB_ENV"

      - name: Package OpenClaw plugin
        working-directory: ${{ env.NEMO_FLOW_CI_WORKSPACE }}
        run: |
          set -euo pipefail
          just \
            --set ci true \
            --set output_dir "${NEMO_FLOW_CI_WORKSPACE_TMP}" \
            --set ref_name "${NEMO_FLOW_OPENCLAW_PACKAGE_VERSION}" \
            package-openclaw

      - name: Upload OpenClaw plugin artifact
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
        with:
          name: openclaw-npm
          path: ${{ env.NEMO_FLOW_CI_WORKSPACE_TMP }}/openclaw/*.tgz
          if-no-files-found: error

  Consolidate:
    name: Consolidate
    needs: [Package]
    if: ${{ inputs.run_package && !cancelled() && needs.Package.result == 'success' }}
    runs-on: ubuntu-latest
    timeout-minutes: 30
    permissions:
      contents: read
    steps:
      - name: Download npm linux-amd64 artifact
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: npm-linux-amd64
          path: npm-linux-amd64/

      - name: Download npm linux-arm64 artifact
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: npm-linux-arm64
          path: npm-linux-arm64/

      - name: Download npm macos-arm64 artifact
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: npm-macos-arm64
          path: npm-macos-arm64/

      - name: Download npm windows-amd64 artifact
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: npm-windows-amd64
          path: npm-windows-amd64/

      - name: Download npm windows-arm64 artifact
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: npm-windows-arm64
          path: npm-windows-arm64/

      - name: Consolidate Node package directory
        run: |
          set -euo pipefail
          mkdir -p combined
          first=true
          for dir in npm-linux-amd64 npm-linux-arm64 npm-macos-arm64 npm-windows-amd64 npm-windows-arm64; do
            shopt -s nullglob
            tgzs=("${dir}"/*.tgz)
            shopt -u nullglob
            if [ "${#tgzs[@]}" -eq 0 ]; then
              echo "Error: no npm package artifact found in ${dir}" >&2
              exit 1
            fi
            for tgz in "${tgzs[@]}"; do
              if [ "${first}" = true ]; then
                tar xzf "${tgz}" -C combined
                first=false
              else
                tar xzf "${tgz}" -C combined --wildcards '*.node'
              fi
            done
          done
          echo "Platform binaries included:"
          ls -la combined/package/*.node

      - name: Archive consolidated Node package
        run: |
          set -euo pipefail
          cd combined
          zip -rq "${{ github.workspace }}/consolidated.zip" package

      - name: Upload consolidated Node package artifact
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
        with:
          name: npm-consolidated
          path: ${{ github.workspace }}/consolidated.zip
          if-no-files-found: error