Repository navigation
ci: build Agent master packages only for outstanding input changes - #1129
Merged
Merged
Conversation
Contributor
|
Maple Auth development preview: https://bc66b3ad.maple-auth-dev.pages.dev Commit: Uses development services. Cloudflare Access applies. Provider OAuth is not configured for PR URLs; use the stable Auth Dev host for OAuth rehearsal. |
Contributor
|
Maple development preview: https://e6b36004.maple-ca8.pages.dev Commit: Uses development API, billing, flags and PCR configuration. Cloudflare Access applies. |
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Agent Dev/Prod desktop packages currently rebuild on every master push, including changes outside their build inputs. Compare each master push with the last successful ancestor run whose four Dev/Prod macOS/Linux downloaded-package verifiers actually passed, then reuse the existing Agent input classifier. Failed, in-flight, selector-only and incomplete runs cannot advance that baseline; missing history or API/diff failures select a full build.
Manual master dispatch still forces both profiles. PR previews keep their whole merge-base selection. Packages retain their exact source/profile identity, signing, notarization, attestations and independent download verification. Unrelated master commits will have no new Agent packages; the documented manual dispatch also replenishes expired downloads. The selector uses read-only Actions API access confined to its changes job.
Validation: all 13 native-system root Nix flake checks passed; 14 selector tests and 21 workflow boundary tests passed; independent diff review found no blockers. A read-only evaluation of the historical Research-only master merge
6f259cb8correctly found unchanged Agent inputs against verified run38042581018at432ed1ef. This is routing proof, not a newly measured build-time saving.Merging changes this workflow, so its first automatic master run will build both profiles and perform the existing signing and verification paths. No workflow was dispatched manually.
Need help on this PR? Tag
@codesmith-botwith what you need. Autofix is disabled.