Repository navigation
v0.9.56: PII masking for long texts, Agent block on the shared model fallback, Computer Use opens to every app with sensitive apps protected, AWS Marketplace container license check, slimmer realtime and migrations images, desktop browser rendering waits #2598
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: desktop-e2e | |
| # Smoke coverage of the real Electron shell on desktop changes. Isolated runners | |
| # partition complete test files by measured duration; workers remain serial per runner. | |
| # The weekly | |
| # advisory canary against electron@latest so Chromium-cadence breakage surfaces | |
| # before an upgrade is attempted. | |
| on: | |
| pull_request: | |
| paths: | |
| - '.github/workflows/desktop-e2e.yml' | |
| - '.github/workflows/desktop-release.yml' | |
| - '.github/actions/desktop-native-cache/**' | |
| - 'apps/desktop/**' | |
| - 'apps/sim/app/_shell/desktop-update-*.tsx' | |
| - 'apps/sim/app/workspace/**/home/hooks/use-mothership-resize.ts' | |
| - 'apps/sim/app/workspace/**/home/hooks/use-resource-panel.ts' | |
| - 'apps/sim/app/workspace/**/home/components/chat-panel-layout.tsx' | |
| - 'apps/sim/stores/chat-panel/**' | |
| - 'apps/sim/stores/constants.ts' | |
| - 'apps/sim/lib/browser-agent/transport.ts' | |
| - 'apps/sim/lib/core/utils/separator-keys.ts' | |
| - 'apps/sim/scripts/fixtures/chat-panel.tsx' | |
| - 'apps/sim/app/layout.tsx' | |
| - 'apps/sim/hooks/use-desktop-update-state.ts' | |
| - 'apps/sim/lib/desktop/**' | |
| - 'apps/sim/app/desktop/connect/**' | |
| - 'apps/sim/app/credential-groups/**' | |
| - 'apps/sim/hooks/queries/slack-search.ts' | |
| - 'apps/sim/hooks/queries/personal-search-integrations.ts' | |
| - 'apps/sim/hooks/use-search-integration-connection.ts' | |
| - 'apps/sim/hooks/use-github-installation-setup.ts' | |
| - 'apps/sim/lib/api/contracts/desktop-source-connect.ts' | |
| - 'apps/sim/scripts/fixtures/desktop-source-connect.tsx' | |
| - 'apps/sim/app/workspace/**/browser-session/**' | |
| - 'apps/sim/app/_styles/**' | |
| - 'apps/sim/lib/postcss/**' | |
| - 'apps/sim/postcss.config.mjs' | |
| - 'apps/sim/public/brand/fonts/**' | |
| - 'packages/emcn/**' | |
| - 'packages/desktop-bridge/**' | |
| - 'packages/browser-protocol/**' | |
| - 'packages/terminal-protocol/**' | |
| - 'packages/logger/**' | |
| - 'packages/security/**' | |
| - 'packages/tsconfig/**' | |
| - 'packages/utils/**' | |
| - 'bun.lock' | |
| - 'package.json' | |
| - 'scripts/desktop-e2e.ts' | |
| - 'scripts/duration-shards.ts' | |
| push: | |
| branches: [main, staging] | |
| paths: | |
| - '.github/workflows/desktop-e2e.yml' | |
| - '.github/actions/desktop-native-cache/**' | |
| - 'apps/desktop/native/**' | |
| - 'apps/desktop/scripts/build.ts' | |
| - 'apps/desktop/scripts/build-native.ts' | |
| - 'apps/desktop/scripts/native-build-cache.ts' | |
| - 'apps/desktop/tsconfig.json' | |
| - 'bun.lock' | |
| schedule: | |
| - cron: '23 9 * * 1' | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: desktop-e2e-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| native-cache: | |
| name: native-cache (Node ${{ matrix.node }}) | |
| if: github.event_name == 'push' | |
| runs-on: macos-26 | |
| timeout-minutes: 15 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| node: ['22', '24.22.1'] | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 | |
| with: | |
| persist-credentials: false | |
| - name: Setup Bun | |
| uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2 | |
| with: | |
| bun-version: 1.4.4 | |
| - name: Setup Node | |
| uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| - name: Install dependencies | |
| run: bun install --frozen-lockfile --ignore-scripts | |
| - name: Restore native compilation | |
| uses: ./.github/actions/desktop-native-cache | |
| - name: Build desktop native outputs | |
| working-directory: apps/desktop | |
| run: bun run scripts/build-native.ts --computer-use | |
| e2e: | |
| name: e2e (${{ matrix.shard }}/${{ strategy.job-total }}) | |
| if: github.event_name != 'schedule' && github.event_name != 'push' | |
| runs-on: macos-26 | |
| timeout-minutes: 30 | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| shard: [1, 2, 3, 4] | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 | |
| with: | |
| persist-credentials: false | |
| - name: Setup Bun | |
| uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2 | |
| with: | |
| bun-version: 1.4.4 | |
| - name: Setup Node | |
| uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6 | |
| with: | |
| node-version: 24.22.1 | |
| # Electron, electron-builder and Playwright download their binaries on every cold install. All | |
| # three caches are keyed by version inside, so an older entry restored by prefix is harmless. | |
| - name: Cache Electron and Playwright downloads | |
| uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v5 | |
| with: | |
| path: | | |
| ~/Library/Caches/electron | |
| ~/Library/Caches/electron-builder | |
| ~/Library/Caches/ms-playwright | |
| key: desktop-downloads-${{ runner.os }}-${{ hashFiles('bun.lock') }} | |
| restore-keys: desktop-downloads-${{ runner.os }}- | |
| - name: Install dependencies | |
| run: bun install --frozen-lockfile | |
| - name: Restore native compilation | |
| uses: ./.github/actions/desktop-native-cache | |
| - name: Bundle main and preload | |
| working-directory: apps/desktop | |
| run: bun run build | |
| - name: Install system-browser fixture | |
| working-directory: apps/desktop | |
| run: bunx playwright install chromium | |
| # The terminal-cancel suite drives a real tmux server; without tmux its tmux scenarios skip. | |
| - name: Install tmux | |
| run: brew install tmux | |
| - name: Run Playwright _electron smoke suite | |
| working-directory: apps/desktop | |
| run: bun run ../../scripts/desktop-e2e.ts ${{ matrix.shard }}/${{ strategy.job-total }} | |
| env: | |
| PLAYWRIGHT_JSON_OUTPUT_FILE: test-results/desktop-smoke.json | |
| BACKGROUND_EXECUTOR_REPORT_PATH: test-results/background-executor-report.json | |
| TERMINAL_CANCEL_REPORT_PATH: test-results/terminal-cancel-report.json | |
| CONTINUE_SIGN_IN_REPORT_PATH: test-results/continue-sign-in-report.json | |
| - name: Upload test results | |
| if: failure() | |
| uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 | |
| with: | |
| name: desktop-e2e-results-pinned-${{ matrix.shard }} | |
| path: apps/desktop/test-results | |
| retention-days: 7 | |
| - name: Upload smoke coverage and timings | |
| if: always() | |
| uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 | |
| with: | |
| name: desktop-smoke-reports-${{ matrix.shard }} | |
| path: | | |
| apps/desktop/test-results/desktop-smoke.json | |
| apps/desktop/test-results/desktop-shard-plan.json | |
| apps/desktop/test-results/desktop-discovery.json | |
| if-no-files-found: ignore | |
| retention-days: 7 | |
| e2e-canary: | |
| name: e2e-canary | |
| if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' | |
| runs-on: macos-26 | |
| timeout-minutes: 30 | |
| continue-on-error: true | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 | |
| with: | |
| persist-credentials: false | |
| - name: Setup Bun | |
| uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2 | |
| with: | |
| bun-version: 1.4.4 | |
| - name: Setup Node | |
| uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6 | |
| with: | |
| node-version: 24.22.1 | |
| # Electron, electron-builder and Playwright download their binaries on every cold install. All | |
| # three caches are keyed by version inside, so an older entry restored by prefix is harmless. | |
| - name: Cache Electron and Playwright downloads | |
| uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v5 | |
| with: | |
| path: | | |
| ~/Library/Caches/electron | |
| ~/Library/Caches/electron-builder | |
| ~/Library/Caches/ms-playwright | |
| key: desktop-downloads-${{ runner.os }}-${{ hashFiles('bun.lock') }} | |
| restore-keys: desktop-downloads-${{ runner.os }}- | |
| - name: Install dependencies | |
| run: bun install --frozen-lockfile | |
| # The bunfig age gate would resolve `latest` to the newest week-old release; the canary | |
| # exists to test the release that just shipped. Already-locked packages stay locked. | |
| - name: Switch to electron@latest | |
| working-directory: apps/desktop | |
| run: bun add --no-save -d --minimum-release-age=0 electron@latest | |
| - name: Restore native compilation | |
| uses: ./.github/actions/desktop-native-cache | |
| - name: Bundle main and preload | |
| working-directory: apps/desktop | |
| run: bun run build | |
| - name: Install system-browser fixture | |
| working-directory: apps/desktop | |
| run: bunx playwright install chromium | |
| # The terminal-cancel suite drives a real tmux server; without tmux its tmux scenarios skip. | |
| - name: Install tmux | |
| run: brew install tmux | |
| - name: Run Playwright _electron smoke suite | |
| working-directory: apps/desktop | |
| run: bunx playwright test | |
| env: | |
| BACKGROUND_EXECUTOR_REPORT_PATH: test-results/background-executor-report.json | |
| TERMINAL_CANCEL_REPORT_PATH: test-results/terminal-cancel-report.json | |
| CONTINUE_SIGN_IN_REPORT_PATH: test-results/continue-sign-in-report.json | |
| - name: Upload test results | |
| if: failure() | |
| uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 | |
| with: | |
| name: desktop-e2e-results-latest | |
| path: apps/desktop/test-results | |
| retention-days: 7 | |
| package-smoke: | |
| name: package-smoke | |
| if: github.event_name != 'schedule' && github.event_name != 'push' | |
| runs-on: macos-26 | |
| timeout-minutes: 20 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 | |
| with: | |
| persist-credentials: false | |
| - name: Setup Bun | |
| uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2 | |
| with: | |
| bun-version: 1.4.4 | |
| - name: Setup Node | |
| uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6 | |
| with: | |
| node-version: 22 | |
| # Electron, electron-builder and Playwright download their binaries on every cold install. All | |
| # three caches are keyed by version inside, so an older entry restored by prefix is harmless. | |
| - name: Cache Electron and Playwright downloads | |
| uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v5 | |
| with: | |
| path: | | |
| ~/Library/Caches/electron | |
| ~/Library/Caches/electron-builder | |
| ~/Library/Caches/ms-playwright | |
| key: desktop-downloads-${{ runner.os }}-${{ hashFiles('bun.lock') }} | |
| restore-keys: desktop-downloads-${{ runner.os }}- | |
| - name: Install dependencies | |
| run: bun install --frozen-lockfile | |
| - name: Restore native compilation | |
| uses: ./.github/actions/desktop-native-cache | |
| - name: Bundle and package unsigned | |
| working-directory: apps/desktop | |
| env: | |
| CSC_IDENTITY_AUTO_DISCOVERY: 'false' | |
| run: | | |
| bun run build | |
| bunx electron-builder --mac dir --universal --publish never \ | |
| -c.mac.identity=- -c.mac.hardenedRuntime=false | |
| - name: Run packaged Electron smoke suite | |
| working-directory: apps/desktop | |
| run: | | |
| APP_BUNDLE="$(find release -maxdepth 2 -name '*.app' -print -quit)" | |
| if [ -z "$APP_BUNDLE" ]; then | |
| echo "::error::Packaged app bundle was not found." | |
| exit 1 | |
| fi | |
| EXECUTABLE="$(find "$APP_BUNDLE/Contents/MacOS" -maxdepth 1 -type f -perm -111 -print -quit)" | |
| if [ -z "$EXECUTABLE" ]; then | |
| echo "::error::Packaged app executable was not found." | |
| exit 1 | |
| fi | |
| SIM_DESKTOP_EXECUTABLE="$EXECUTABLE" bunx playwright test e2e/packaged-smoke.spec.ts |