Add Docker build system and containerized development environment

.actrc

@@ -0,0 +1,2 @@
+-P ubuntu-latest=node:22-bookworm
+--container-options=--memory=32g --network=host

.dockerignore

@@ -0,0 +1,17 @@
+# Exclude large directories that aren't needed for build
+vscode/node_modules
+
+# Exclude build artifacts
+*.tar.gz
+*.log
+
+# Exclude development files
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# Exclude OS files
+.DS_Store
+Thumbs.db

.github/workflows/build.yml

@@ -0,0 +1,109 @@
+name: Build
+
+on:
+  push:
+  pull_request:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  # The main job for building the application
+  build:
+    name: Build sagemaker-code-editor
+    runs-on: ubuntu-latest
+    timeout-minutes: 180
+    env:
+      DISABLE_V8_COMPILE_CACHE: 1
+
+    steps:
+      - name: Checkout repo with submodules
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+
+      - name: Install system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y make gcc g++ libx11-dev xorg-dev libxkbfile-dev libsecret-1-dev libkrb5-dev python3 jq perl gettext automake autoconf quilt
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'npm'
+          cache-dependency-path: '**/package-lock.json'
+
+      - name: Apply patches (if any)
+        run: |
+          if [ -d patches ] && [ "$(ls -A patches)" ]; then
+            {
+              quilt push -a --leave-rejects --color=auto 
+            } || {
+              printf "\nPatching error, review logs!\n"
+              find ./vscode -name "*.rej"
+              exit 1
+            }
+          fi
+
+      - name: Set Development Version
+        id: version
+        run: |
+          SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
+          VERSION="0.0.0-dev-${SHORT_SHA}"
+          echo "VERSION=$VERSION" >> $GITHUB_ENV
+          echo "Generated version for this build: $VERSION"
+
+      - name: Build vscode
+        run: |
+          cd vscode
+          export DISABLE_V8_COMPILE_CACHE=1
+          export UV_THREADPOOL_SIZE=4
+
+          npm install -g node-gyp
+
+          # Install dependencies using npm, skip optional and native modules
+          npm install
+
+          # Run the gulp build task with memory optimizations
+          ARCH_ALIAS=linux-x64
+          node --max-old-space-size=32768 --optimize-for-size \
+              ./node_modules/gulp/bin/gulp.js \
+              "vscode-reh-web-${ARCH_ALIAS}-min"
+
+      - name: Find build output
+        id: find_output
+        run: |
+          BUILD_PATH=$(find . -name "vscode-reh-web-linux-x64" -type d | head -n 1)
+          if [ -z "$BUILD_PATH" ]; then
+            echo "::error::Build output directory 'vscode-reh-web-linux-x64' not found!"
+            exit 1
+          fi
+          echo "Build output found at: $BUILD_PATH"
+          echo "build_path=$BUILD_PATH" >> $GITHUB_OUTPUT
+
+      - name: Rename build output directory
+        id: rename_output
+        run: |
+          ORIG_PATH="${{ steps.find_output.outputs.build_path }}"
+          PARENT_DIR=$(dirname "$ORIG_PATH")
+          mv "$ORIG_PATH" "$PARENT_DIR/sagemaker-code-editor"
+          echo "Renamed build output directory to: $PARENT_DIR/sagemaker-code-editor"
+          echo "build_path=$PARENT_DIR/sagemaker-code-editor" >> $GITHUB_OUTPUT
+
+      - name: Create tarball archive
+        run: |
+          TARBALL="sagemaker-code-editor-${{ env.VERSION }}.tar.gz"
+          BUILD_DIR_PATH="${{ steps.rename_output.outputs.build_path }}"
+          PARENT_DIR=$(dirname "$BUILD_DIR_PATH")
+          BUILD_DIR_NAME=$(basename "$BUILD_DIR_PATH")
+          echo "Creating '$TARBALL' from '$BUILD_DIR_NAME' in '$PARENT_DIR'"
+          tar czf $TARBALL -C "$PARENT_DIR" "$BUILD_DIR_NAME"
+
+      - name: Upload build artifact
+        if: env.ACT == ''
+        uses: actions/upload-artifact@v4
+        with:
+          name: npm-package
+          path: sagemaker-code-editor-${{ env.VERSION }}.tar.gz

.github/workflows/ci.yml

@@ -0,0 +1,38 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  run-unit-tests:
+    name: Run unit tests
+    runs-on: ubuntu-latest
+    steps:
+      # Checkout repository code
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+
+      # Verify CSP line exists in target TypeScript file
+      - name: Check CSP configuration in webClientServer.ts
+        run: |
+          TARGET_FILE="patched-vscode/src/vs/server/node/webClientServer.ts"
+          REQUIRED_TEXT="'connect-src \'self\' ws: wss: https://main.vscode-cdn.net http://localhost:* https://localhost:* https://login.microsoftonline.com/ https://update.code.visualstudio.com https://*.vscode-unpkg.net/ https://default.exp-tas.com/vscode/ab https://vscode-sync.trafficmanager.net https://vscode-sync-insiders.trafficmanager.net https://*.gallerycdn.vsassets.io https://marketplace.visualstudio.com https://openvsxorg.blob.core.windows.net https://az764295.vo.msecnd.net  https://code.visualstudio.com https://*.gallery.vsassets.io https://*.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com https://*.servicebus.windows.net/ https://vscode.blob.core.windows.net https://vscode.search.windows.net https://vsmarketplacebadges.dev https://vscode.download.prss.microsoft.com https://download.visualstudio.microsoft.com https://*.vscode-unpkg.net https://open-vsx.org;'"
+
+          if [ ! -f "$TARGET_FILE" ]; then
+            echo "❌ FAIL: Target file $TARGET_FILE does not exist."
+            exit 1
+          fi
+
+          if grep -F "$REQUIRED_TEXT" "$TARGET_FILE" > /dev/null; then
+            echo "✅ PASS: Required CSP text exists."
+          else
+            echo "❌ FAIL: Required CSP text NOT found in $TARGET_FILE"
+            exit 1
+          fi

.github/workflows/e2e.yml

@@ -0,0 +1,38 @@
+name: E2E Tests
+
+on:
+  workflow_run:
+    workflows: ["Build"]
+    types: [completed]
+  pull_request:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  e2e-tests:
+    name: E2E tests
+    runs-on: ubuntu-latest
+    if: github.event.workflow_run.conclusion == 'success' || github.event_name == 'pull_request'
+    steps:
+      - name: Checkout repo with submodules
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'npm'
+          cache-dependency-path: '**/package-lock.json'
+      - name: Run E2E tests
+        run: |
+          # Add your actual E2E test commands here
+          echo "[PLACEHOLDER] Running E2E tests..."
+          # Example: npm run test:e2e
+      - uses: actions/upload-artifact@v4
+        if: failure()
+        with:
+          name: e2e-test-results
+          path: test-results/

.github/workflows/release.yml

@@ -0,0 +1,121 @@
+# Workflow name
+name: Release
+
+# This workflow is triggered manually from the GitHub Actions tab.
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'The release version (e.g., v1.8.0). This will be used to create the Git tag.'
+        required: true
+        type: string
+      # This input specifies the branch to tag and release from.
+      source_branch:
+        description: 'The branch to create the release from (e.g., main or 1.8). This branch MUST have the final code.'
+        required: true
+        type: string
+        default: 'main'
+
+jobs:
+  # The job for creating a release
+  create-release:
+    name: Create Release
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    permissions:
+      # This permission is required for creating a release and uploading assets.
+      contents: write
+
+    steps:
+      # Step 1: Check out the code from the SPECIFIED BRANCH in the AWS repository.
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          # This ensures we are on the correct branch to get the latest code.
+          ref: ${{ github.event.inputs.source_branch }}
+          # CRITICAL: We check out the code from the AWS repository directly.
+          repository: aws/sagemaker-code-editor
+
+      # Step 2: Explicitly get the commit SHA of the checked-out branch HEAD.
+      - name: Get commit SHA
+        id: get_sha
+        run: echo "sha=$(git rev-parse HEAD)" >> $GITHUB_OUTPUT
+
+      # Step 3: Delete existing tag in the AWS repo if you want to re-run the release.
+      - name: Delete existing tag (if any)
+        uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const tag = '${{ github.event.inputs.version }}';
+            try {
+              await github.rest.git.deleteRef({
+                owner: 'aws',
+                repo: 'sagemaker-code-editor',
+                ref: `tags/${tag}`
+              });
+              console.log(`Deleted existing tag: ${tag}`);
+            } catch (e) {
+              if (e.status !== 404 && e.status !== 422) {
+                // Re-throw the error if it's not a "Not Found" or "Unprocessable" error
+                throw e;
+              }
+              console.log(`Tag ${tag} does not exist or already deleted.`);
+            }
+
+
+      # Step 4: Download the build artifact from the UPSTREAM repository after a PUSH event.
+      - name: Download artifact from build workflow
+        uses: dawidd6/action-download-artifact@v6
+        with:
+          # CRITICAL: Explicitly specify the repository where the build artifact was created.
+          repo: aws/sagemaker-code-editor
+          # BEST PRACTICE: Look for artifacts created by a 'push' event (e.g., after a PR is merged).
+          event: push
+          workflow: build.yml
+          branch: ${{ github.event.inputs.source_branch }}
+          name: npm-package
+          path: ./release-assets
+          workflow_conclusion: success
+
+      # Step 5: Prepare the release assets by renaming the artifact.
+      - name: Prepare release assets
+        id: prepare_assets
+        run: |
+          # Find the downloaded tarball (there should only be one).
+          ARTIFACT_FILE=$(find ./release-assets -name "*.tar.gz")
+
+          if [ -z "$ARTIFACT_FILE" ]; then
+            echo "::error::Build artifact not found! Ensure a 'build.yml' workflow ran successfully on the '${{ github.event.inputs.source_branch }}' branch in 'aws/sagemaker-code-editor' after the code was pushed/merged."
+            exit 1
+          fi
+
+          # Get the version from the manual input, and remove the leading 'v' if it exists.
+          VERSION_TAG="${{ github.event.inputs.version }}"
+          VERSION_NUM="${VERSION_TAG#v}"
+
+          # Create the new, clean filename for the release.
+          NEW_FILENAME="code-editor${VERSION_NUM}.tar.gz"
+
+          # Rename the file.
+          mv "$ARTIFACT_FILE" "./release-assets/$NEW_FILENAME"
+
+          echo "Renamed artifact to $NEW_FILENAME"
+          # Set the new filename as an output for the next step.
+          echo "filename=./release-assets/$NEW_FILENAME" >> $GITHUB_OUTPUT
+
+      # Step 6: Create the GitHub Release in the AWS repo using the CORRECT commit SHA.
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          # We need a token with permissions to create releases in the AWS repo.
+          token: ${{ secrets.GITHUB_TOKEN }}
+          # CRITICAL: Explicitly specify the repository to create the release in.
+          repository: aws/sagemaker-code-editor
+          name: CodeEditor ${{ github.event.inputs.version }}
+          tag_name: ${{ github.event.inputs.version }}
+          files: ${{ steps.prepare_assets.outputs.filename }}
+          draft: false
+          generate_release_notes: false
+          # CRITICAL: Force the tag to be created on the commit we explicitly got in Step 2.
+          target_commitish: ${{ steps.get_sha.outputs.sha }}

.gitignore

@@ -1,2 +1,4 @@
 .DS_Store
-.pc
+.pc
+.artifacts
+bin