ci: Add Celest CLI workflow

Author: dnys1

.github/workflows/celest_cli.yaml

@@ -0,0 +1,60 @@
+name: celest_cli
+on:
+  pull_request:
+    paths:
+      - ".github/workflows/apps_cli.yaml"
+      - "apps/cli/**"
+      - "packages/**"
+      - "services/**"
+
+# Prevent duplicate runs due to Graphite
+# https://graphite.dev/docs/troubleshooting#why-are-my-actions-running-twice
+concurrency:
+  group: ${{ github.repository }}-${{ github.workflow }}-${{ github.ref }}-${{ github.ref == 'refs/heads/main' && github.sha || ''}}
+  cancel-in-progress: true
+
+env:
+  CELEST_LOCAL_PATH: ${{ github.workspace }}
+
+jobs:
+  test:
+    strategy:
+      fail-fast: false
+      matrix:
+        os:
+          - ubuntu-latest
+          - macos-14
+          - windows-latest
+    runs-on: ${{ matrix.os }}
+    # TODO(dnys1): Remove when CLI tests are faster (Golang wrapper + native assets removal)
+    timeout-minutes: 45
+    steps:
+      - name: Git Checkout
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # 4.1.7
+        with:
+          submodules: recursive
+      # Needed for flutter-version-file: https://github.com/subosito/flutter-action?tab=readme-ov-file#use-version-from-pubspecyaml
+      - name: Install yq
+        if: runner.os == 'Windows'
+        shell: bash
+        run: |
+          curl -sL "https://github.com/mikefarah/yq/releases/download/v4.43.1/yq_windows_amd64.exe" -o yq.exe
+          echo "$PWD" >> "$GITHUB_PATH"
+      - name: Setup Flutter
+        uses: subosito/flutter-action@44ac965b96f18d999802d4b807e3256d5a3f9fa1 # 2.16.0
+        with:
+          cache: true
+          # Locks version to repo constraint (for golden test alignment)
+          flutter-version-file: pubspec.yaml
+      - name: Setup Libsecret
+        if: runner.os == 'Linux'
+        run: tool/setup-ci.sh
+      - name: Get Packages
+        working-directory: apps/cli
+        run: dart pub upgrade
+      - name: Test
+        working-directory: apps/cli
+        run: dart test -x e2e --fail-fast
+      # - name: Test (Fixtures)
+      #   working-directory: apps/cli
+      #   run: dart test fixtures/legacy/fixtures_test.dart --fail-fast -j 1

apps/cli/pubspec.yaml

@@ -88,15 +88,15 @@ dependency_overrides:
   # TODO: Remove when built_value supports latest analyzer
   analyzer: ^7.3.0
   celest:
-    path: ../../celest/packages/celest
+    path: ../../packages/celest
   celest_ast:
-    path: ../../celest/packages/celest_ast
+    path: ../../packages/celest_ast
   celest_auth:
-    path: ../../celest/packages/celest_auth
+    path: ../../packages/celest_auth
   celest_cloud:
-    path: ../../celest/packages/celest_cloud
+    path: ../../packages/celest_cloud
   celest_core:
-    path: ../../celest/packages/celest_core
+    path: ../../packages/celest_core
   # TODO: Remove when built_value supports latest analyzer
   source_gen: ^2.0.0
 

apps/cli/test/analyzer/celest_analyzer_test.dart

@@ -42,10 +42,10 @@ Future<CelestProject> newProject({
     projectDart += authDart;
   }
   final celestDir = p.fromUri(
-    Directory.current.uri.resolve('../../celest/packages/celest/'),
+    Directory.current.uri.resolve('../../packages/celest/'),
   );
   final celestCoreDir = p.fromUri(
-    Directory.current.uri.resolve('../../celest/packages/celest_core/'),
+    Directory.current.uri.resolve('../../packages/celest_core/'),
   );
   final packageConfig = PackageConfig([
     Package(

pubspec.yaml

@@ -1,9 +1,16 @@
 name: celest_dev
 publish_to: none
 
+# The version locks for GitHub actions.
+#
+# Because many golden tests encode the precise Dart/Flutter SDKs used to generate
+# them, these values must be consistently used when running tests locally and in CI.
+#
+# However, setting these locks in the actual packages is too restrictive when
+# switching between versions, so they are instead centrally managed here.
 environment:
-  sdk: ^3.4.0
-  flutter: ">=3.22.0"
+  sdk: 3.7.0
+  flutter: 3.29.0
 
 dev_dependencies:
   melos: ^5.3.0

tool/setup-ci.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+
+set -e
+
+if [[ "$OSTYPE" == "linux-gnu"* ]]; then
+
+    sudo apt-get update && sudo apt-get install -y libsecret-1-dev gnome-keyring jq
+
+    # If running in headless mode, re-run script in dbus session.
+    if [ -z $DBUS_SESSION_BUS_ADDRESS && -n $1 ]; then
+        exec dbus-run-session -- $@
+    fi
+
+    # Set up keyring in CI env
+    if [ -n $CI ]; then
+        echo 'password' | gnome-keyring-daemon --start --replace --daemonize --unlock
+    fi
+fi