Merge branch 'main' into 2025-04-promote-indexed-merkle-map

Author: boray

.github/actions/build/action.yml

@@ -0,0 +1,84 @@
+name: Build o1js
+description: 'All of the building steps for o1js'
+
+permissions:
+  contents: write
+
+inputs:
+  proof_systems_commit:
+    description: 'proof_systems commit to use'
+    required: false
+    default: ''
+
+runs:
+  using: "composite"
+  steps:
+    - uses: nixbuild/nix-quick-install-action@v30
+      continue-on-error: true
+      with:
+        nix_conf: |
+          keep-env-derivations = true
+          keep-outputs = true
+          require-sigs = false
+    - name: Disable smudging
+      shell: bash
+      run: echo "GIT_LFS_SKIP_SMUDGE=1" >> $GITHUB_ENV
+    - name: Setup Node
+      uses: actions/setup-node@v4
+      with:
+        node-version: '20'
+
+    - name: use proof_systems_commit if provided
+      if: ${{ inputs.proof_systems_commit != '' }}
+      shell: bash
+      run: |
+        git -C src/mina/src/lib/crypto/proof-systems fetch origin ${{ inputs.proof_systems_commit }}
+        git -C src/mina/src/lib/crypto/proof-systems clean -fdx
+        git -C src/mina/src/lib/crypto/proof-systems checkout ${{ inputs.proof_systems_commit }}
+        git -C src/mina/src/lib/crypto/proof-systems clean -fdx
+        git -C src/mina add src/lib/crypto/proof-systems
+
+    - name: cache bindings
+      uses: actions/cache@v4
+      id: bindings-cache
+      with:
+        path: |
+          src/bindings/compiled
+          src/bindings/mina-transaction/gen
+        key: bindings-${{ github.event.pull_request.head.sha || github.sha }}-${{ inputs.proof_systems_commit }}
+    - name: Build the o1js bindings
+      if: ${{ steps.bindings-cache.outputs.cache-hit != 'true' }}
+      shell: bash
+      run: |
+        set -Eeu
+        ./pin.sh
+        nix run o1js#generate-bindings --max-jobs auto
+    - name: Cache dependencies and build
+      uses: actions/cache@v4
+      id: cache
+      with:
+        path: |
+          ~/.npm
+          node_modules
+          dist
+        key: ${{ runner.OS }}-node-${{ hashFiles('**/package-lock.json') }}-${{ hashFiles('**/*.ts', '**/*.js') }}
+    - name: Build examples
+      if: ${{ steps.cache.outputs.cache-hit != 'true' }}
+      shell: bash
+      run: |
+        npm ci
+        npm run build:examples
+    - name: Build o1js clean
+      if: ${{ steps.cache.outputs.cache-hit != 'true' }}
+      shell: bash
+      run: |
+        rm -fr dist
+        npm ci
+        npm run build
+
+    - name: Cache repository
+      uses: actions/cache@v4
+      with:
+        path: .
+        key: repo-${{ github.sha }}
+

.github/actions/upload/action.yml

@@ -0,0 +1,45 @@
+name: Build and upload bindings
+on:
+  workflow_dispatch:
+  workflow_call:
+
+inputs:
+  cache_id:
+    required: true
+  nar_secret:
+    required: true
+  gcp_secret:
+    required: true
+
+runs:
+  using: "composite"
+  steps:
+    - name: Build
+      uses: ./.github/actions/build
+    - name: Build the o1js bindings
+      if: steps.bindings-cache.outputs.cache-hit != 'true'
+      env:
+        AWS_ACCESS_KEY_ID: ${{ inputs.cache_id }}
+        AWS_SECRET_ACCESS_KEY: ${{ inputs.gcp_secret }}
+      shell: bash
+      run: |
+        set -Eeu
+        ./pin.sh
+        nix build o1js#bindings --accept-flake-config
+        temp_key=$(mktemp)
+        echo ${{ inputs.nar_secret }} > "$temp_key"
+        nix store sign --key-file "$temp_key" --recursive ./result
+        outs=$(nix-store --query --requisites --include-outputs $(nix path-info --derivation ./result))
+        nix copy --to "s3://mina-nix-cache?endpoint=https://storage.googleapis.com" $outs
+        rm "$temp_key"
+    - name: generate tar
+      shell: bash
+      run: |
+        set -Eeu
+        ./pin.sh
+        nix build o1js#bindings-tar --out-link bindings.tar.gz
+    - name: Upload bindings
+      uses: actions/upload-artifact@v4
+      with:
+        name: bindings.tar.gz
+        path: bindings.tar.gz