Merge remote-tracking branch 'origin/main'

Author: arul28

.github/workflows/prepare-release.yml

@@ -9,6 +9,8 @@ on:
         type: string
 
 permissions:
+  actions: read
+  checks: read
   contents: read
 
 jobs:

.github/workflows/release-core.yml

@@ -18,6 +18,8 @@ on:
         type: boolean
 
 permissions:
+  actions: read
+  checks: read
   contents: write
 
 jobs:
@@ -34,6 +36,36 @@ jobs:
           git fetch origin main:refs/remotes/origin/main
           git merge-base --is-ancestor HEAD refs/remotes/origin/main
 
+      - name: Ensure CI passed for release commit
+        env:
+          GH_TOKEN: ${{ github.token }}
+          GH_REPO: ${{ github.repository }}
+          TARGET_REF: ${{ inputs.target_ref }}
+        run: |
+          set -euo pipefail
+
+          ci_pass_json="$(
+            gh api "repos/$GH_REPO/commits/$TARGET_REF/check-runs" \
+              -f per_page=100 \
+              --paginate \
+              --jq '[.check_runs[] | select(.name == "ci-pass")] | sort_by(.completed_at // "") | last // empty'
+          )"
+
+          if [ -z "$ci_pass_json" ] || [ "$ci_pass_json" = "null" ]; then
+            echo "::error::No ci-pass check run was found for $TARGET_REF. Run CI before releasing."
+            exit 1
+          fi
+
+          status="$(printf '%s' "$ci_pass_json" | jq -r '.status // ""')"
+          conclusion="$(printf '%s' "$ci_pass_json" | jq -r '.conclusion // ""')"
+          url="$(printf '%s' "$ci_pass_json" | jq -r '.html_url // ""')"
+          if [ "$status" != "completed" ] || [ "$conclusion" != "success" ]; then
+            echo "::error::ci-pass for $TARGET_REF is $status/$conclusion. Release packaging requires green CI. $url"
+            exit 1
+          fi
+
+          echo "ci-pass succeeded for $TARGET_REF: $url"
+
   build-mac-release:
     needs:
       - verify

.github/workflows/release.yml

@@ -16,6 +16,8 @@ on:
         type: string
 
 permissions:
+  actions: read
+  checks: read
   contents: write
 
 jobs:

apps/ade-cli/package-lock.json

@@ -31,10 +31,15 @@
     "@openai/codex": "0.130.0",
     "@opencode-ai/sdk": "^1.4.2",
     "@wize-logic/nodejs-rfb": "^4.2.0",
+    "@xterm/addon-serialize": "^0.14.0",
+    "@xterm/headless": "^6.0.0",
+    "@xterm/xterm": "^6.0.0",
     "bonjour-service": "^1.3.0",
     "chokidar": "^4.0.3",
+    "highlight.js": "^11.11.1",
     "ink": "^5.2.1",
     "ink-text-input": "^6.0.0",
+    "marked": "^18.0.3",
     "node-cron": "^3.0.3",
     "node-pty": "^1.1.0",
     "react": "^18.3.1",

apps/ade-cli/package.json

@@ -0,0 +1,4 @@
+allowBuilds:
+  esbuild: set this to true or false
+  node-pty: set this to true or false
+  sqlite3: set this to true or false