Harden release workflows and engine lifecycle

.github/workflows/ci.yml

@@ -3,6 +3,7 @@ on:
   push:
     branches: [main]
   pull_request:
+  workflow_dispatch:
 
 # Rapid successive pushes to one ref cancel in-flight runs (the engines job is
 # the expensive one).
@@ -15,24 +16,26 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: npm
       # --ignore-scripts: skip transitive `sharp` native build (unused; browser only)
       - run: npm ci --ignore-scripts
       - run: npm run test:unit
       - run: npm run build
+      - run: npm run test:integration
+      - run: npm run sdk:test
 
   # Vendored ACE-Step runtime (packages/acestep): typecheck + weight-free
   # vitest suite (artifact-dependent contract tests self-exclude on machines
   # without the gitignored model packages / raw benchmark artifacts).
   acestep:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: npm
@@ -46,8 +49,8 @@ jobs:
   dicose:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: npm
@@ -59,8 +62,8 @@ jobs:
   format:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: npm
@@ -80,8 +83,8 @@ jobs:
   kernels:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: npm
@@ -104,8 +107,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: npm
@@ -129,3 +132,12 @@ jobs:
           key: hf-weights-${{ hashFiles('scripts/ci-weights.lock') }}
       - run: node scripts/textnorm-check.mjs
       - run: node scripts/vocab-rescorer-check.mjs
+
+  deploy:
+    if: github.ref == 'refs/heads/main' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch')
+    needs: [build, acestep, dicose, format, kernels, engines]
+    permissions:
+      contents: read
+      pages: write
+      id-token: write
+    uses: ./.github/workflows/deploy.yml

.github/workflows/deploy.yml

@@ -1,8 +1,6 @@
 name: Deploy to GitHub Pages
 on:
-  push:
-    branches: [main]
-  workflow_dispatch:
+  workflow_call:
 
 # Allow one concurrent deploy; let a new push cancel an in-flight one.
 permissions:
@@ -17,8 +15,8 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: npm

package.json

@@ -45,6 +45,7 @@
     "build": "npm run acestep:build && npm run dicose:build && tsc --noEmit && vite build && node scripts/postbuild-strip-wasm.mjs",
     "preview": "vite preview",
     "test:unit": "node --test test/*.test.mjs",
+    "test:integration": "vitest run --config vitest.config.ts",
     "typecheck": "tsc --noEmit",
     "gpu:verify": "node scripts/gpu-verify.mjs",
     "gpu:bench": "node scripts/gpu-bench.mjs",
@@ -57,11 +58,12 @@
     "wasm:build": "cd rust/wasm-kernels && RUSTFLAGS='-C target-feature=+simd128' cargo build --release --target wasm32-unknown-unknown && cp target/wasm32-unknown-unknown/release/wasm_kernels.wasm ../../src/gpu/wasm-kernels.wasm",
     "wasm:verify": "node scripts/wasm-verify.mjs",
     "backend:parity": "node scripts/backend-parity.mjs",
-    "format": "prettier --write \"src/**/*.{ts,js}\" \"scripts/**/*.mjs\" \"test/**/*.mjs\" \"*.ts\"",
-    "format:check": "prettier --check \"src/**/*.{ts,js}\" \"scripts/**/*.mjs\" \"test/**/*.mjs\" \"*.ts\"",
+    "format": "prettier --write \"src/**/*.{ts,js}\" \"scripts/**/*.mjs\" \"test/**/*.{ts,mjs}\" \"*.ts\"",
+    "format:check": "prettier --check \"src/**/*.{ts,js}\" \"scripts/**/*.mjs\" \"test/**/*.{ts,mjs}\" \"*.ts\"",
     "ci:smoke": "node scripts/interface-conformance.mjs && node scripts/ci-smoke-parakeet.mjs && node scripts/ci-smoke-eou.mjs && node scripts/ci-smoke-kokoro.mjs",
     "sdk:build": "node scripts/build-sdk.mjs",
     "sdk:pack": "node scripts/build-sdk.mjs && cd dist-sdk && npm pack --pack-destination ..",
+    "sdk:test": "npm run sdk:build && node scripts/test-sdk.mjs",
     "conformance": "node scripts/interface-conformance.mjs",
     "conformance:numeric": "node scripts/backend-conformance.mjs"
   },
@@ -72,9 +74,11 @@
   },
   "devDependencies": {
     "@kmamal/gpu": "^0.2.1",
-    "onnxruntime-node": "^1.27.0",
+    "onnxruntime-node": "^1.30.0",
     "prettier": "^3.9.6",
     "typescript": "^5.6.3",
-    "vite": "^6.0.0"
+    "vite": "^6.0.0",
+    "vitest": "^4.1.11",
+    "yaml": "^2.9.1"
   }
 }