chore: add agents context file

.github/CODEOWNERS

@@ -0,0 +1,3 @@
+# The header of Codeowners is autogenerated from https://github.com/integromat/mono. Don’t edit code before END-AUTOGENERATED-SECTION!
+* @integromat/build-run-backend
+### END-AUTOGENERATED-SECTION

.github/workflows/build.yml → .github/workflows/ci.yml

@@ -1,35 +1,36 @@
 name: Build & Test
 
-on: [push, pull_request]
+on:
+  pull_request:
+    paths:
+      - '.github/workflows/ci.yml'
+      - 'src/**'
+      - 'vendor/**'
+      - 'tests/**'
+      - '*.js'
 
 jobs:
   build-and-test:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
         node-version: [ 16.x, 18.x, 20.x ]
-        os: [ ubuntu-latest, macos-latest, windows-latest ]
+        os: [ ubuntu-latest, macos-latest, windows-latest, make-ubuntu24-arm64-2c ]
       fail-fast: false
     steps:
       - uses: actions/checkout@v4
-      # https://github.com/nodejs/node-gyp/issues/2869
-      - run: python3 -m pip install setuptools
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
       - name: Add msbuild to PATH
         if: matrix.os == 'windows-latest'
-        uses: microsoft/setup-msbuild@v1.3
-      - name: Install node-gyp
-        if: matrix.os == 'windows-latest'
-        run: |
-          npm install --global node-gyp@latest
+        uses: microsoft/setup-msbuild@v2
       - name: Build
         run: |
-          npm install --build-from-source
+          npm install && npm run rebuild
       - name: Test
-        uses: nick-fields/retry@v2
+        uses: nick-fields/retry@v3
         with:
           max_attempts: 3
           retry_on: error
@@ -50,7 +51,7 @@ jobs:
           apk add g++ make python3
       - name: Build
         run: |
-          npm install --build-from-source
+          npm install && npm run rebuild
       - name: Test
         run: |
           npm test

.github/workflows/publish.yml

@@ -0,0 +1,102 @@
+name: Publish to NPM with pre-built binaries
+
+on:
+  release:
+    types: [created]
+
+jobs:
+  build-linux:
+    runs-on: ${{ matrix.os }}
+    # This will force build on an older libc version
+    container: node:20-bullseye
+    strategy:
+      matrix:
+        os: [ ubuntu-latest, make-ubuntu24-arm64-2c ]
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Use Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20.x
+          cache: npm
+          cache-dependency-path: 'package-lock.json'
+
+      - name: Install dependencies
+        run: npm ci --ignore-scripts
+
+      - name: Build native extension
+        run: npx prebuildify --napi=false --name isolated-vm --tag-libc -t v16.20.2 -t v18.20.4 -t v20.16.0 --strip
+        env:
+          npm_config_jobs: max # max parallel node-gyp compile jobs
+
+      - name: Archive production artifacts
+        uses: actions/upload-artifact@v3
+        with:
+          name: binaries-${{ matrix.os }}
+          path: ./prebuilds
+
+  build-others:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [windows-latest, macos-latest]
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Use Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20.x
+          cache: npm
+          cache-dependency-path: 'package-lock.json'
+
+      - name: Install dependencies
+        run: npm ci --ignore-scripts
+
+      - name: Add msbuild to PATH
+        if: matrix.os == 'windows-latest'
+        uses: microsoft/setup-msbuild@v2
+
+      - name: Build native extension
+        run: npx prebuildify --napi=false --name isolated-vm -t v16.20.2 -t v18.20.4 -t v20.16.0 --strip
+        env:
+          npm_config_jobs: max # max parallel node-gyp compile jobs
+
+      - name: Archive production artifacts
+        uses: actions/upload-artifact@v3
+        with:
+          name: binaries-${{ matrix.os }}
+          path: ./prebuilds
+
+  publish:
+    needs:
+      - build-others
+      - build-linux
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Use Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20.x
+          cache: npm
+          cache-dependency-path: 'package-lock.json'
+          registry-url: 'https://registry.npmjs.org'
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Install dependencies
+        run: npm ci --ignore-scripts
+
+      - name: Download all artifacts
+        uses: actions/download-artifact@v3
+        with:
+          path: /tmp/artifacts
+
+      - name: Move artifacts to prebuilds directory
+        run: mkdir --parents ./prebuilds && cp --recursive /tmp/artifacts/binaries-*/* ./prebuilds
+
+      - name: Publish to NPM
+        run: npm publish

.github/workflows/validate-pr.yml

@@ -0,0 +1,50 @@
+######
+# This file is autogenerated from https://github.com/integromat/mono/blob/master/libs/github-resources/src/repositories/isolated-vm.ts. Do not edit manually!!!
+######
+
+name: PR
+on:
+  pull_request:
+    types:
+      - opened
+      - reopened
+      - synchronize
+      - labeled
+      - unlabeled
+      - edited
+  merge_group:
+
+# run only latest workflow, cancel other runs of this workflow
+concurrency:
+  group: validate-pr-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  FORCE_COLOR: '1'
+
+jobs:
+  validate-pr:
+    name: Validate PR
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      issues: write
+      pull-requests: write
+      contents: read
+    env:
+      NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+      GITHUB_TOKEN: ${{ github.token }}
+    steps:
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+        if: github.event_name != 'merge_group'
+
+      - name: Setup Node.js
+        if: github.event_name != 'merge_group'
+        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
+        with:
+          registry-url: https://registry.npmjs.org
+          node-version: '>=20.0'
+
+      - name: Validate PR
+        if: github.event_name != 'merge_group'
+        run: npx @integromat/actions-toolkit validate-pr --skipPrDescriptionLengthValidation

.gitignore

@@ -1,6 +1,5 @@
 build/
 node_modules/
-package-lock.json
 out/
 .cache/
 compile_commands.json

.npmignore

@@ -2,9 +2,9 @@ test.js
 tests
 out/
 build/
-prebuild/
 .github/
 .prebuildrc
 .travis.yml
+.clang-tidy
 .vscode/
 *.md