feat: Resolver WASM distribution via GitHub Releases (#12)

* refactor: Rename rust_guest wasm

* feat: GitHub Releases for WASM

* refactor: Move deployer distribution to release-please yml

* fix: Deployer iamge workflow fixes

* refactor: Better strucutre the workflows

* refactor: Small wf renaming

* refactor: Change naming slightly

Author: fabriziodemaria

.github/workflows/deployer-image.yml renamed to .github/workflows/ci-cloudflare-deployer.yml

@@ -1,7 +1,8 @@
-name: Build and Push Deployer Image
+name: CloudFlare Deployer Image CI
 
 on:
   push:
+    branches: [ main ]
     paths-ignore:
       - 'wasm/**'
       - 'wasm-msg/**'
@@ -18,7 +19,7 @@ permissions:
 
 jobs:
   docker:
-    name: Build and (conditionally) push image
+    name: Build image
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
@@ -51,12 +52,12 @@ jobs:
             type=semver,pattern={{version}}
             type=raw,value=latest,enable={{is_default_branch}}
 
-      - name: Build (and push on main/tags)
+      - name: Build (no push)
         uses: docker/build-push-action@v6
         with:
           context: .
           file: ./confidence-cloudflare-resolver/deployer/Dockerfile
-          push: ${{ github.event_name == 'push' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/')) }}
+          push: false
           build-args: |
             COMMIT_SHA=${{ github.sha }}
           platforms: linux/amd64

.github/workflows/ci.yml renamed to .github/workflows/ci-wasm.yml

@@ -1,12 +1,12 @@
-name: CI
+name: WASM CI
 
 on:
   pull_request:
   push:
     branches: [ main ]
 
 jobs:
-  build_and_test:
+  Build and test:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout

.github/workflows/release-please.yml

@@ -13,17 +13,96 @@ permissions:
 jobs:
   release:
     runs-on: ubuntu-latest
+    outputs:
+      release_created: ${{ steps.release.outputs.release_created }}
+      tag_name: ${{ steps.release.outputs.tag_name }}
     steps:
       - name: Checkout
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
       - name: Release Please (manifest)
+        id: release
         uses: googleapis/release-please-action@v4
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           config-file: release-please-config.json
           manifest-file: .release-please-manifest.json
 
+  publish-wasm:
+    needs: release
+    if: ${{ needs.release.outputs.release_created == 'true' }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Rust (stable)
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: wasm32-unknown-unknown
+
+      - name: Install protoc
+        run: sudo apt-get update && sudo apt-get install -y protobuf-compiler
+
+      - name: Build WASM artifact
+        run: make wasm/confidence_resolver.wasm
+
+      - name: Upload WASM to GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ needs.release.outputs.tag_name }}
+          files: |
+            wasm/confidence_resolver.wasm
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  publish-cloudflare-deployer-image:
+    needs: release
+    if: ${{ needs.release.outputs.release_created == 'true' }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ghcr.io/${{ github.repository_owner }}/confidence-cloudflare-deployer
+          tags: |
+            type=raw,value=${{ needs.release.outputs.tag_name }}
+            type=raw,value=latest
+
+      - name: Build and push deployer image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: ./confidence-cloudflare-resolver/deployer/Dockerfile
+          push: true
+          build-args: |
+            COMMIT_SHA=${{ github.sha }}
+          platforms: linux/amd64
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+
 

Makefile

@@ -38,26 +38,27 @@ cloudflare-lint:
 	RUSTFLAGS='--cfg getrandom_backend="wasm_js"' cargo clippy -p confidence-cloudflare-resolver --lib --target wasm32-unknown-unknown --release
 
 # Produce a stable artifact location for CI hosts
-wasm/rust_guest.wasm: | rust-guest
-	@echo "Copying rust_guest.wasm to wasm/rust_guest.wasm..."
-	cp target/wasm32-unknown-unknown/wasm/rust_guest.wasm wasm/rust_guest.wasm
+wasm/confidence_resolver.wasm: | rust-guest
+	@echo "Copying rust_guest.wasm to wasm/confidence_resolver.wasm..."
+	cp target/wasm32-unknown-unknown/wasm/rust_guest.wasm wasm/confidence_resolver.wasm
+
 
 # Run examples (depend on stable wasm artifact)
-run-go-host: wasm/rust_guest.wasm
+run-go-host: wasm/confidence_resolver.wasm
 	cd wasm/go-host && bash generate_proto.sh && go run .
 
-run-node-host: wasm/rust_guest.wasm
+run-node-host: wasm/confidence_resolver.wasm
 	cd wasm/node-host && yarn install --frozen-lockfile && yarn proto:gen && yarn start
 
-run-python-host: wasm/rust_guest.wasm
+run-python-host: wasm/confidence_resolver.wasm
 	cd wasm/python-host \
 		&& python3 -m venv .venv \
 		&& .venv/bin/python -m pip install --upgrade pip \
 		&& .venv/bin/python -m pip install --require-virtualenv wasmtime protobuf \
 		&& .venv/bin/python generate_proto.py --out .venv/proto \
 		&& PYTHONPATH=$$(pwd)/.venv:$$(pwd)/.venv/proto:$$PYTHONPATH .venv/bin/python main.py
 
-run-java-host: wasm/rust_guest.wasm
+run-java-host: wasm/confidence_resolver.wasm
 	cd wasm/java-host && mvn -q package exec:java
 
 # Aggregate test runs (only resolver has tests today)

wasm/go-host/main.go

@@ -15,7 +15,7 @@ import (
 
 func main() {
 	// Load the WASM module
-	wasmPath := filepath.Join("..", "rust_guest.wasm")
+	wasmPath := filepath.Join("..", "confidence_resolver.wasm")
 	wasmBytes, err := os.ReadFile(wasmPath)
 	if err != nil {
 		log.Fatalf("Failed to read WASM file: %v", err)

wasm/java-host/src/main/java/com/spotify/confidence/wasmresolvepoc/Main.java

@@ -18,7 +18,7 @@ public class Main {
     private final ResolverApi resolverApi;
 
     public Main() {
-        Path wasmModulePath = Path.of("../rust_guest.wasm");
+        Path wasmModulePath = Path.of("../confidence_resolver.wasm");
         WasmModule module = Parser.parse(wasmModulePath);
         resolverApi = new ResolverApi(module);
 

wasm/node-host/src/index.ts

@@ -8,7 +8,7 @@ import { ApiBuilder } from './wasm-msg.ts';
 const dirname = path.dirname(new URL(import.meta.url).pathname);
 
 // Load the WASM module from shared artifact
-const wasmPath = path.join(dirname, '../../rust_guest.wasm');
+const wasmPath = path.join(dirname, '../../confidence_resolver.wasm');
 const wasmBuffer = fs.readFileSync(wasmPath);
 const resolverState = fs.readFileSync(path.join(dirname, '../../resolver_state.pb'));
 

wasm/python-host/main.py

@@ -11,7 +11,7 @@
 
 def main():
     # Load the WASM module
-    wasm_path = Path(__file__).parent / ".." / "rust_guest.wasm"
+    wasm_path = Path(__file__).parent / ".." / "confidence_resolver.wasm"
     if not wasm_path.exists():
         print(f"WASM file not found: {wasm_path}")
         sys.exit(1)

wasm/rust-guest/Cargo.toml

@@ -4,6 +4,7 @@ version = "0.1.0"
 edition = "2021"
 
 [lib]
+name = "rust_guest"
 crate-type = ["cdylib"]  # This is required for WASM
 
 [dependencies]