[
{
"path": ".branding",
"content": "https://github.com/Keavon/graphite-branded-assets/archive/8ae15dc9c51a3855475d8cab1d0f29d9d9bc622c.tar.gz\nc19abe4ac848f3c835e43dc065c59e20e60233ae023ea0a064c5fed442be2d3d\n"
},
{
"path": ".cargo/config.toml",
"content": "[target.wasm32-unknown-unknown]\nrustflags = [\n\t# Currently disabled because of https://github.com/GraphiteEditor/Graphite/issues/1262\n\t# The current simd implementation leads to undefined behavior\n\t#\"-C\",\n\t#\"target-feature=+simd128\",\n\t\"-C\",\n\t\"target-feature=+bulk-memory\",\n\t\"-C\",\n\t\"link-arg=--max-memory=4294967296\",\n\t\"--cfg=web_sys_unstable_apis\",\n]\n\n[env]\nCARGO_WORKSPACE_DIR = { value = \"\", relative = true }\n"
},
{
"path": ".devcontainer/devcontainer.json",
"content": "{\n\t\"image\": \"mcr.microsoft.com/devcontainers/base:debian\",\n\t\"features\": {\n\t\t\"ghcr.io/devcontainers/features/rust:1\": {\n\t\t\t\"profile\": \"default\"\n\t\t},\n\t\t\"ghcr.io/devcontainers/features/node:1\": {}\n\t},\n\t\"onCreateCommand\": \"cargo install cargo-watch wasm-pack cargo-about && cargo install -f wasm-bindgen-cli@0.2.100\",\n\t\"customizations\": {\n\t\t\"vscode\": {\n\t\t\t// NOTE: Keep this in sync with `.vscode/extensions.json`\n\t\t\t\"extensions\": [\n\t\t\t\t// Rust\n\t\t\t\t\"rust-lang.rust-analyzer\",\n\t\t\t\t\"tamasfe.even-better-toml\",\n\t\t\t\t// Web\n\t\t\t\t\"dbaeumer.vscode-eslint\",\n\t\t\t\t\"svelte.svelte-vscode\",\n\t\t\t\t\"vitaliymaz.vscode-svg-previewer\",\n\t\t\t\t// Code quality\n\t\t\t\t\"wayou.vscode-todo-highlight\",\n\t\t\t\t\"streetsidesoftware.code-spell-checker\",\n\t\t\t\t// Helpful\n\t\t\t\t\"mhutchie.git-graph\",\n\t\t\t\t\"qezhu.gitlink\",\n\t\t\t\t\"wmaurer.change-case\"\n\t\t\t]\n\t\t}\n\t}\n}\n"
},
{
"path": ".editorconfig",
"content": "[*.{rs,js,ts,svelte,json,toml,svg,html,css,scss}]\nindent_style = tab\nindent_size = 4\nend_of_line = lf\ntrim_trailing_whitespace = true\ninsert_final_newline = true\nmax_line_length = 200\n"
},
{
"path": ".envrc",
"content": "use flake\n"
},
{
"path": ".gitattributes",
"content": "# Requires Git to check out files with the LF (not CRLF) line endings for files it automatically recognizes as being text-based\n# The `*` targets all files\n# The `text=auto` makes it apply a conversion only to files detected as text-based\n# The `eol=lf` sets the conversion to an LF line ending\n# https://git-scm.com/docs/gitattributes\n* text=auto eol=lf\n\n# Adds syntax highlighting to Graphite files on GitHub and minimizes diffs both locally and on GitHub\n*.graphite binary linguist-generated linguist-language=JSON\n/node-graph/graphene-cli/test_files/*.graphite text diff -linguist-generated\n"
},
{
"path": ".github/FUNDING.yml",
"content": "github: [GraphiteEditor]\n"
},
{
"path": ".github/pull_request_template.md",
"content": "\n"
},
{
"path": ".github/workflows/build.yml",
"content": "name: \"Build\"\n\non:\n push:\n branches:\n - master\n tags:\n - latest-stable\n workflow_dispatch:\n inputs:\n web:\n description: \"Web\"\n type: boolean\n windows:\n description: \"Windows\"\n type: boolean\n mac:\n description: \"Mac\"\n type: boolean\n linux:\n description: \"Linux\"\n type: boolean\n push_to_nix_cache:\n description: \"Linux: push to Nix cache\"\n type: boolean\n debug:\n description: \"Debug build\"\n type: boolean\n workflow_call:\n inputs:\n web:\n type: boolean\n windows:\n type: boolean\n mac:\n type: boolean\n linux:\n type: boolean\n push_to_nix_cache:\n type: boolean\n debug:\n type: boolean\n checkout_repo:\n type: string\n checkout_ref:\n type: string\n pr_number:\n type: string\n\njobs:\n web:\n if: github.event_name == 'push' || inputs.web\n runs-on: [self-hosted, target/wasm]\n permissions:\n contents: write\n deployments: write\n pull-requests: write\n actions: write\n env:\n CARGO_TERM_COLOR: always\n RUSTC_WRAPPER: /usr/bin/sccache\n CARGO_INCREMENTAL: 0\n SCCACHE_DIR: /var/lib/github-actions/.cache\n steps:\n - name: ๐ฅ Clone repository\n uses: actions/checkout@v6\n with:\n repository: ${{ inputs.checkout_repo || github.repository }}\n ref: ${{ inputs.checkout_ref || '' }}\n\n - name: ๐ Clear wasm-bindgen cache\n run: rm -r ~/.cache/.wasm-pack || true\n\n - name: ๐ข Install Node.js\n uses: actions/setup-node@v6\n with:\n node-version-file: .nvmrc\n\n - name: ๐ง Install build dependencies\n run: |\n cd frontend\n npm run setup\n\n - name: ๐ฆ Install Rust\n uses: actions-rust-lang/setup-rust-toolchain@v1\n with:\n toolchain: stable\n override: true\n cache: false\n rustflags: \"\"\n target: wasm32-unknown-unknown\n\n - name: ๐ Choose production deployment environment and insert template\n id: production-env\n if: github.event_name == 'push'\n run: |\n if [[ \"${{ github.ref }}\" == \"refs/tags/latest-stable\" ]]; then\n echo \"cf_project=graphite-editor\" >> $GITHUB_OUTPUT\n DOMAIN=\"editor.graphite.art\"\n else\n echo \"cf_project=graphite-dev\" >> $GITHUB_OUTPUT\n DOMAIN=\"dev.graphite.art\"\n fi\n TEMPLATE=\"\"\n echo \"template=$TEMPLATE\" >> $GITHUB_OUTPUT\n sed -i \"s||$TEMPLATE|\" frontend/index.html\n\n - name: ๐ Build Graphite web code\n env:\n NODE_ENV: production\n run: mold -run cargo run build web${{ inputs.debug && ' debug' || '' }}\n\n - name: ๐ค Publish to Cloudflare Pages\n id: cloudflare\n continue-on-error: ${{ github.event_name != 'push' }}\n env:\n CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}\n CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}\n run: |\n if [ -z \"$CLOUDFLARE_API_TOKEN\" ]; then\n echo \"No Cloudflare API token available (fork PR), skipping deploy.\"\n exit 0\n fi\n MAX_ATTEMPTS=8\n DELAY=15\n for ATTEMPT in $(seq 1 $MAX_ATTEMPTS); do\n echo \"Attempt $ATTEMPT of $MAX_ATTEMPTS...\"\n npx wrangler@3 pages deploy \"frontend/dist\" --project-name=\"${{ steps.production-env.outputs.cf_project || 'graphite-dev' }}\" --commit-dirty=true 2>&1 | tee /tmp/wrangler_output\n if [ ${PIPESTATUS[0]} -eq 0 ]; then\n URL=$(grep -oP 'https://[^\\s]+\\.pages\\.dev' /tmp/wrangler_output | head -1)\n echo \"url=$URL\" >> \"$GITHUB_OUTPUT\"\n echo \"Published successfully: $URL\"\n exit 0\n fi\n echo \"Attempt $ATTEMPT failed.\"\n if [ \"$ATTEMPT\" -lt \"$MAX_ATTEMPTS\" ]; then\n echo \"Retrying in ${DELAY}s...\"\n sleep $DELAY\n DELAY=$((DELAY * 2))\n fi\n done\n echo \"All $MAX_ATTEMPTS Cloudflare Pages publish attempts failed.\"\n exit 1\n\n - name: ๐ Create a GitHub environment deployment\n if: inputs.checkout_repo == '' || inputs.checkout_repo == github.repository\n env:\n GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}\n CF_URL: ${{ steps.cloudflare.outputs.url }}\n run: |\n if [ -z \"$CF_URL\" ]; then\n echo \"No Cloudflare URL available, skipping deployment.\"\n exit 0\n fi\n if [ \"${{ github.ref }}\" = \"refs/tags/latest-stable\" ]; then\n REF=\"latest-stable\"\n ENVIRONMENT=\"graphite-editor (Production)\"\n elif [ \"${{ github.event_name }}\" = \"push\" ]; then\n REF=\"master\"\n ENVIRONMENT=\"graphite-dev (Production)\"\n else\n REF=\"${{ inputs.checkout_ref || github.head_ref || github.ref_name }}\"\n ENVIRONMENT=\"graphite-dev (Preview)\"\n fi\n DEPLOY_ID=$(gh api \\\n -X POST \\\n -H \"Accept: application/vnd.github+json\" \\\n repos/${{ github.repository }}/deployments \\\n --input - \\\n --jq '.id' </dev/null || true)\n fi\n\n if [ -n \"$PR_NUMBER\" ]; then\n gh pr comment \"$PR_NUMBER\" --repo ${{ github.repository }} --body \"$COMMENT_BODY\"\n else\n echo \"No open PR found, skipping comment.\"\n fi\n fi\n\n - name: โ Strip template from completed build for a clean artifact\n if: github.event_name == 'push'\n env:\n TEMPLATE: ${{ steps.production-env.outputs.template }}\n run: sed -i \"s|$TEMPLATE||\" frontend/dist/index.html\n\n - name: ๐ฆ Upload web bundle artifact\n if: github.event_name != 'pull_request'\n uses: actions/upload-artifact@v6\n with:\n name: graphite-web-bundle\n path: frontend/dist\n\n - name: ๐ Lint Graphite web formatting\n env:\n NODE_ENV: production\n run: |\n cd frontend\n npm run check\n\n - name: ๐ Trigger website rebuild if auto-generated code docs are stale\n if: github.event_name == 'push' && github.ref != 'refs/tags/latest-stable'\n env:\n GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}\n run: |\n cargo run -p editor-message-tree -- website/generated\n TREE=volunteer/guide/codebase-overview/hierarchical-message-system-tree\n curl -sf \"https://graphite.art/$TREE.txt\" -o \"website/static/$TREE.live.txt\" \\\n && diff -q \"website/static/$TREE.txt\" \"website/static/$TREE.live.txt\" > /dev/null \\\n || gh workflow run website.yml --ref master\n\n windows:\n if: (github.event_name == 'push' && github.ref != 'refs/tags/latest-stable') || inputs.windows\n runs-on: windows-latest\n permissions:\n contents: read\n id-token: write\n pull-requests: write\n\n env:\n WASM_BINDGEN_CLI_VERSION: \"0.2.100\"\n\n steps:\n - name: ๐ฅ Clone repository\n uses: actions/checkout@v6\n with:\n repository: ${{ inputs.checkout_repo || github.repository }}\n ref: ${{ inputs.checkout_ref || '' }}\n\n - name: ๐ฆ Install Rust\n uses: actions-rust-lang/setup-rust-toolchain@v1\n with:\n toolchain: stable\n override: true\n cache: false\n rustflags: \"\"\n target: wasm32-unknown-unknown\n\n - name: ๐พ Set up Cargo cache\n uses: actions/cache@v5\n with:\n path: |\n ~/.cargo/registry\n ~/.cargo/git\n target\n key: cargo-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}\n\n - name: ๐ข Install Node.js\n uses: actions/setup-node@v6\n with:\n node-version-file: .nvmrc\n cache: npm\n cache-dependency-path: |\n package-lock.json\n frontend/package-lock.json\n\n - name: ๐ฆ Install Cargo-binstall\n uses: cargo-bins/cargo-binstall@main\n\n - name: ๐ง Install native dependencies\n shell: pwsh\n env:\n GITHUB_TOKEN: ${{ github.token }}\n BINSTALL_DISABLE_TELEMETRY: \"true\"\n run: |\n winget install --id LLVM.LLVM -e --accept-package-agreements --accept-source-agreements\n winget install --id Kitware.CMake -e --accept-package-agreements --accept-source-agreements\n winget install --id OpenSSL.OpenSSL -e --accept-package-agreements --accept-source-agreements\n winget install --id WebAssembly.Binaryen -e --accept-package-agreements --accept-source-agreements\n winget install --id GnuWin32.PkgConfig -e --accept-package-agreements --accept-source-agreements\n\n \"OPENSSL_DIR=C:\\Program Files\\OpenSSL-Win64\" | Out-File -FilePath $env:GITHUB_ENV -Append\n \"PKG_CONFIG_PATH=C:\\Program Files\\OpenSSL-Win64\\lib\\pkgconfig\" | Out-File -FilePath $env:GITHUB_ENV -Append\n\n cargo binstall --no-confirm --force wasm-pack\n cargo binstall --no-confirm --force cargo-about\n cargo binstall --no-confirm --force \"wasm-bindgen-cli@$env:WASM_BINDGEN_CLI_VERSION\"\n\n - name: ๐ Build Windows bundle\n shell: bash # `cargo-about` refuses to run in powershell\n env:\n CARGO_TERM_COLOR: always\n run: cargo run build desktop${{ inputs.debug && ' debug' || '' }}\n\n - name: ๐ Stage artifacts\n shell: bash\n run: |\n PROFILE=${{ inputs.debug && 'debug' || 'release' }}\n rm -rf target/artifacts\n mkdir -p target/artifacts\n cp -R target/$PROFILE/Graphite target/artifacts/Graphite\n\n - name: ๐ฆ Upload Windows bundle\n if: github.event_name != 'push'\n uses: actions/upload-artifact@v6\n with:\n name: graphite-windows-bundle\n path: target/artifacts\n\n - name: ๐ฌ Comment artifact link on PR\n if: github.event_name != 'push'\n shell: bash\n env:\n GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}\n run: |\n ARTIFACT_ID=$(gh api repos/${{ github.repository }}/actions/runs/${{ github.run_id }}/artifacts --jq '.artifacts[] | select(.name == \"graphite-windows-bundle\") | .id')\n ARTIFACT_URL=\"https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}/artifacts/$ARTIFACT_ID\"\n PR_NUMBER=\"${{ inputs.pr_number }}\"\n if [ -z \"$PR_NUMBER\" ]; then\n BRANCH=$(git rev-parse --abbrev-ref HEAD)\n PR_NUMBER=$(gh pr list --repo ${{ github.repository }} --head \"$BRANCH\" --json number --jq '.[0].number' 2>/dev/null || true)\n fi\n if [ -n \"$PR_NUMBER\" ] && [ -n \"$ARTIFACT_ID\" ]; then\n BODY=\"| ๐ฆ **Windows Build Complete for** $(git rev-parse HEAD) |\"$'\\n'\n BODY+=\"|-|\"$'\\n'\n BODY+=\"| [Download binary]($ARTIFACT_URL) |\"\n gh pr comment \"$PR_NUMBER\" --repo ${{ github.repository }} --body \"$BODY\"\n fi\n\n - name: ๐ Azure login\n if: github.event_name == 'push'\n uses: azure/login@v1\n with:\n client-id: ${{ secrets.AZURE_CLIENT_ID }}\n tenant-id: ${{ secrets.AZURE_TENANT_ID }}\n subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}\n enable-AzPSSession: true\n\n - name: ๐ Sign\n if: github.event_name == 'push'\n uses: azure/artifact-signing-action@v1\n with:\n endpoint: https://eus.codesigning.azure.net/\n signing-account-name: Graphite\n certificate-profile-name: Graphite\n files: |\n ${{ github.workspace }}\\target\\artifacts\\Graphite\\Graphite.exe\n ${{ github.workspace }}\\target\\artifacts\\Graphite\\libcef.dll\n ${{ github.workspace }}\\target\\artifacts\\Graphite\\chrome_elf.dll\n ${{ github.workspace }}\\target\\artifacts\\Graphite\\vulkan-1.dll\n ${{ github.workspace }}\\target\\artifacts\\Graphite\\dxcompiler.dll\n ${{ github.workspace }}\\target\\artifacts\\Graphite\\libEGL.dll\n ${{ github.workspace }}\\target\\artifacts\\Graphite\\libGLESv2.dll\n ${{ github.workspace }}\\target\\artifacts\\Graphite\\vk_swiftshader.dll\n file-digest: SHA256\n timestamp-rfc3161: http://timestamp.acs.microsoft.com\n timestamp-digest: SHA256\n correlation-id: ${{ github.sha }}\n\n - name: โ
Verify signatures\n if: github.event_name == 'push'\n shell: pwsh\n run: |\n $ErrorActionPreference = \"Stop\"\n\n $TargetDir = \"target\\artifacts\\Graphite\"\n\n if (-not (Test-Path $TargetDir)) {\n throw \"TargetDir not found: $TargetDir\"\n }\n\n $UnsignedOrBad = @()\n\n Get-ChildItem -Path $TargetDir -Recurse -File -Include *.exe,*.dll | ForEach-Object {\n $sig = Get-AuthenticodeSignature -FilePath $_.FullName\n\n if ($sig.Status -ne 'Valid') {\n $UnsignedOrBad += \"$($_.FullName) (Status=$($sig.Status))\"\n }\n }\n\n if ($UnsignedOrBad.Count -gt 0) {\n Write-Host \"Unsigned or invalid binaries detected:\"\n $UnsignedOrBad | ForEach-Object {\n Write-Host \"::error::$_\"\n }\n\n if ($env:GITHUB_STEP_SUMMARY) {\n \"### โ Unsigned or invalid binaries detected\" |\n Out-File $env:GITHUB_STEP_SUMMARY -Append -Encoding utf8\n \"\" | Out-File $env:GITHUB_STEP_SUMMARY -Append -Encoding utf8\n $UnsignedOrBad | ForEach-Object {\n \"* `$_\" | Out-File $env:GITHUB_STEP_SUMMARY -Append -Encoding utf8\n }\n }\n\n exit 1\n }\n\n Write-Host \"All binaries are signed and valid.\"\n\n if ($env:GITHUB_STEP_SUMMARY) {\n \"### โ
All binaries are signed and valid\" |\n Out-File $env:GITHUB_STEP_SUMMARY -Append -Encoding utf8\n }\n\n - name: ๐ฆ Upload signed Windows bundle\n if: github.event_name == 'push'\n uses: actions/upload-artifact@v6\n with:\n name: graphite-windows-bundle-signed\n path: target/artifacts\n\n mac:\n if: (github.event_name == 'push' && github.ref != 'refs/tags/latest-stable') || inputs.mac\n runs-on: macos-latest\n permissions:\n contents: read\n pull-requests: write\n\n env:\n WASM_BINDGEN_CLI_VERSION: \"0.2.100\"\n\n steps:\n - name: ๐ฅ Clone repository\n uses: actions/checkout@v6\n with:\n repository: ${{ inputs.checkout_repo || github.repository }}\n ref: ${{ inputs.checkout_ref || '' }}\n\n - name: ๐ฆ Install Rust\n uses: actions-rust-lang/setup-rust-toolchain@v1\n with:\n toolchain: stable\n override: true\n cache: false\n rustflags: \"\"\n target: wasm32-unknown-unknown\n\n - name: ๐พ Set up Cargo cache\n uses: actions/cache@v5\n with:\n path: |\n ~/.cargo/registry\n ~/.cargo/git\n target\n key: cargo-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}\n\n - name: ๐ข Install Node.js\n uses: actions/setup-node@v6\n with:\n node-version-file: .nvmrc\n cache: npm\n cache-dependency-path: |\n package-lock.json\n frontend/package-lock.json\n\n - name: ๐ง Install native dependencies\n env:\n GITHUB_TOKEN: ${{ github.token }}\n BINSTALL_DISABLE_TELEMETRY: \"true\"\n run: |\n brew update\n brew install \\\n pkg-config \\\n openssl@3 \\\n binaryen \\\n llvm \\\n cargo-binstall\n\n echo \"OPENSSL_DIR=$(brew --prefix openssl@3)\" >> $GITHUB_ENV\n echo \"PKG_CONFIG_PATH=$(brew --prefix openssl@3)/lib/pkgconfig\" >> $GITHUB_ENV\n echo \"$(brew --prefix llvm)/bin\" >> $GITHUB_PATH\n\n cargo binstall --no-confirm --force wasm-pack\n cargo binstall --no-confirm --force cargo-about\n cargo binstall --no-confirm --force \"wasm-bindgen-cli@${WASM_BINDGEN_CLI_VERSION}\"\n\n - name: ๐ Build Mac bundle\n env:\n CARGO_TERM_COLOR: always\n run: cargo run build desktop${{ inputs.debug && ' debug' || '' }}\n\n - name: ๐ Stage artifacts\n shell: bash\n run: |\n PROFILE=${{ inputs.debug && 'debug' || 'release' }}\n rm -rf target/artifacts\n mkdir -p target/artifacts\n cp -R target/$PROFILE/Graphite.app target/artifacts/Graphite.app\n\n - name: ๐ฆ Upload Mac bundle\n if: github.event_name != 'push'\n uses: actions/upload-artifact@v6\n with:\n name: graphite-mac-bundle\n path: target/artifacts\n\n - name: ๐ฌ Comment artifact link on PR\n if: github.event_name != 'push'\n env:\n GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}\n run: |\n ARTIFACT_ID=$(gh api repos/${{ github.repository }}/actions/runs/${{ github.run_id }}/artifacts --jq '.artifacts[] | select(.name == \"graphite-mac-bundle\") | .id')\n ARTIFACT_URL=\"https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}/artifacts/$ARTIFACT_ID\"\n PR_NUMBER=\"${{ inputs.pr_number }}\"\n if [ -z \"$PR_NUMBER\" ]; then\n BRANCH=$(git rev-parse --abbrev-ref HEAD)\n PR_NUMBER=$(gh pr list --repo ${{ github.repository }} --head \"$BRANCH\" --json number --jq '.[0].number' 2>/dev/null || true)\n fi\n if [ -n \"$PR_NUMBER\" ] && [ -n \"$ARTIFACT_ID\" ]; then\n BODY=\"| ๐ฆ **Mac Build Complete for** $(git rev-parse HEAD) |\"$'\\n'\n BODY+=\"|-|\"$'\\n'\n BODY+=\"| [Download binary]($ARTIFACT_URL) |\"\n gh pr comment \"$PR_NUMBER\" --repo ${{ github.repository }} --body \"$BODY\"\n fi\n\n - name: ๐ Sign and notarize (preparation)\n if: github.event_name == 'push'\n env:\n APPLE_CERT_BASE64: ${{ secrets.APPLE_CERT_BASE64 }}\n APPLE_CERT_PASSWORD: ${{ secrets.APPLE_CERT_PASSWORD }}\n run: |\n mkdir -p .sign\n echo \"$APPLE_CERT_BASE64\" | base64 --decode > .sign/certificate.p12\n\n security create-keychain -p \"\" .sign/main.keychain\n security default-keychain -s .sign/main.keychain\n security unlock-keychain -p \"\" .sign/main.keychain\n security set-keychain-settings -t 3600 -u .sign/main.keychain\n\n security import .sign/certificate.p12 -k .sign/main.keychain -P \"$APPLE_CERT_PASSWORD\" -T /usr/bin/codesign -T /usr/bin/productsign\n security set-key-partition-list -S apple-tool:,apple: -s -k \"\" .sign/main.keychain\n\n cat > .sign/entitlements.plist <<'EOF'\n \n \n \n \n com.apple.security.cs.allow-jit\n \n com.apple.security.cs.allow-unsigned-executable-memory\n \n com.apple.security.cs.disable-executable-page-protection\n \n com.apple.security.cs.disable-library-validation\n \n \n \n EOF\n\n - name: ๐ Sign and notarize\n if: github.event_name == 'push'\n env:\n APPLE_EMAIL: ${{ secrets.APPLE_EMAIL }}\n APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}\n APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}\n APPLE_CERT_NAME: ${{ secrets.APPLE_CERT_NAME }}\n run: |\n CERTIFICATE=\"$APPLE_CERT_NAME\"\n ENTITLEMENTS=\".sign/entitlements.plist\"\n APP_PATH=\"target/artifacts/Graphite.app\"\n ZIP_PATH=\".sign/Graphite.zip\"\n\n codesign --force --options runtime --entitlements \"$ENTITLEMENTS\" --sign \"$CERTIFICATE\" \"$APP_PATH/Contents/Frameworks/Graphite Helper.app\"\n codesign --force --options runtime --entitlements \"$ENTITLEMENTS\" --sign \"$CERTIFICATE\" \"$APP_PATH/Contents/Frameworks/Graphite Helper (GPU).app\"\n codesign --force --options runtime --entitlements \"$ENTITLEMENTS\" --sign \"$CERTIFICATE\" \"$APP_PATH/Contents/Frameworks/Graphite Helper (Renderer).app\"\n codesign --force --options runtime --entitlements \"$ENTITLEMENTS\" --sign \"$CERTIFICATE\" \"$APP_PATH/Contents/Frameworks/Chromium Embedded Framework.framework\"\n codesign --force --options runtime --entitlements \"$ENTITLEMENTS\" --sign \"$CERTIFICATE\" \"$APP_PATH/Contents/Frameworks/Chromium Embedded Framework.framework/Libraries/libcef_sandbox.dylib\"\n codesign --force --options runtime --entitlements \"$ENTITLEMENTS\" --sign \"$CERTIFICATE\" \"$APP_PATH/Contents/Frameworks/Chromium Embedded Framework.framework/Libraries/libEGL.dylib\"\n codesign --force --options runtime --entitlements \"$ENTITLEMENTS\" --sign \"$CERTIFICATE\" \"$APP_PATH/Contents/Frameworks/Chromium Embedded Framework.framework/Libraries/libGLESv2.dylib\"\n codesign --force --options runtime --entitlements \"$ENTITLEMENTS\" --sign \"$CERTIFICATE\" \"$APP_PATH/Contents/Frameworks/Chromium Embedded Framework.framework/Libraries/libvk_swiftshader.dylib\"\n codesign --force --options runtime --entitlements \"$ENTITLEMENTS\" --sign \"$CERTIFICATE\" \"$APP_PATH\" --deep\n\n codesign --verify --deep --strict --verbose=4 \"$APP_PATH\"\n\n ditto -c -k --keepParent \"$APP_PATH\" \"$ZIP_PATH\"\n xcrun notarytool submit \"$ZIP_PATH\" --wait --apple-id \"$APPLE_EMAIL\" --team-id \"$APPLE_TEAM_ID\" --password \"$APPLE_PASSWORD\"\n rm \"$ZIP_PATH\"\n\n xcrun stapler staple -v \"$APP_PATH\"\n\n spctl -a -vv \"$APP_PATH\"\n\n - name: ๐ฆ Upload signed Mac bundle\n if: github.event_name == 'push'\n uses: actions/upload-artifact@v6\n with:\n name: graphite-mac-bundle-signed\n path: target/artifacts\n\n linux:\n if: (github.event_name == 'push' && github.ref != 'refs/tags/latest-stable') || inputs.linux\n runs-on: ubuntu-latest\n permissions:\n contents: read\n pull-requests: write\n\n steps:\n - name: ๐ฅ Clone repository\n uses: actions/checkout@v6\n with:\n repository: ${{ inputs.checkout_repo || github.repository }}\n ref: ${{ inputs.checkout_ref || '' }}\n\n - name: โ Install Nix\n uses: DeterminateSystems/nix-installer-action@main\n\n - name: ๐ Free disk space\n run: sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache\n\n - name: ๐ฆ Build Nix package\n run: nix build .#graphite${{ inputs.debug && '-dev' || '' }} --no-link --print-out-paths\n\n - name: ๐ค Push to Nix cache\n if: (github.event_name == 'push' || inputs.push_to_nix_cache) && !inputs.debug\n env:\n NIX_CACHE_AUTH_TOKEN: ${{ secrets.NIX_CACHE_AUTH_TOKEN }}\n run: |\n nix run nixpkgs#cachix -- authtoken $NIX_CACHE_AUTH_TOKEN\n nix build --no-link --print-out-paths | nix run nixpkgs#cachix -- push graphite\n\n - name: ๐ Build Linux bundle\n run: nix build .#graphite${{ inputs.debug && '-dev' || '' }}-bundle.tar.xz && cp ./result ./graphite-linux-bundle.tar.xz\n\n - name: ๐ฆ Upload Linux bundle\n uses: actions/upload-artifact@v6\n with:\n name: graphite-linux-bundle\n path: graphite-linux-bundle.tar.xz\n compression-level: 0\n\n - name: ๐ฌ Comment artifact link on PR\n id: linux-comment\n if: github.event_name != 'push'\n env:\n GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}\n run: |\n ARTIFACT_ID=$(gh api repos/${{ github.repository }}/actions/runs/${{ github.run_id }}/artifacts --jq '.artifacts[] | select(.name == \"graphite-linux-bundle\") | .id')\n ARTIFACT_URL=\"https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}/artifacts/$ARTIFACT_ID\"\n PR_NUMBER=\"${{ inputs.pr_number }}\"\n if [ -z \"$PR_NUMBER\" ]; then\n BRANCH=$(git rev-parse --abbrev-ref HEAD)\n PR_NUMBER=$(gh pr list --repo ${{ github.repository }} --head \"$BRANCH\" --json number --jq '.[0].number' 2>/dev/null || true)\n fi\n if [ -n \"$PR_NUMBER\" ] && [ -n \"$ARTIFACT_ID\" ]; then\n BODY=\"| ๐ฆ **Linux Build Complete for** $(git rev-parse HEAD) |\"$'\\n'\n BODY+=\"|-|\"$'\\n'\n BODY+=\"| [Download binary]($ARTIFACT_URL) |\"\n COMMENT_ID=$(gh api repos/${{ github.repository }}/issues/$PR_NUMBER/comments -f body=\"$BODY\" --jq '.id')\n echo \"comment_id=$COMMENT_ID\" >> \"$GITHUB_OUTPUT\"\n fi\n\n - name: ๐ง Install Flatpak tooling\n run: |\n sudo apt-get update\n sudo apt-get install -y flatpak flatpak-builder\n flatpak --user remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo\n\n - name: ๐ Build Flatpak\n run: |\n nix build .#graphite${{ inputs.debug && '-dev' || '' }}-flatpak-manifest\n\n rm -rf .flatpak\n mkdir -p .flatpak\n\n cp ./result .flatpak/manifest.json\n\n cd .flatpak\n mkdir -p repo\n\n flatpak-builder --user --force-clean --install-deps-from=flathub --repo=repo build ./manifest.json\n\n flatpak build-bundle repo Graphite.flatpak art.graphite.Graphite --runtime-repo=https://flathub.org/repo/flathub.flatpakrepo\n\n - name: ๐ฆ Upload Flatpak package\n uses: actions/upload-artifact@v6\n with:\n name: graphite-flatpak\n path: .flatpak/Graphite.flatpak\n compression-level: 0\n\n - name: ๐ฌ Update PR comment with Flatpak artifact link\n if: github.event_name != 'push' && steps.linux-comment.outputs.comment_id\n env:\n GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}\n run: |\n ARTIFACT_ID=$(gh api repos/${{ github.repository }}/actions/runs/${{ github.run_id }}/artifacts --jq '.artifacts[] | select(.name == \"graphite-flatpak\") | .id')\n ARTIFACT_URL=\"https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}/artifacts/$ARTIFACT_ID\"\n COMMENT_ID=\"${{ steps.linux-comment.outputs.comment_id }}\"\n if [ -n \"$ARTIFACT_ID\" ]; then\n EXISTING_BODY=$(gh api repos/${{ github.repository }}/issues/comments/$COMMENT_ID --jq '.body')\n BODY=\"$EXISTING_BODY\"$'\\n'\n BODY+=\"| [Download Flatpak]($ARTIFACT_URL) |\"\n gh api repos/${{ github.repository }}/issues/comments/$COMMENT_ID -X PATCH -f body=\"$BODY\"\n fi\n"
},
{
"path": ".github/workflows/cargo-deny.yml",
"content": "name: \"Audit Security Advisories\"\n\non:\n # Run once each week\n schedule:\n - cron: \"0 0 * * 0\"\n\njobs:\n cargo-deny:\n if: github.repository == 'GraphiteEditor/Graphite' # Don't run on forks by default\n runs-on: ubuntu-latest\n\n steps:\n - name: ๐ฅ Clone repository\n uses: actions/checkout@v6\n\n - name: ๐ Check crate security advisories for root workspace\n uses: EmbarkStudios/cargo-deny-action@v2\n with:\n command: check advisories\n\n - name: ๐ Check crate security advisories for /libraries/rawkit\n uses: EmbarkStudios/cargo-deny-action@v2\n with:\n command: check advisories\n manifest-path: libraries/rawkit/Cargo.toml\n"
},
{
"path": ".github/workflows/check.yml",
"content": "name: \"Check\"\n\non:\n pull_request: {}\n merge_group: {}\n\nenv:\n CARGO_TERM_COLOR: always\n\njobs:\n # Check if CI can be skipped (for merge queue deduplication)\n skip-check:\n runs-on: ubuntu-latest\n outputs:\n skip: ${{ steps.check.outputs.skip-check }}\n steps:\n - name: ๐ฅ Clone repository\n uses: actions/checkout@v6\n\n - name: ๐ฆ Check if CI can be skipped\n id: check\n uses: cariad-tech/merge-queue-ci-skipper@cf80db21fc70244e36487acc531b3f1118889b0a\n\n # Build the web app via the shared build workflow\n build:\n needs: skip-check\n if: needs.skip-check.outputs.skip != 'true'\n uses: ./.github/workflows/build.yml\n secrets: inherit\n with:\n web: true\n\n # Run the Rust tests on the self-hosted native runner\n test:\n needs: skip-check\n if: needs.skip-check.outputs.skip != 'true'\n runs-on: [self-hosted, target/native]\n env:\n RUSTC_WRAPPER: /usr/bin/sccache\n CARGO_INCREMENTAL: 0\n SCCACHE_DIR: /var/lib/github-actions/.cache\n steps:\n - name: ๐ฅ Clone repository\n uses: actions/checkout@v6\n\n - name: ๐ฆ Install Rust\n uses: actions-rust-lang/setup-rust-toolchain@v1\n with:\n toolchain: stable\n override: true\n cache: false\n rustflags: \"\"\n\n - name: ๐ฆ Fetch Rust dependencies\n run: cargo fetch --locked\n\n - name: ๐งช Run Rust tests\n env:\n RUSTFLAGS: -Dwarnings\n run: mold -run cargo test --all-features\n\n # Rust format check on GitHub runner\n rust-fmt:\n needs: skip-check\n if: needs.skip-check.outputs.skip != 'true'\n runs-on: ubuntu-latest\n steps:\n - name: ๐ฅ Clone repository\n uses: actions/checkout@v6\n\n - name: ๐ฆ Install Rust\n uses: actions-rust-lang/setup-rust-toolchain@v1\n with:\n toolchain: stable\n override: true\n cache: false\n rustflags: \"\"\n components: rustfmt\n\n - name: ๐ฌ Check Rust formatting\n run: cargo fmt --all -- --check\n\n # License compatibility check on GitHub runner\n check-licenses:\n needs: skip-check\n if: needs.skip-check.outputs.skip != 'true'\n runs-on: ubuntu-latest\n steps:\n - name: ๐ฅ Clone repository\n uses: actions/checkout@v6\n\n - name: ๐ Check crate license compatibility for root workspace\n uses: EmbarkStudios/cargo-deny-action@v2\n with:\n command: check bans licenses sources\n\n - name: ๐ Check crate license compatibility for /libraries/rawkit\n uses: EmbarkStudios/cargo-deny-action@v2\n with:\n command: check bans licenses sources\n manifest-path: libraries/rawkit/Cargo.toml\n"
},
{
"path": ".github/workflows/comment-!build-commands.yml",
"content": "# USAGE:\n# After reviewing the code, core team members may comment on a PR with `!build` followed by optional `` and `` arguments.\n# This matches the syntax of the `cargo run build` CLI command, but allows platforms to be specified.\n#\n# ``: `web` (default), `desktop` (all platforms), or `desktop:` (subset of `windows+mac+linux`)\n# ``: `release` (default) or `debug`\n#\n# Examples:\n# - !build\n# - !build debug\n# - !build desktop\n# - !build desktop:windows+mac\n# - !build desktop:linux debug\nname: \"!build PR Command\"\n\non:\n issue_comment:\n types:\n - created\n\njobs:\n setup:\n # Command should be limited to core team members (those in the organization) for security.\n # From the GitHub Actions docs:\n # author_association = 'MEMBER': Author is a member of the organization that owns the repository.\n if: >\n github.event.issue.pull_request &&\n github.event.comment.author_association == 'MEMBER' &&\n startsWith(github.event.comment.body, '!build')\n runs-on: ubuntu-latest\n permissions:\n pull-requests: write\n outputs:\n repo: ${{ steps.pr_info.outputs.repo }}\n ref: ${{ steps.pr_info.outputs.ref }}\n web: ${{ steps.pr_info.outputs.web }}\n windows: ${{ steps.pr_info.outputs.windows }}\n mac: ${{ steps.pr_info.outputs.mac }}\n linux: ${{ steps.pr_info.outputs.linux }}\n debug: ${{ steps.pr_info.outputs.debug }}\n\n steps:\n - name: ๐ Parse command, find branch, and set build flags\n id: pr_info\n run: |\n COMMENT=\"${{ github.event.comment.body }}\"\n\n # Split into space-separated words\n read -ra WORDS <<< \"$COMMENT\"\n\n # First word must be \"!build\"\n if [[ \"${WORDS[0]}\" != \"!build\" ]]; then\n echo \"::error::Expected comment to start with !build\"\n exit 1\n fi\n\n # Initialize build flags (web defaults to true, matching the CLI default target)\n WEB=\"true\"\n WINDOWS=\"false\"\n MAC=\"false\"\n LINUX=\"false\"\n DEBUG=\"false\"\n\n # Parse target (optional, defaults to `web` if omitted)\n IDX=1\n case \"${WORDS[$IDX]:-}\" in\n # Target: `web` enables just the web build (already the default, but accepted explicitly)\n \"web\")\n ((IDX++)) ;;\n # Target: `desktop` enables all three desktop platforms\n \"desktop\")\n WEB=\"false\"; WINDOWS=\"true\"; MAC=\"true\"; LINUX=\"true\"; ((IDX++)) ;;\n # Target: `desktop:` enables a subset of desktop platforms, split by `+`\n desktop:*)\n WEB=\"false\"\n PLATFORMS=\"${WORDS[$IDX]#desktop:}\"\n IFS='+' read -ra PARTS <<< \"$PLATFORMS\"\n for PART in \"${PARTS[@]}\"; do\n case \"$PART\" in\n \"windows\") WINDOWS=\"true\" ;;\n \"mac\") MAC=\"true\" ;;\n \"linux\") LINUX=\"true\" ;;\n *) echo \"::error::Unrecognized platform: $PART\"; exit 1 ;;\n esac\n done\n ((IDX++))\n ;;\n esac\n\n # Parse profile (optional, defaults to `release` if omitted)\n case \"${WORDS[$IDX]:-}\" in\n \"debug\") DEBUG=\"true\"; ((IDX++)) ;;\n \"release\") ((IDX++)) ;;\n esac\n\n # Reject any unexpected trailing words\n if [[ $IDX -lt ${#WORDS[@]} ]]; then\n echo \"::error::Unexpected argument: ${WORDS[$IDX]}\"\n exit 1\n fi\n\n # Write parsed build flags to job outputs\n echo \"web=$WEB\" >> $GITHUB_OUTPUT\n echo \"windows=$WINDOWS\" >> $GITHUB_OUTPUT\n echo \"mac=$MAC\" >> $GITHUB_OUTPUT\n echo \"linux=$LINUX\" >> $GITHUB_OUTPUT\n echo \"debug=$DEBUG\" >> $GITHUB_OUTPUT\n\n # Fetch the PR's head branch and repo (needed for forked PRs where the code lives in another repo)\n RESPONSE=$(curl -L -H 'Accept: application/vnd.github+json' -H 'X-GitHub-Api-Version: 2022-11-28' https://api.github.com/repos/${{ github.repository }}/pulls/${{ github.event.issue.number }})\n echo \"repo=$(echo $RESPONSE | jq -r '.head.repo.full_name')\" >> $GITHUB_OUTPUT\n echo \"ref=$(echo $RESPONSE | jq -r '.head.ref')\" >> $GITHUB_OUTPUT\n\n - name: ๐ฌ Edit comment with workflow run link\n uses: actions/github-script@v8\n with:\n script: |\n github.rest.issues.updateComment({\n comment_id: ${{ github.event.comment.id }},\n owner: context.repo.owner,\n repo: context.repo.repo,\n body: '${{ github.event.comment.body }} ([Run ID ' + context.runId + '](https://github.com/GraphiteEditor/Graphite/actions/runs/' + context.runId + '))'\n });\n\n invoke-build:\n needs: setup\n uses: ./.github/workflows/build.yml\n secrets: inherit\n with:\n web: ${{ needs.setup.outputs.web == 'true' }}\n windows: ${{ needs.setup.outputs.windows == 'true' }}\n mac: ${{ needs.setup.outputs.mac == 'true' }}\n linux: ${{ needs.setup.outputs.linux == 'true' }}\n debug: ${{ needs.setup.outputs.debug == 'true' }}\n checkout_repo: ${{ needs.setup.outputs.repo }}\n checkout_ref: ${{ needs.setup.outputs.ref }}\n pr_number: ${{ github.event.issue.number }}\n"
},
{
"path": ".github/workflows/comment-clippy-warnings.yaml",
"content": "name: \"Clippy Check\"\n\non:\n pull_request:\n types: [opened, reopened, synchronize, ready_for_review]\n\njobs:\n clippy:\n name: Run Clippy\n runs-on: ubuntu-latest\n # TODO(Keavon): Find a workaround (passing the output text to a separate action with permission to read the secrets?) that allows this to work on fork PRs\n if: false\n # if: ${{ !github.event.pull_request.draft && !github.event.pull_request.head.repo.fork }}\n permissions:\n contents: read\n pull-requests: write\n steps:\n - uses: actions/checkout@v6\n\n - name: Install Rust\n uses: actions-rs/toolchain@v1\n with:\n profile: minimal\n toolchain: stable\n override: true\n components: clippy\n\n - name: Install deps\n run: |\n sudo apt update\n sudo apt install libgtk-3-dev libsoup2.4-dev libjavascriptcoregtk-4.0-dev libwebkit2gtk-4.0-dev\n\n - name: Run Clippy\n id: clippy\n run: |\n # Run Clippy and filter output for the root workspace\n CLIPPY_OUTPUT=$(cargo clippy --all-targets --all-features -- -W clippy::all 2>&1 | grep -vE \"^(\\s*Updating|\\s*Download|\\s*Compiling|\\s*Checking|Finished)\")\n\n # Run Clippy and filter output for /libraries/rawkit\n cd libraries/rawkit\n CLIPPY_OUTPUT+=$'\\n\\n'\n CLIPPY_OUTPUT+=$(cargo clippy --all-targets --all-features -- -W clippy::all 2>&1 | grep -vE \"^(\\s*Updating|\\s*Download|\\s*Compiling|\\s*Checking|Finished)\")\n cd ../..\n\n # Escape special characters for JSON\n ESCAPED_OUTPUT=$(echo \"$CLIPPY_OUTPUT\" | jq -sR .)\n echo \"CLIPPY_OUTPUT=$ESCAPED_OUTPUT\" >> $GITHUB_OUTPUT\n if echo \"$CLIPPY_OUTPUT\" | grep -qE \"^(warning|error)\"; then\n echo \"CLIPPY_ISSUES_FOUND=true\" >> $GITHUB_OUTPUT\n else\n echo \"CLIPPY_ISSUES_FOUND=false\" >> $GITHUB_OUTPUT\n fi\n\n - name: Delete previous comments\n uses: actions/github-script@v8\n with:\n github-token: ${{secrets.GITHUB_TOKEN}}\n script: |\n const { data: comments } = await github.rest.issues.listComments({\n issue_number: context.issue.number,\n owner: context.repo.owner,\n repo: context.repo.repo,\n });\n\n const botComments = comments.filter((comment) =>\n comment.user.type === 'Bot' && comment.body.includes('Clippy Warnings/Errors')\n );\n\n for (const comment of botComments) {\n await github.rest.issues.deleteComment({\n owner: context.repo.owner,\n repo: context.repo.repo,\n comment_id: comment.id,\n });\n }\n\n - name: Comment PR\n if: steps.clippy.outputs.CLIPPY_ISSUES_FOUND == 'true'\n uses: actions/github-script@v8\n with:\n github-token: ${{secrets.GITHUB_TOKEN}}\n script: |\n const clippy_output = ${{ steps.clippy.outputs.CLIPPY_OUTPUT }};\n const output = `\n \n\n Found Clippy warnings
\n\n #### Clippy Warnings/Errors\n\n \\`\\`\\`\n ${clippy_output}\n \\`\\`\\`\n\n \n `;\n\n github.rest.issues.createComment({\n issue_number: context.issue.number,\n owner: context.repo.owner,\n repo: context.repo.repo,\n body: output\n })\n"
},
{
"path": ".github/workflows/comment-profiling-changes.yaml",
"content": "name: \"Profiling Changes\"\n\non:\n pull_request:\n paths:\n - \"node-graph/**\"\n - \"Cargo.toml\"\n - \"Cargo.lock\"\n\nenv:\n CARGO_TERM_COLOR: always\n\njobs:\n profile:\n runs-on: ubuntu-latest\n continue-on-error: true\n steps:\n - uses: actions/checkout@v6\n with:\n fetch-depth: 0\n\n - name: Install Rust\n uses: dtolnay/rust-toolchain@stable\n\n - name: Install Valgrind\n run: |\n sudo apt update\n sudo apt install -y valgrind\n\n - name: Cache Rust dependencies\n uses: Swatinem/rust-cache@v2\n with:\n # Cache on Cargo.lock file\n cache-on-failure: true\n\n - name: Cache iai-callgrind binary\n id: cache-iai\n uses: actions/cache@v5\n with:\n path: ~/.cargo/bin/iai-callgrind-runner\n key: ${{ runner.os }}-iai-callgrind-runner-0.16.1\n\n - name: Install iai-callgrind\n if: steps.cache-iai.outputs.cache-hit != 'true'\n run: cargo install iai-callgrind-runner@0.16.1\n\n - name: Checkout master branch\n run: |\n git fetch origin master:master\n git checkout master\n\n - name: Get master commit SHA\n id: master-sha\n run: echo \"sha=$(git rev-parse HEAD)\" >> $GITHUB_OUTPUT\n\n - name: Get CPU info\n id: cpu-info\n run: |\n # Get CPU model and create a short hash for cache key\n CPU_MODEL=$(cat /proc/cpuinfo | grep \"model name\" | head -1 | cut -d: -f2 | xargs)\n CPU_HASH=$(echo \"$CPU_MODEL\" | sha256sum | cut -c1-8)\n echo \"cpu-hash=$CPU_HASH\" >> $GITHUB_OUTPUT\n echo \"CPU: $CPU_MODEL (hash: $CPU_HASH)\"\n\n - name: Cache benchmark baselines\n id: cache-benchmark-baselines\n uses: actions/cache@v5\n with:\n path: target/iai\n key: ${{ runner.os }}-${{ runner.arch }}-${{ steps.cpu-info.outputs.cpu-hash }}-benchmark-baselines-master-${{ steps.master-sha.outputs.sha }}\n restore-keys: |\n ${{ runner.os }}-${{ runner.arch }}-${{ steps.cpu-info.outputs.cpu-hash }}-benchmark-baselines-master-\n\n - name: Run baseline benchmarks\n if: steps.cache-benchmark-baselines.outputs.cache-hit != 'true'\n run: |\n # Compile benchmarks\n cargo bench --bench compile_demo_art_iai -- --save-baseline=master\n\n # Runtime benchmarks\n cargo bench --bench update_executor_iai -- --save-baseline=master\n cargo bench --bench run_once_iai -- --save-baseline=master\n cargo bench --bench run_cached_iai -- --save-baseline=master\n\n - name: Checkout PR branch\n run: git checkout ${{ github.event.pull_request.head.sha }}\n\n - name: Run PR benchmarks\n run: |\n # Compile benchmarks\n cargo bench --bench compile_demo_art_iai -- --baseline=master --output-format=json | jq -sc | sed 's/\\\\\"//g' > /tmp/compile_output.json\n\n # Runtime benchmarks \n cargo bench --bench update_executor_iai -- --baseline=master --output-format=json | jq -sc | sed 's/\\\\\"//g' > /tmp/update_output.json\n cargo bench --bench run_once_iai -- --baseline=master --output-format=json | jq -sc | sed 's/\\\\\"//g' > /tmp/run_once_output.json\n cargo bench --bench run_cached_iai -- --baseline=master --output-format=json | jq -sc | sed 's/\\\\\"//g' > /tmp/run_cached_output.json\n\n - name: Make old comments collapsed by default\n # Only run if we have write permissions (not a fork)\n if: github.event.pull_request.head.repo.full_name == github.repository\n uses: actions/github-script@v8\n with:\n github-token: ${{secrets.GITHUB_TOKEN}}\n script: |\n const { data: comments } = await github.rest.issues.listComments({\n issue_number: context.issue.number,\n owner: context.repo.owner,\n repo: context.repo.repo,\n });\n\n const botComments = comments.filter((comment) =>\n comment.user.type === 'Bot' && comment.body.includes('Performance Benchmark Results') && comment.body.includes('')\n );\n\n for (const comment of botComments) {\n // Edit the comment to remove the \"open\" attribute from the tag\n await github.rest.issues.updateComment({\n owner: context.repo.owner,\n repo: context.repo.repo,\n comment_id: comment.id,\n body: comment.body.replace('', '')\n });\n }\n\n - name: Analyze profiling changes\n id: analyze\n uses: actions/github-script@v8\n with:\n script: |\n const fs = require('fs');\n\n function isSignificantChange(diffPct, absoluteChange, benchmarkType) {\n const meetsPercentageThreshold = Math.abs(diffPct) > 5;\n const meetsAbsoluteThreshold = absoluteChange > 200000;\n const isCachedExecution = benchmarkType === 'run_cached' ||\n benchmarkType.includes('Cached Execution');\n\n return isCachedExecution\n ? (meetsPercentageThreshold && meetsAbsoluteThreshold)\n : meetsPercentageThreshold;\n }\n\n const allOutputs = [\n JSON.parse(fs.readFileSync('/tmp/compile_output.json', 'utf8')),\n JSON.parse(fs.readFileSync('/tmp/update_output.json', 'utf8')),\n JSON.parse(fs.readFileSync('/tmp/run_once_output.json', 'utf8')),\n JSON.parse(fs.readFileSync('/tmp/run_cached_output.json', 'utf8'))\n ];\n const outputNames = ['compile', 'update', 'run_once', 'run_cached'];\n const sectionTitles = ['Compilation', 'Update', 'Run Once', 'Cached Execution'];\n\n let hasSignificantChanges = false;\n let regressionDetails = [];\n\n for (let i = 0; i < allOutputs.length; i++) {\n const benchmarkOutput = allOutputs[i];\n const outputName = outputNames[i];\n const sectionTitle = sectionTitles[i];\n\n for (const benchmark of benchmarkOutput) {\n if (benchmark.profiles?.[0]?.summaries?.parts?.[0]?.metrics_summary?.Callgrind?.Ir?.diffs?.diff_pct) {\n const diffPct = parseFloat(benchmark.profiles[0].summaries.parts[0].metrics_summary.Callgrind.Ir.diffs.diff_pct);\n const oldValue = benchmark.profiles[0].summaries.parts[0].metrics_summary.Callgrind.Ir.metrics.Both[1].Int;\n const newValue = benchmark.profiles[0].summaries.parts[0].metrics_summary.Callgrind.Ir.metrics.Both[0].Int;\n const absoluteChange = Math.abs(newValue - oldValue);\n\n if (isSignificantChange(diffPct, absoluteChange, outputName)) {\n hasSignificantChanges = true;\n regressionDetails.push({\n module_path: benchmark.module_path,\n id: benchmark.id,\n diffPct,\n absoluteChange,\n sectionTitle\n });\n }\n }\n }\n }\n\n core.setOutput('has-significant-changes', hasSignificantChanges);\n core.setOutput('regression-details', JSON.stringify(regressionDetails));\n\n - name: Comment PR\n if: github.event.pull_request.head.repo.full_name == github.repository\n uses: actions/github-script@v8\n with:\n github-token: ${{secrets.GITHUB_TOKEN}}\n script: |\n const fs = require('fs');\n\n const compileOutput = JSON.parse(fs.readFileSync('/tmp/compile_output.json', 'utf8'));\n const updateOutput = JSON.parse(fs.readFileSync('/tmp/update_output.json', 'utf8')); \n const runOnceOutput = JSON.parse(fs.readFileSync('/tmp/run_once_output.json', 'utf8'));\n const runCachedOutput = JSON.parse(fs.readFileSync('/tmp/run_cached_output.json', 'utf8'));\n\n const hasSignificantChanges = '${{ steps.analyze.outputs.has-significant-changes }}' === 'true';\n let commentBody = \"\";\n\n function formatNumber(num) {\n return String(num).replace(/\\B(?=(\\d{3})+(?!\\d))/g, \",\");\n }\n\n function formatPercentage(pct) {\n const sign = pct >= 0 ? '+' : '';\n return `${sign}${pct.toFixed(2)}%`;\n }\n\n function padRight(str, len) {\n return str.padEnd(len);\n }\n\n function padLeft(str, len) {\n return str.padStart(len);\n }\n\n function processBenchmarkOutput(benchmarkOutput, sectionTitle, isLast = false) {\n let sectionBody = \"\";\n let hasResults = false;\n let hasSignificantChanges = false;\n\n function isSignificantChange(diffPct, absoluteChange, benchmarkType) {\n const meetsPercentageThreshold = Math.abs(diffPct) > 5;\n const meetsAbsoluteThreshold = absoluteChange > 200000;\n const isCachedExecution = benchmarkType === 'run_cached' ||\n benchmarkType.includes('Cached Execution');\n\n return isCachedExecution\n ? (meetsPercentageThreshold && meetsAbsoluteThreshold)\n : meetsPercentageThreshold;\n }\n \n for (const benchmark of benchmarkOutput) {\n if (benchmark.profiles && benchmark.profiles.length > 0) {\n const profile = benchmark.profiles[0];\n if (profile.summaries && profile.summaries.parts && profile.summaries.parts.length > 0) {\n const part = profile.summaries.parts[0];\n if (part.metrics_summary && part.metrics_summary.Callgrind && part.metrics_summary.Callgrind.Ir) {\n const irData = part.metrics_summary.Callgrind.Ir;\n if (irData.diffs && irData.diffs.diff_pct !== null) {\n const irDiff = {\n diff_pct: parseFloat(irData.diffs.diff_pct),\n old: irData.metrics.Both[1].Int,\n new: irData.metrics.Both[0].Int\n };\n hasResults = true;\n const changePercentage = formatPercentage(irDiff.diff_pct);\n const color = irDiff.diff_pct > 0 ? \"red\" : \"lime\";\n \n sectionBody += `**${benchmark.module_path} ${benchmark.id}:${benchmark.details}**\\n`;\n sectionBody += `Instructions: \\`${formatNumber(irDiff.old)}\\` (master) โ \\`${formatNumber(irDiff.new)}\\` (HEAD) : `;\n sectionBody += `$$\\\\color{${color}}${changePercentage.replace(\"%\", \"\\\\\\\\%\")}$$\\n\\n`;\n \n sectionBody += \"\\nDetailed metrics
\\n\\n```\\n\";\n sectionBody += `Baselines: master| HEAD\\n`;\n \n for (const [metricName, metricData] of Object.entries(part.metrics_summary.Callgrind)) {\n if (metricData.diffs && metricData.diffs.diff_pct !== null) {\n const changePercentage = formatPercentage(parseFloat(metricData.diffs.diff_pct));\n const oldValue = metricData.metrics.Both[1].Int || metricData.metrics.Both[1].Float;\n const newValue = metricData.metrics.Both[0].Int || metricData.metrics.Both[0].Float;\n const line = `${padRight(metricName, 20)} ${padLeft(formatNumber(Math.round(oldValue)), 11)}|${padLeft(formatNumber(Math.round(newValue)), 11)} ${padLeft(changePercentage, 15)}`;\n sectionBody += `${line}\\n`;\n }\n }\n \n sectionBody += \"```\\n \\n\\n\";\n\n if (isSignificantChange(irDiff.diff_pct, Math.abs(irDiff.new - irDiff.old), sectionTitle)) {\n significantChanges = true;\n hasSignificantChanges = true;\n }\n }\n }\n }\n }\n }\n \n if (hasResults) {\n // Wrap section in collapsible details, open only if there are significant changes\n const openAttribute = hasSignificantChanges ? \" open\" : \"\";\n const ruler = isLast ? \"\" : \"\\n\\n---\";\n return `\\n${sectionTitle}
\\n\\n${sectionBody}${ruler}\\n `;\n }\n return \"\";\n }\n\n // Process each benchmark category\n const sections = [\n { output: compileOutput, title: \"๐ง Graph Compilation\" },\n { output: updateOutput, title: \"๐ Executor Update\" },\n { output: runOnceOutput, title: \"๐ Render: Cold Execution\" },\n { output: runCachedOutput, title: \"โก Render: Cached Execution\" }\n ];\n\n // Generate sections and determine which ones have results\n const generatedSections = sections.map(({ output, title }) => \n processBenchmarkOutput(output, title, true) // temporarily mark all as last\n ).filter(section => section.length > 0);\n\n // Re-generate with correct isLast flags\n let sectionIndex = 0;\n const finalSections = sections.map(({ output, title }) => {\n const section = processBenchmarkOutput(output, title, true); // check if it has results\n if (section.length > 0) {\n const isLast = sectionIndex === generatedSections.length - 1;\n sectionIndex++;\n return processBenchmarkOutput(output, title, isLast);\n }\n return \"\";\n }).filter(section => section.length > 0);\n\n // Combine all sections\n commentBody = finalSections.join(\"\\n\\n\");\n\n if (commentBody.length > 0) {\n const output = `\\nPerformance Benchmark Results
\\n\\n${commentBody}\\n `;\n\n if (hasSignificantChanges) {\n github.rest.issues.createComment({\n issue_number: context.issue.number,\n owner: context.repo.owner,\n repo: context.repo.repo,\n body: output\n });\n } else {\n console.log(\"No significant performance changes detected. Skipping comment.\");\n console.log(output);\n }\n } else {\n console.log(\"No benchmark results to display.\");\n }\n\n - name: Fail on significant regressions\n if: steps.analyze.outputs.has-significant-changes == 'true'\n uses: actions/github-script@v8\n with:\n script: |\n const regressionDetails = JSON.parse('${{ steps.analyze.outputs.regression-details }}');\n const firstRegression = regressionDetails[0];\n\n core.setFailed(`Significant performance regression detected: ${firstRegression.module_path} ${firstRegression.id} increased by ${firstRegression.absoluteChange.toLocaleString()} instructions (${firstRegression.diffPct.toFixed(2)}%)`);\n"
},
{
"path": ".github/workflows/library-rawkit.yml",
"content": "name: \"Library: Rawkit\"\n\non:\n push:\n branches:\n - master\n paths:\n - \"libraries/rawkit/**\"\n pull_request:\n paths:\n - \"libraries/rawkit/**\"\n\nenv:\n CARGO_TERM_COLOR: always\n\njobs:\n build:\n runs-on: ubuntu-latest\n permissions:\n contents: read\n env:\n SCCACHE_GHA_ENABLED: \"true\"\n RUSTC_WRAPPER: \"sccache\"\n CARGO_INCREMENTAL: 0\n SCCACHE_DIR: /var/lib/github-actions/.cache\n\n steps:\n - name: ๐ฅ Clone repository\n uses: actions/checkout@v6\n\n - name: ๐ฆ Install Rust\n uses: actions-rust-lang/setup-rust-toolchain@v1\n with:\n toolchain: stable\n override: true\n cache: false\n rustflags: \"\"\n\n - name: ๐ฆ Run sccache-cache\n uses: mozilla-actions/sccache-action@v0.0.6\n continue-on-error: true\n\n - name: ๐ง Fallback if sccache fails\n if: failure()\n run: |\n echo \"sccache failed, disabling it\"\n echo \"RUSTC_WRAPPER=\" >> $GITHUB_ENV\n\n - name: ๐ฌ Check Rust formatting\n run: |\n cd libraries/rawkit\n cargo fmt --all -- --check\n\n - name: ๐ฆ Build Rust code\n run: |\n cd libraries/rawkit\n cargo build --release --all-features\n\n - name: ๐งช Run Rust tests\n run: |\n cd libraries/rawkit\n cargo test --release --all-features\n\n - name: ๐ Run sccache stat for check\n shell: bash\n run: sccache --show-stats || echo \"sccache stats unavailable\"\n"
},
{
"path": ".github/workflows/provide-shaders.yml",
"content": "name: \"Provide Shaders\"\n\non:\n push:\n branches:\n - master\n workflow_dispatch: {}\n\njobs:\n build:\n runs-on: ubuntu-latest\n permissions:\n contents: read\n steps:\n - name: ๐ฅ Clone repository\n uses: actions/checkout@v6\n\n - name: โ Install Nix\n uses: DeterminateSystems/nix-installer-action@main\n\n - name: ๐พ Set up Nix cache\n uses: DeterminateSystems/magic-nix-cache-action@main\n\n - name: ๐ Build graphene raster nodes shaders\n run: nix build .#graphite-raster-nodes-shaders && cp result raster_nodes_shaders_entrypoint.wgsl\n\n - name: ๐ค Upload graphene raster nodes shaders to artifacts repository\n run: |\n bash .github/workflows/scripts/artifact-upload.bash \\\n ${{ vars.ARTIFACTS_REPO_OWNER }} \\\n ${{ vars.ARTIFACTS_REPO_NAME }} \\\n ${{ vars.ARTIFACTS_REPO_BRANCH }} \\\n rev/${{ github.sha }}/raster_nodes_shaders_entrypoint.wgsl \\\n raster_nodes_shaders_entrypoint.wgsl \\\n \"${{ github.sha }} raster_nodes_shaders_entrypoint.wgsl\" \\\n ${{ secrets.ARTIFACTS_REPO_TOKEN }}\n"
},
{
"path": ".github/workflows/scripts/artifact-upload.bash",
"content": "#!/usr/bin/env bash\nset -euo pipefail\n\nusage() {\n cat < \n\nArguments:\n owner : GitHub user or organization of the target repo\n repo : Target repo name\n branch : Branch name (e.g. main)\n target-path : Full path (including folders + filename) in the target repo where to upload\n artifact-file : Local file path to upload\n commit-message : Commit message for creating/updating the file\n github-token : GitHub token (PAT or equivalent) with write access to the target repo\n\nThis will perform a GitHub API PUT to /repos/{owner}/{repo}/contents/{target-path}.\nIf a file already exists at that path, it will auto-detect the SHA and update; otherwise it will create a new one.\nEOF\n exit 1\n}\n\nif [ $# -ne 7 ]; then\n usage\nfi\n\nOWNER=\"$1\"\nREPO=\"$2\"\nBRANCH=\"$3\"\nTARGET_PATH=\"$4\"\nARTIFACT_PATH=\"$5\"\nCOMMIT_MSG=\"$6\"\nTOKEN=\"$7\"\n\nif [ ! -f \"$ARTIFACT_PATH\" ]; then\n echo \"Error: artifact file not found: $ARTIFACT_PATH\" >&2\n exit 1\nfi\n\nLOCAL_SHA=$(git hash-object \"$ARTIFACT_PATH\")\necho \"Local blob SHA: $LOCAL_SHA\"\n\nGET_URL=\"https://api.github.com/repos/${OWNER}/${REPO}/contents/${TARGET_PATH}?ref=${BRANCH}\"\nGET_RESPONSE=$(curl -s -H \"Authorization: token ${TOKEN}\" \"$GET_URL\")\n\nREMOTE_SHA=$(echo \"$GET_RESPONSE\" | jq -r .sha 2>/dev/null || echo \"\")\n\nif [ \"$REMOTE_SHA\" != \"null\" ] && [ -n \"$REMOTE_SHA\" ]; then\n echo \"Remote blob SHA: $REMOTE_SHA\"\n if [ \"$LOCAL_SHA\" = \"$REMOTE_SHA\" ]; then\n echo \"The remote file is identical. Skipping upload.\"\n exit 0\n else\n echo \"Remote file differs. Preparing to upload.\"\n fi\nelse\n echo \"No existing remote file or no SHA found. Creating.\"\nfi\n\nCONTENT_TMP_BASE64=$(mktemp)\nif base64 --help 2>&1 | grep -q -- \"-w\"; then\n base64 -w 0 \"$ARTIFACT_PATH\" > \"$CONTENT_TMP_BASE64\"\nelse\n base64 \"$ARTIFACT_PATH\" | tr -d '\\n' > \"$CONTENT_TMP_BASE64\"\nfi\n\nPAYLOAD_TMP=$(mktemp)\njq -n \\\n --arg message \"$COMMIT_MSG\" \\\n --arg branch \"$BRANCH\" \\\n --arg sha \"$REMOTE_SHA\" \\\n --rawfile content \"$CONTENT_TMP_BASE64\" \\\n '{\n message: $message,\n content: $content,\n branch: $branch\n } + (if ($sha != \"\" and $sha != \"null\") then { sha: $sha } else {} end)' \\\n > \"$PAYLOAD_TMP\"\n\nUPLOAD_RESPONSE=$(curl -s -X PUT \\\n -H \"Authorization: token ${TOKEN}\" \\\n -H \"Content-Type: application/json\" \\\n -d @\"$PAYLOAD_TMP\" \\\n \"https://api.github.com/repos/${OWNER}/${REPO}/contents/${TARGET_PATH}\")\n\necho \"Upload Response:\"\necho \"$UPLOAD_RESPONSE\"\n\nrm -f \"$CONTENT_TMP_BASE64\" \"$PAYLOAD_TMP\"\n"
},
{
"path": ".github/workflows/website.yml",
"content": "name: \"Website\"\n\non:\n workflow_dispatch: {}\n push:\n branches:\n - master\n paths:\n - website/**\n pull_request:\n paths:\n - website/**\nenv:\n CARGO_TERM_COLOR: always\n INDEX_HTML_HEAD_INCLUSION: \n\njobs:\n build:\n runs-on: ubuntu-latest\n permissions:\n contents: read\n deployments: write\n pull-requests: write\n\n steps:\n - name: ๐ฅ Clone repository\n uses: actions/checkout@v6\n\n - name: ๐ข Install Node.js\n uses: actions/setup-node@v6\n with:\n node-version-file: .nvmrc\n\n - name: ๐ธ Install Zola\n uses: taiki-e/install-action@v2\n with:\n tool: zola@0.22.0\n\n - name: ๐ Check if `website/other` directory changed\n uses: dorny/paths-filter@v3\n id: changes\n with:\n filters: |\n website-other:\n - \"website/other/**\"\n\n - name: โ Replace template in of index.html\n run: |\n # Remove the INDEX_HTML_HEAD_INCLUSION environment variable for build links (not master deploys)\n git rev-parse --abbrev-ref HEAD | grep master > /dev/null || export INDEX_HTML_HEAD_INCLUSION=\"\"\n\n - name: ๐ฆ Produce auto-generated code docs data\n run: |\n rustup update stable\n cargo run -p crate-hierarchy-viz -- website/generated\n cargo run -p editor-message-tree -- website/generated\n\n - name: ๐ง Install website npm dependencies\n run: |\n cd website\n npm ci\n\n - name: ๐ Generate node catalog documentation\n run: cargo run -p node-docs -- website/content/learn/node-catalog\n\n - name: ๐ Build Graphite website with Zola\n env:\n MODE: prod\n run: |\n cd website\n npm run check\n zola --config config.toml build --minify\n\n - name: ๐ค Publish to Cloudflare Pages\n continue-on-error: true\n env:\n CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}\n CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}\n run: npx wrangler@3 pages deploy \"website/public\" --project-name=\"graphite-website\" --commit-dirty=true\n"
},
{
"path": ".gitignore",
"content": "branding/\ntarget/\nthird-party-licenses.txt*\nresult/\n.flatpak-builder/\n*.spv\n*.exrc\nperf.data*\nprofile.json\nprofile.json.gz\nflamegraph.svg\n.idea/\n.direnv\n.DS_Store\n"
},
{
"path": ".nix/default.nix",
"content": "inputs:\n\nlet\n systems = [\n \"x86_64-linux\"\n \"aarch64-linux\"\n ];\n forAllSystems = f: inputs.nixpkgs.lib.genAttrs systems (system: f system);\n args =\n system:\n (\n let\n lib = inputs.nixpkgs.lib // {\n call = p: import p args;\n };\n\n pkgs = import inputs.nixpkgs {\n inherit system;\n overlays = [ (import inputs.rust-overlay) ];\n };\n\n info = {\n pname = \"graphite\";\n version = \"unstable\";\n src = inputs.nixpkgs.lib.cleanSourceWith {\n src = ./..;\n filter = path: type: !(type == \"directory\" && builtins.baseNameOf path == \".nix\");\n };\n cargoVendored = deps.crane.lib.vendorCargoDeps { inherit (info) src; };\n };\n\n deps = {\n crane = lib.call ./deps/crane.nix;\n cef = lib.call ./deps/cef.nix;\n rustGPU = lib.call ./deps/rust-gpu.nix;\n };\n\n args = {\n inherit system;\n inherit (inputs) self;\n inherit inputs;\n inherit pkgs;\n inherit lib;\n inherit info;\n inherit deps;\n }\n // inputs;\n in\n args\n );\n withArgs = f: forAllSystems (system: f (args system));\nin\n{\n packages = withArgs (\n { lib, ... }:\n rec {\n default = graphite;\n graphite = (lib.call ./pkgs/graphite.nix) { };\n graphite-dev = (lib.call ./pkgs/graphite.nix) { dev = true; };\n graphite-raster-nodes-shaders = lib.call ./pkgs/graphite-raster-nodes-shaders.nix;\n graphite-branding = lib.call ./pkgs/graphite-branding.nix;\n graphite-bundle = (lib.call ./pkgs/graphite-bundle.nix) { };\n graphite-dev-bundle = (lib.call ./pkgs/graphite-bundle.nix) { graphite = graphite-dev; };\n graphite-flatpak-manifest = (lib.call ./pkgs/graphite-flatpak-manifest.nix) { };\n graphite-dev-flatpak-manifest = (lib.call ./pkgs/graphite-flatpak-manifest.nix) { graphite-bundle = graphite-dev-bundle; };\n\n # TODO: graphene-cli = lib.call ./pkgs/graphene-cli.nix;\n\n tools = {\n third-party-licenses = lib.call ./pkgs/tools/third-party-licenses.nix;\n };\n }\n );\n\n devShells = withArgs (\n { lib, ... }:\n {\n default = lib.call ./dev.nix;\n }\n );\n\n formatter = withArgs ({ pkgs, ... }: pkgs.nixfmt-tree);\n}\n"
},
{
"path": ".nix/deps/cef.nix",
"content": "{ pkgs, ... }:\n\nlet\n cefPath = pkgs.cef-binary.overrideAttrs (finalAttrs: {\n postInstall = ''\n rm -r $out/* $out/.* || true\n strip ./Release/*.so*\n mv ./Release/* $out/\n find \"./Resources/locales\" -maxdepth 1 -type f ! -name 'en-US.pak' -delete\n mv ./Resources/* $out/\n mv ./include $out/\n\n cat ./CREDITS.html | ${pkgs.xz}/bin/xz -9 -e -c > $out/CREDITS.html.xz\n\n echo '${\n builtins.toJSON {\n type = \"minimal\";\n name = builtins.baseNameOf finalAttrs.src.url;\n sha1 = \"\";\n }\n }' > $out/archive.json\n '';\n });\nin\n{\n env.CEF_PATH = cefPath;\n}\n"
},
{
"path": ".nix/deps/crane.nix",
"content": "{ pkgs, inputs, ... }:\n\n{\n lib = inputs.crane.mkLib pkgs;\n}\n"
},
{
"path": ".nix/deps/rust-gpu.nix",
"content": "{ pkgs, ... }:\n\nlet\n extensions = [\n \"rust-src\"\n \"rust-analyzer\"\n \"clippy\"\n \"cargo\"\n \"rustc-dev\"\n \"llvm-tools\"\n ];\n toolchain = pkgs.rust-bin.nightly.\"2025-06-23\".default.override {\n inherit extensions;\n };\n cargo = pkgs.writeShellScriptBin \"cargo\" ''\n #!${pkgs.lib.getExe pkgs.bash}\n\n filtered_args=()\n for arg in \"$@\"; do\n case \"$arg\" in\n +nightly|+nightly-*) ;;\n *) filtered_args+=(\"$arg\") ;;\n esac\n done\n\n exec ${toolchain}/bin/cargo ${\"\\${filtered_args[@]}\"}\n '';\n rustc_codegen_spirv =\n (pkgs.makeRustPlatform {\n cargo = toolchain;\n rustc = toolchain;\n }).buildRustPackage\n (finalAttrs: {\n pname = \"rustc_codegen_spirv\";\n version = \"0-unstable-2025-08-04\";\n src = pkgs.fetchFromGitHub {\n owner = \"Firestar99\";\n repo = \"rust-gpu-new\";\n rev = \"c12f216121820580731440ee79ebc7403d6ea04f\";\n hash = \"sha256-rG1cZvOV0vYb1dETOzzbJ0asYdE039UZImobXZfKIno=\";\n };\n cargoHash = \"sha256-AEigcEc5wiBd3zLqWN/2HSbkfOVFneAqNvg9HsouZf4=\";\n cargoBuildFlags = [\n \"-p\"\n \"rustc_codegen_spirv\"\n \"--features=use-compiled-tools\"\n \"--no-default-features\"\n ];\n doCheck = false;\n });\nin\n{\n toolchain = toolchain;\n env = {\n RUST_GPU_PATH_OVERRIDE = \"${cargo}/bin:${toolchain}/bin\";\n RUSTC_CODEGEN_SPIRV_PATH = \"${rustc_codegen_spirv}/lib/librustc_codegen_spirv.so\";\n };\n}\n"
},
{
"path": ".nix/dev.nix",
"content": "{ pkgs, deps, ... }:\n\nlet\n libs = [\n pkgs.wayland\n pkgs.vulkan-loader\n pkgs.libGL\n pkgs.openssl\n pkgs.libraw\n\n # X11 Support\n pkgs.libxkbcommon\n pkgs.libXcursor\n pkgs.libxcb\n pkgs.libX11\n ];\nin\npkgs.mkShell (\n {\n packages = libs ++ [\n pkgs.pkg-config\n\n pkgs.lld\n pkgs.nodejs\n pkgs.nodePackages.npm\n pkgs.binaryen\n pkgs.wasm-bindgen-cli_0_2_100\n pkgs.wasm-pack\n pkgs.cargo-about\n\n pkgs.rustc\n pkgs.cargo\n pkgs.rust-analyzer\n pkgs.clippy\n pkgs.rustfmt\n\n pkgs.git\n\n pkgs.cargo-watch\n pkgs.cargo-nextest\n pkgs.cargo-expand\n\n # Linker\n pkgs.mold\n\n # Profiling tools\n pkgs.gnuplot\n pkgs.samply\n pkgs.cargo-flamegraph\n\n # Plotting tools\n pkgs.graphviz\n ];\n\n LD_LIBRARY_PATH = \"${pkgs.lib.makeLibraryPath libs}:${deps.cef.env.CEF_PATH}\";\n XDG_DATA_DIRS = \"${pkgs.gsettings-desktop-schemas}/share/gsettings-schemas/${pkgs.gsettings-desktop-schemas.name}:${pkgs.gtk3}/share/gsettings-schemas/${pkgs.gtk3.name}:$XDG_DATA_DIRS\";\n\n shellHook = ''\n alias cargo='mold --run cargo'\n '';\n }\n // deps.cef.env\n // deps.rustGPU.env\n)\n"
},
{
"path": ".nix/pkgs/graphite-branding.nix",
"content": "{ info, pkgs, ... }:\n\nlet\n brandingTar = pkgs.fetchurl (\n let\n lockContent = builtins.readFile \"${info.src}/.branding\";\n lines = builtins.filter (s: s != [ ]) (builtins.split \"\\n\" lockContent);\n url = builtins.elemAt lines 0;\n hash = builtins.elemAt lines 1;\n in\n {\n url = url;\n sha256 = hash;\n }\n );\nin\npkgs.runCommand \"${info.pname}-branding\" { } ''\n mkdir -p $out\n tar -xvf ${brandingTar} -C $out --strip-components 1\n''\n"
},
{
"path": ".nix/pkgs/graphite-bundle.nix",
"content": "{\n pkgs,\n self,\n system,\n ...\n}:\n{\n graphite ? self.packages.${system}.graphite,\n}:\nlet\n bundle =\n {\n archive ? false,\n compression ? null,\n passthru ? { },\n }:\n (\n let\n tar = if compression == null then archive else true;\n nameArchiveSuffix = if tar then \".tar\" else \"\";\n nameCompressionSuffix = if compression == null then \"\" else \".\" + compression;\n name = \"graphite-bundle${nameArchiveSuffix}${nameCompressionSuffix}\";\n build = ''\n mkdir -p out\n mkdir -p out/bin\n cp ${graphite}/bin/graphite out/bin/graphite\n chmod -v +w out/bin/graphite\n patchelf \\\n --set-rpath '$ORIGIN/../lib:$ORIGIN/../lib/cef' \\\n --set-interpreter '/lib64/ld-linux-x86-64.so.2' \\\n --remove-needed libGL.so \\\n out/bin/graphite\n cp -r ${graphite}/share out/share\n mkdir -p out/lib/cef\n mkdir -p ./cef\n tar -xvf ${pkgs.cef-binary.src} -C ./cef --strip-components=1\n cp -r ./cef/Release/* out/lib/cef/\n cp -r ./cef/Resources/* out/lib/cef/\n find \"out/lib/cef/locales\" -type f ! -name 'en-US*' -delete\n ${pkgs.bintools}/bin/strip out/lib/cef/*.so*\n '';\n install =\n if tar then\n ''\n cd out\n tar -c \\\n --sort=name \\\n --mtime='@1' --clamp-mtime \\\n --owner=0 --group=0 --numeric-owner \\\n --mode='u=rwX,go=rX' \\\n --format=posix \\\n --pax-option=delete=atime,delete=ctime \\\n --no-acls --no-xattrs --no-selinux \\\n * ${\n if compression == \"xz\" then\n \"| xz \"\n else if compression == \"gz\" then\n \"| gzip -n \"\n else\n \"\"\n }> $out\n ''\n else\n ''\n mkdir -p $out\n cp -r out/* $out/\n '';\n in\n\n pkgs.runCommand name\n {\n inherit passthru;\n }\n ''\n ${build}\n ${install}\n ''\n );\nin\nbundle {\n passthru = {\n tar = bundle {\n archive = true;\n passthru = {\n gz = bundle {\n compression = \"gz\";\n };\n xz = bundle {\n compression = \"xz\";\n };\n };\n };\n };\n}\n"
},
{
"path": ".nix/pkgs/graphite-flatpak-manifest.nix",
"content": "{\n pkgs,\n self,\n system,\n ...\n}:\n{\n graphite-bundle ? self.packages.${system}.graphite-bundle,\n}:\n\n(pkgs.formats.json { }).generate \"art.graphite.Graphite.json\" {\n app-id = \"art.graphite.Graphite\";\n runtime = \"org.freedesktop.Platform\";\n runtime-version = \"25.08\";\n sdk = \"org.freedesktop.Sdk\";\n command = \"graphite\";\n finish-args = [\n \"--device=dri\"\n \"--share=ipc\"\n \"--socket=wayland\"\n \"--socket=fallback-x11\"\n \"--share=network\"\n ];\n modules = [\n {\n name = \"app\";\n buildsystem = \"simple\";\n build-commands = [\n \"mkdir -p /app\"\n \"cp -r ./* /app/\"\n \"chmod +x /app/bin/*\"\n ];\n sources = [\n {\n type = \"archive\";\n path = graphite-bundle.tar;\n strip-components = 0;\n }\n ];\n }\n ];\n}\n"
},
{
"path": ".nix/pkgs/graphite-raster-nodes-shaders.nix",
"content": "{ info, deps, ... }:\n\n(deps.crane.lib.overrideToolchain (_: deps.rustGPU.toolchain)).buildPackage {\n pname = \"raster-nodes-shaders\";\n inherit (info) version src;\n\n cargoVendorDir = deps.crane.lib.vendorMultipleCargoDeps {\n inherit (deps.crane.lib.findCargoFiles (deps.crane.lib.cleanCargoSource info.src)) cargoConfigs;\n cargoLockList = [\n \"${info.src}/Cargo.lock\"\n \"${deps.rustGPU.toolchain.availableComponents.rust-src}/lib/rustlib/src/rust/library/Cargo.lock\"\n ];\n };\n\n strictDeps = true;\n\n env = deps.rustGPU.env;\n\n buildPhase = ''\n cargo build -r -p raster-nodes-shaders\n '';\n\n installPhase = ''\n cp target/spirv-builder/spirv-unknown-naga-wgsl/release/deps/raster_nodes_shaders_entrypoint.wgsl $out\n '';\n\n doCheck = false;\n}\n"
},
{
"path": ".nix/pkgs/graphite.nix",
"content": "{\n info,\n pkgs,\n self,\n deps,\n system,\n lib,\n ...\n}:\n\n{\n dev ? false,\n}:\n\nlet\n branding = self.packages.${system}.graphite-branding;\n cargoVendorDir = deps.crane.lib.vendorCargoDeps { inherit (info) src; };\n resourcesCommon = {\n pname = \"${info.pname}-resources\";\n inherit (info) version src;\n inherit cargoVendorDir;\n strictDeps = true;\n nativeBuildInputs = [\n pkgs.pkg-config\n pkgs.lld\n pkgs.nodejs\n pkgs.nodePackages.npm\n pkgs.binaryen\n pkgs.wasm-bindgen-cli_0_2_100\n pkgs.wasm-pack\n pkgs.cargo-about\n ];\n buildInputs = [ pkgs.openssl ];\n env.CARGO_PROFILE = if dev then \"dev\" else \"release\";\n cargoExtraArgs = \"--target wasm32-unknown-unknown -p graphite-wasm --no-default-features --features native\";\n doCheck = false;\n };\n resources = deps.crane.lib.buildPackage (\n resourcesCommon\n // {\n cargoArtifacts = deps.crane.lib.buildDepsOnly resourcesCommon;\n\n npmDeps = pkgs.importNpmLock {\n npmRoot = \"${info.src}/frontend\";\n };\n\n npmRoot = \"frontend\";\n npmConfigScript = \"setup\";\n makeCacheWritable = true;\n\n nativeBuildInputs = [\n pkgs.importNpmLock.npmConfigHook\n pkgs.removeReferencesTo\n ]\n ++ resourcesCommon.nativeBuildInputs;\n\n prePatch = ''\n mkdir branding\n cp -r ${branding}/* branding\n cp ${info.src}/.branding branding/.branding\n '';\n\n buildPhase = ''\n export HOME=\"$TMPDIR\"\n\n pushd frontend\n npm run native:build-${if dev then \"dev\" else \"production\"}\n popd\n '';\n\n installPhase = ''\n mkdir -p $out\n cp -r frontend/dist/* $out/\n '';\n\n postFixup = ''\n find \"$out\" -type f -exec remove-references-to -t \"${cargoVendorDir}\" '{}' +\n '';\n }\n );\n libs = [\n pkgs.wayland\n pkgs.vulkan-loader\n pkgs.libGL\n pkgs.openssl\n pkgs.libraw\n\n # X11 Support\n pkgs.libxkbcommon\n pkgs.libXcursor\n pkgs.libxcb\n pkgs.libX11\n ];\n common = {\n inherit (info) pname version src;\n inherit cargoVendorDir;\n strictDeps = true;\n buildInputs = libs;\n nativeBuildInputs = [\n pkgs.pkg-config\n pkgs.cargo-about\n pkgs.removeReferencesTo\n ];\n env = deps.cef.env // {\n CARGO_PROFILE = if dev then \"dev\" else \"release\";\n };\n cargoExtraArgs = \"-p graphite-desktop\";\n doCheck = false;\n };\nin\n\ndeps.crane.lib.buildPackage (\n common\n // {\n cargoArtifacts = deps.crane.lib.buildDepsOnly common;\n\n env = common.env // {\n RASTER_NODES_SHADER_PATH = self.packages.${system}.graphite-raster-nodes-shaders;\n EMBEDDED_RESOURCES = resources;\n GRAPHITE_GIT_COMMIT_HASH = self.rev or \"unknown\";\n GRAPHITE_GIT_COMMIT_DATE = self.lastModified or \"unknown\";\n };\n\n npmDeps = pkgs.importNpmLock {\n npmRoot = \"${info.src}/frontend\";\n };\n npmRoot = \"frontend\";\n nativeBuildInputs = [\n pkgs.importNpmLock.npmConfigHook\n pkgs.nodePackages.npm\n ]\n ++ common.nativeBuildInputs;\n\n preBuild = ''\n ${lib.getExe self.packages.${system}.tools.third-party-licenses}\n ''\n + (\n if self ? rev then\n ''\n export GRAPHITE_GIT_COMMIT_DATE=\"$(date -u -d \"@$GRAPHITE_GIT_COMMIT_DATE\" +\"%Y-%m-%dT%H:%M:%SZ\")\"\n ''\n else\n \"\"\n );\n\n installPhase = ''\n mkdir -p $out/bin\n cp target/${if dev then \"debug\" else \"release\"}/graphite $out/bin/graphite\n\n mkdir -p $out/share/applications\n cp $src/desktop/assets/*.desktop $out/share/applications/\n\n mkdir -p $out/share/icons/hicolor/scalable/apps\n cp ${branding}/app-icons/graphite.svg $out/share/icons/hicolor/scalable/apps/art.graphite.Graphite.svg\n mkdir -p $out/share/icons/hicolor/512x512/apps\n cp ${branding}/app-icons/graphite-512.png $out/share/icons/hicolor/512x512/apps/art.graphite.Graphite.png\n mkdir -p $out/share/icons/hicolor/256x256/apps\n cp ${branding}/app-icons/graphite-256.png $out/share/icons/hicolor/256x256/apps/art.graphite.Graphite.png\n mkdir -p $out/share/icons/hicolor/128x128/apps\n cp ${branding}/app-icons/graphite-128.png $out/share/icons/hicolor/128x128/apps/art.graphite.Graphite.png\n '';\n\n postFixup = ''\n remove-references-to -t \"${cargoVendorDir}\" $out/bin/graphite\n\n patchelf \\\n --set-rpath \"${pkgs.lib.makeLibraryPath libs}:${deps.cef.env.CEF_PATH}\" \\\n --add-needed libGL.so \\\n $out/bin/graphite\n '';\n }\n)\n"
},
{
"path": ".nix/pkgs/tools/third-party-licenses.nix",
"content": "{\n info,\n deps,\n pkgs,\n ...\n}:\n\nlet\n cargoVendorDir = deps.crane.lib.vendorCargoDeps { inherit (info) src; };\n common = {\n pname = \"third-party-licenses\";\n inherit (info) version src;\n inherit cargoVendorDir;\n nativeBuildInputs = [ pkgs.pkg-config ];\n buildInputs = [ pkgs.openssl ];\n strictDeps = true;\n env = deps.cef.env // {\n CARGO_PROFILE = \"dev\";\n };\n cargoExtraArgs = \"-p third-party-licenses --features desktop\";\n doCheck = false;\n };\nin\ndeps.crane.lib.buildPackage (\n common\n // {\n inherit cargoVendorDir;\n cargoArtifacts = deps.crane.lib.buildDepsOnly common;\n meta.mainProgram = \"third-party-licenses\";\n }\n)\n"
},
{
"path": ".nvmrc",
"content": "24\n"
},
{
"path": ".prettierrc",
"content": "{\n\t\"singleQuote\": false,\n\t\"useTabs\": true,\n\t\"tabWidth\": 4,\n\t\"printWidth\": 200,\n\t\"overrides\": [\n\t\t{\n\t\t\t\"files\": [\n\t\t\t\t\"*.yml\",\n\t\t\t\t\"*.yaml\"\n\t\t\t],\n\t\t\t\"options\": {\n\t\t\t\t\"useTabs\": false,\n\t\t\t\t\"tabWidth\": 2\n\t\t\t}\n\t\t}\n\t]\n}\n"
},
{
"path": ".vscode/extensions.json",
"content": "{\n\t// NOTE: Keep this in sync with `.devcontainer/devcontainer.json`\n\t\"recommendations\": [\n\t\t// Rust\n\t\t\"rust-lang.rust-analyzer\",\n\t\t\"tamasfe.even-better-toml\",\n\t\t// Web\n\t\t\"dbaeumer.vscode-eslint\",\n\t\t\"svelte.svelte-vscode\",\n\t\t\"vitaliymaz.vscode-svg-previewer\",\n\t\t// Code quality\n\t\t\"wayou.vscode-todo-highlight\",\n\t\t\"streetsidesoftware.code-spell-checker\",\n\t\t// Git\n\t\t\"mhutchie.git-graph\",\n\t\t\"qezhu.gitlink\",\n\t\t// Helpful\n\t\t\"wmaurer.change-case\"\n\t]\n}\n"
},
{
"path": ".vscode/launch.json",
"content": "{\n\t// Use IntelliSense to learn about possible attributes.\n\t// Hover to view descriptions of existing attributes.\n\t// For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387\n\t\"version\": \"0.2.0\",\n\t\"configurations\": [\n\t\t{\n\t\t\t\"type\": \"lldb\",\n\t\t\t\"request\": \"launch\",\n\t\t\t\"name\": \"Graphite debug executable\",\n\t\t\t\"cargo\": {\n\t\t\t\t\"args\": [\n\t\t\t\t\t\"build\",\n\t\t\t\t\t\"--bin=graphite\",\n\t\t\t\t\t\"--package=graphite\",\n\t\t\t\t],\n\t\t\t\t\"filter\": {\n\t\t\t\t\t\"name\": \"graphite\",\n\t\t\t\t\t\"kind\": \"bin\",\n\t\t\t\t},\n\t\t\t},\n\t\t\t\"args\": [],\n\t\t\t\"cwd\": \"${workspaceFolder}\",\n\t\t\t\"env\": {\n\t\t\t\t\"RUST_LOG\": \"error\",\n\t\t\t},\n\t\t},\n\t\t{\n\t\t\t\"type\": \"lldb\",\n\t\t\t\"request\": \"launch\",\n\t\t\t\"name\": \"Debug unit tests in executable 'graphite'\",\n\t\t\t\"cargo\": {\n\t\t\t\t\"args\": [\n\t\t\t\t\t\"test\",\n\t\t\t\t\t\"--no-run\",\n\t\t\t\t\t\"--bin=graphite\",\n\t\t\t\t\t\"--package=graphite\",\n\t\t\t\t],\n\t\t\t\t\"filter\": {\n\t\t\t\t\t\"name\": \"graphite\",\n\t\t\t\t\t\"kind\": \"bin\",\n\t\t\t\t},\n\t\t\t},\n\t\t\t\"args\": [],\n\t\t\t\"cwd\": \"${workspaceFolder}\",\n\t\t},\n\t],\n}\n"
},
{
"path": ".vscode/settings.json",
"content": "{\n\t// Rust: save on format\n\t\"[rust]\": {\n\t\t\"editor.formatOnSave\": true,\n\t\t\"editor.formatOnPaste\": true,\n\t\t\"editor.defaultFormatter\": \"rust-lang.rust-analyzer\"\n\t},\n\t// Web: save on format\n\t\"[javascript][typescript][svelte]\": {\n\t\t\"editor.codeActionsOnSave\": {\n\t\t\t\"source.fixAll.eslint\": \"explicit\"\n\t\t},\n\t\t\"editor.formatOnSave\": true,\n\t\t\"editor.defaultFormatter\": \"dbaeumer.vscode-eslint\"\n\t},\n\t\"[scss]\": {\n\t\t\"editor.codeActionsOnSave\": {\n\t\t\t\"source.fixAll.eslint\": \"explicit\"\n\t\t},\n\t\t\"editor.formatOnSave\": true,\n\t\t// Configured in `.prettierrc`\n\t\t\"editor.defaultFormatter\": \"esbenp.prettier-vscode\"\n\t},\n\t\"[json][jsonc][yaml][github-actions-workflow]\": {\n\t\t\"editor.formatOnSave\": true,\n\t\t// Configured in `.prettierrc`\n\t\t\"editor.defaultFormatter\": \"esbenp.prettier-vscode\"\n\t},\n\t// Website: don't format Zola/Tera-templated HTML on save\n\t\"[html]\": {\n\t\t\"editor.formatOnSave\": false\n\t},\n\t// Handlebars: don't save on format\n\t// (`about.hbs` is used by Cargo About to encode license information)\n\t\"[handlebars]\": {\n\t\t\"editor.formatOnSave\": false\n\t},\n\t// Rust Analyzer config\n\t\"rust-analyzer.check.command\": \"clippy\",\n\t\"rust-analyzer.cargo.allTargets\": false,\n\t\"rust-analyzer.procMacro.ignored\": {\n\t\t\"serde_derive\": [\"Serialize\", \"Deserialize\"]\n\t},\n\t// ESLint config\n\t\"eslint.format.enable\": true,\n\t\"eslint.workingDirectories\": [\"./frontend\", \"./website\"],\n\t\"eslint.validate\": [\"javascript\", \"typescript\", \"svelte\"],\n\t// Git Graph config\n\t\"git-graph.repository.fetchAndPrune\": true,\n\t\"git-graph.repository.showRemoteHeads\": false,\n\t\"git-graph.repository.commits.fetchAvatars\": true,\n\t// VS Code Git config\n\t\"git.autofetch\": true,\n\t\"git.enableStatusBarSync\": false,\n\t\"git.showActionButton\": {\n\t\t\"sync\": false\n\t},\n\t// CSpell config\n\t\"cSpell.language\": \"en-US\",\n\t\"cSpell.logLevel\": \"Information\",\n\t\"cSpell.allowCompoundWords\": true,\n\t// Other extensions config\n\t\"evenBetterToml.formatter.alignComments\": false,\n\t\"package-json-upgrade.ignorePatterns\": [\"source-sans-pro\"],\n\t// VS Code config\n\t\"html.format.wrapLineLength\": 200,\n\t\"files.eol\": \"\\n\",\n\t\"files.insertFinalNewline\": true,\n\t\"files.associations\": {\n\t\t\"*.graphite\": \"json\"\n\t},\n\t\"editor.renderWhitespace\": \"boundary\",\n\t\"editor.minimap.markSectionHeaderRegex\": \"// ===+\\\\n\\\\s*//\\\\s*(?