ci: run slow and history-dependent guards in parallel jobs

[teamleaderleo]

Summary

workflow-guard-tests sits on the critical path to every macOS job and took about 390 s (example). 104 s was a fetch-depth: 0 checkout. A shallow checkout of this repo takes 10 s, and only one step reads history: the SwiftPM lockfile policy, which diffs against the merge base. Four other steps took 170 s between them.

• workflow-guard-tests now uses a shallow checkout and keeps every step except the ones below. Expected about 120 s.
• workflow-guard-history keeps fetch-depth: 0 and runs the SwiftPM lockfile policy. It is the only guard job that fetches history.
• workflow-guard-cli-scripts runs the cmux-tui client commit resolution (60 s) and profiling script (33 s) guards.
• workflow-guard-source-lints runs the sidebar lazy-layout guard (55 s) and the DispatchWorkItem lint (20 s) with its Bonsplit init.
• linux-preflight requires success from all four, so macOS still starts only after every guard passes. ci-status lists them too.

The moved steps are unchanged. Each new job sets up Python 3.9 and the same pinned pip packages, because those steps ran after that setup before. No other guard script calls git against repo history (checked by grepping every script the job runs), and no test pins the moved steps to the old job.

This is step 2 of #13095. This PR edits tests/test_ci_change_areas.py, so the router runs every area for it.

Testing

• actionlint .github/workflows/ci.yml
• python3 tests/test_ci_change_areas.py on Python 3.9 and 3.12. New cases: linux-preflight fails when any of the four guard jobs is failed, cancelled or skipped, and only workflow-guard-history fetches full history.
• tests/test_ci_reusable_workflow_permissions.py, tests/test_ci_app_host_home_isolation.py, tests/test_ios_testflight_pro_distribution.py, tests/test_ci_self_hosted_guard.sh, which all parse the workflow-guard-tests job.
• The real timing comes from this PR's own run.

Issues

• Related: [RFC] CI structure: thin router, reusable platform workflows, merge queue, failure ratchet #13095
• Related: Speed up the tests CI job (currently 21–25 min, gates every PR) #6134

🤖 Generated with Claude Code

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

---

Summary by cubic

Splits the slow and history-dependent guard steps out of workflow-guard-tests so macOS jobs no longer wait on one ~390s critical path. workflow-guard-tests now uses a shallow checkout; only the new workflow-guard-history job fetches full history.

• workflow-guard-cli-scripts runs the cmux-tui client commit resolution and profiling script guards.
• workflow-guard-source-lints runs the sidebar lazy-layout and DispatchWorkItem lints.
• Each new job sets up Python 3.9 and the same pinned pip dependencies as before.
• linux-preflight and ci-status now require all four guard jobs to succeed.
• Updates test_ci_change_areas.py to enforce the new job requirements and the history-fetching split.
• This is step 2 of [RFC] CI structure: thin router, reusable platform workflows, merge queue, failure ratchet #13095.

^{Written for commit 45165b0. Summary will update on new commits.}

[cursor]

Bugbot is paused — on-demand spend limit reached

Bugbot uses usage-based billing for this team and has hit its on-demand spend limit.

A team admin can raise the spend limit in the Cursor dashboard, or wait for the next billing cycle to continue.

[coderabbitai]

Warning

Review limit reached

Next included review available in 12 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used all 10 included reviews currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Repository: manaflow-ai/cmux/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 250ab4e2-3550-4d1c-9161-c5942c8d4df1

📥 Commits

Reviewing files that changed from the base of the PR and between 2bda736 and 45165b0.

📒 Files selected for processing (2)

• .github/workflows/ci.yml
• tests/test_ci_change_areas.py

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

All contributors have signed the CLA ✍️ ✅
_{Posted by the CLA Assistant Lite bot.}

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge; the split guard jobs preserve their prerequisites and remain mandatory through both preflight and aggregate status.

Summary

This PR shortens the critical CI guard path by splitting slow and history-dependent checks into parallel jobs while preserving their gating behavior.

• Makes the main workflow-guard-tests checkout shallow.
• Isolates the SwiftPM history check in the sole full-history guard job.
• Moves CLI-script and source-lint checks into parallel jobs with their required setup.
• Requires all four guard jobs through linux-preflight and includes them in ci-status.
• Adds regression coverage for guard outcomes and checkout depth.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
    A[Pull request] --> T[workflow-guard-tests<br/>shallow checkout]
    A --> H[workflow-guard-history<br/>full checkout]
    A --> C[workflow-guard-cli-scripts<br/>shallow checkout]
    A --> S[workflow-guard-source-lints<br/>shallow checkout]
    T --> P[linux-preflight]
    H --> P
    C --> P
    S --> P
    P --> M[macOS jobs]
    T --> Z[ci-status]
    H --> Z
    C --> Z
    S --> Z

Loading

_{Reviews (1) · Last reviewed commit: "ci: run slow and history-dependent guard..."}