ci: resolve an owned Mac's kept Swift packages offline

[teamleaderleo]

Why

hq#661 workstream 5: the "Resolve Swift packages" step in owned compile admission swings from 10 to 55 s.

Cause: on a warm owned Mac, owned_build_state.py check clones the kept source-packages into the workspace, and "Cache Swift packages" is skipped (steps.owned-state.outputs.packages != 'true'). CMUX_CI_SWIFTPM_CACHE_EXACT_HIT is therefore empty, so the resolve always ran the online path and updated all 11 package remotes. The spm- key and restore-keys are not involved on owned roots. Checked on owned jobs 108217222634, 108219220752 and 108224018952: CMUX_CI_SWIFTPM_CACHE_EXACT_HIT: was empty and the log shows 11 Updating from lines.

Change

• compile-app-host-test-product.sh resolve stamps the package directory (.cmux-resolved-sha256) with the hash of Package.resolved plus swiftpm-cache-layout after every successful resolve. A failed resolve leaves no stamp.
• When the stamp matches this checkout, the resolve takes the same -skipPackageUpdates path as an exact spm- hit, with the same fallback to a normal resolve.
• The stamp moves with the packages into the canonical root and back into the owned package store, so the next job on that Mac resolves offline.
• A changed Package.resolved, or a partial spm- restore that carries an older stamp, fetches as before.
• Does not touch the workflow. The script is a product input, so the product key rotates once.

Tests

• tests/test_ci_test_compilation_cache_seed.sh covers four cases: an unstamped directory resolves online and gets a stamp; a stamped one resolves offline once; a failed offline resolve falls back; a changed Package.resolved fetches.
• It also checks that a failed resolve leaves no stamp.
• tests/test_ci_owned_build_state.py still passes.

🤖 Generated with Claude Code

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

---

Summary by cubic

Makes an owned Mac's kept Swift packages resolve offline, cutting the Resolve step from 10-55s down by avoiding fetches of all 11 package remotes.

• A successful resolve now stamps the package directory with a hash of Package.resolved and the cache layout; a failed resolve leaves no stamp.
• A matching stamp takes the same -skipPackageUpdates offline path as an exact spm- cache hit, with the same fallback to a normal resolve.
• The stamp persists with the packages into the owned package store, so the next job on that Mac resolves offline; a changed Package.resolved or a partial cache restore fetches as before.
• Tests cover an unstamped directory, a stamped one resolving offline, a failed offline fallback, and a changed Package.resolved with no residue after failure.

^{Written for commit 2b40891. Summary will update on new commits.}

[coderabbitai]

Warning

Review limit reached

Next included review available in 24 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used all 10 included reviews currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Repository: manaflow-ai/cmux/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 51584b07-3aee-4b80-acab-8e3bee9d03bd

📥 Commits

Reviewing files that changed from the base of the PR and between 8538fa9 and 2b40891.

📒 Files selected for processing (3)

• scripts/ci/compile-app-host-test-product.sh
• scripts/ci/owned_build_state.py
• tests/test_ci_test_compilation_cache_seed.sh

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

All contributors have signed the CLA ✍️ ✅
_{Posted by the CLA Assistant Lite bot.}

[github-actions]

Merge receipt for 2b4089148c: every check was green at merge (13 verified; 14 skipped by policy). Full suite runs on main after merge.