Hypothetical monorepo setup

.github/workflows/mirror-sync.yml

@@ -0,0 +1,64 @@
+name: Mirror Monorepo Components
+
+on:
+  workflow_dispatch:
+    inputs:
+      source_ref:
+        description: "Monorepo ref to mirror (branch, tag, or SHA)"
+        required: true
+        default: "main"
+      dry_run:
+        description: "Preview only (no pushes)"
+        required: true
+        default: true
+        type: boolean
+
+permissions:
+  contents: read
+
+jobs:
+  mirror:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout source ref
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          ref: ${{ inputs.source_ref }}
+
+      - name: Configure mirror remotes
+        env:
+          MIRROR_PUSH_TOKEN: ${{ secrets.MIRROR_PUSH_TOKEN }}
+        run: |
+          set -euo pipefail
+          if [ -z "${MIRROR_PUSH_TOKEN}" ]; then
+            echo "MIRROR_PUSH_TOKEN is required"
+            exit 1
+          fi
+
+          git remote add mirror-cli "https://x-access-token:${MIRROR_PUSH_TOKEN}@github.com/kernel/hypeman-cli.git"
+          git remote add mirror-sdk-go "https://x-access-token:${MIRROR_PUSH_TOKEN}@github.com/kernel/hypeman-go.git"
+          git remote add mirror-sdk-ts "https://x-access-token:${MIRROR_PUSH_TOKEN}@github.com/onkernel/hypeman-ts.git"
+
+      - name: Build subtree branches
+        run: |
+          set -euo pipefail
+          git subtree split --prefix=apps/cli -b mirror-cli-branch
+          git subtree split --prefix=sdks/go -b mirror-sdk-go-branch
+          git subtree split --prefix=sdks/ts -b mirror-sdk-ts-branch
+
+      - name: Preview mirror pushes
+        if: ${{ inputs.dry_run == true }}
+        run: |
+          echo "Dry run enabled. Would push:"
+          echo "  mirror-cli-branch -> kernel/hypeman-cli:main"
+          echo "  mirror-sdk-go-branch -> kernel/hypeman-go:main"
+          echo "  mirror-sdk-ts-branch -> onkernel/hypeman-ts:main"
+
+      - name: Push mirrors
+        if: ${{ inputs.dry_run != true }}
+        run: |
+          set -euo pipefail
+          git push mirror-cli mirror-cli-branch:main --force-with-lease
+          git push mirror-sdk-go mirror-sdk-go-branch:main --force-with-lease
+          git push mirror-sdk-ts mirror-sdk-ts-branch:main --force-with-lease

.github/workflows/release.yml

@@ -1,4 +1,4 @@
-name: Release Hypeman API
+name: Release Hypeman Monorepo
 
 on:
   push:
@@ -9,7 +9,7 @@ permissions:
   contents: write
 
 jobs:
-  release:
+  release-server:
     runs-on: [self-hosted, linux, x64, kvm]
     steps:
       - name: Checkout
@@ -34,3 +34,41 @@ jobs:
           args: release --clean
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  release-components:
+    needs: release-server
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@v6
+        with:
+          go-version: '1.25.4'
+
+      - name: Verify CLI and Go SDK release build
+        run: go test ./...
+        working-directory: ./apps/cli
+
+      - name: Verify Go SDK tests
+        run: go test ./...
+        working-directory: ./sdks/go
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Set up pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: '10.24.0'
+
+      - name: Verify TypeScript SDK build
+        run: |
+          ./scripts/bootstrap
+          ./scripts/build
+        working-directory: ./sdks/ts

.github/workflows/stainless-sdks.yml

@@ -1,65 +1,203 @@
-name: Stainless SDK preview on PRs
+name: Stainless SDK Sync on PRs
 
 on:
   pull_request:
     types:
       - opened
       - synchronize
       - reopened
-      - closed
+    paths:
+      - openapi.yaml
+      - stainless.yaml
+      - .github/workflows/stainless-sdks.yml
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
   cancel-in-progress: true
 
 env:
-  STAINLESS_ORG: ${{ vars.STAINLESS_ORG }}
   STAINLESS_PROJECT: ${{ vars.STAINLESS_PROJECT }}
   OAS_PATH: openapi.yaml
   CONFIG_PATH: stainless.yaml
 
 jobs:
-  preview:
-    if: github.event.action != 'closed'
+  build-and-sync:
+    if: github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
       pull-requests: write
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
         with:
-          fetch-depth: 2
+          fetch-depth: 0
 
-      - name: Run preview builds
-        uses: stainless-api/upload-openapi-spec-action/preview@v1
+      - name: Run Stainless build
+        id: stainless_build
+        uses: stainless-api/upload-openapi-spec-action/build@v1
         with:
           stainless_api_key: ${{ secrets.STAINLESS_API_KEY }}
-          org: ${{ env.STAINLESS_ORG }}
           project: ${{ env.STAINLESS_PROJECT }}
           oas_path: ${{ env.OAS_PATH }}
           config_path: ${{ env.CONFIG_PATH }}
-          make_comment: true
-          github_token: ${{ secrets.GITHUB_TOKEN }}
+          branch: ${{ github.event.pull_request.head.ref }}
+          commit_message: "chore(stainless): update SDKs for PR #${{ github.event.pull_request.number }}"
 
-  merge:
-    if: github.event.action == 'closed' && github.event.pull_request.merged == true
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: write
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
+      - name: Sync generated SDKs into monorepo
+        id: sync_sdks
+        env:
+          OUTCOMES_JSON: ${{ steps.stainless_build.outputs.outcomes }}
+          STAINLESS_SYNC_GITHUB_TOKEN: ${{ secrets.STAINLESS_SYNC_GITHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+
+          if [ -z "${OUTCOMES_JSON}" ] || [ "${OUTCOMES_JSON}" = "null" ] || [ "${OUTCOMES_JSON}" = "{}" ]; then
+            echo "No Stainless outcomes available (likely no SDK changes)."
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          printf '%s' "${OUTCOMES_JSON}" > /tmp/stainless-outcomes.json
+          GO_SHA="$(jq -r '.go.commit.completed.commit.sha // .go.commit.commit.sha // empty' /tmp/stainless-outcomes.json)"
+          GO_OWNER="$(jq -r '.go.commit.completed.commit.repo.owner // .go.commit.commit.repo.owner // empty' /tmp/stainless-outcomes.json)"
+          GO_REPO="$(jq -r '.go.commit.completed.commit.repo.name // .go.commit.commit.repo.name // empty' /tmp/stainless-outcomes.json)"
+          TS_SHA="$(jq -r '.typescript.commit.completed.commit.sha // .typescript.commit.commit.sha // empty' /tmp/stainless-outcomes.json)"
+          TS_OWNER="$(jq -r '.typescript.commit.completed.commit.repo.owner // .typescript.commit.commit.repo.owner // empty' /tmp/stainless-outcomes.json)"
+          TS_REPO="$(jq -r '.typescript.commit.completed.commit.repo.name // .typescript.commit.commit.repo.name // empty' /tmp/stainless-outcomes.json)"
+          TS_INSTALL_URL="$(jq -r '.typescript.install_url // empty' /tmp/stainless-outcomes.json)"
+
+          if [ -z "${GO_SHA}" ] || [ -z "${GO_OWNER}" ] || [ -z "${GO_REPO}" ]; then
+            echo "No Go commit coordinates found in outcomes; skipping sync."
+            jq . /tmp/stainless-outcomes.json
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          if [ -z "${TS_INSTALL_URL}" ] && { [ -z "${TS_SHA}" ] || [ -z "${TS_OWNER}" ] || [ -z "${TS_REPO}" ]; }; then
+            echo "No TypeScript source coordinates found in outcomes; skipping sync."
+            jq . /tmp/stainless-outcomes.json
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          if [ -z "${STAINLESS_SYNC_GITHUB_TOKEN:-}" ]; then
+            echo "STAINLESS_SYNC_GITHUB_TOKEN is required to fetch generated SDK commits."
+            exit 1
+          fi
+
+          sync_from_install_url() {
+            local install_url="$1"
+            local destination="$2"
+            local tmp_archive
+            local tmp_extract
+
+            tmp_archive="$(mktemp)"
+            tmp_extract="$(mktemp -d)"
+
+            curl --fail --location --silent --show-error "${install_url}" --output "${tmp_archive}"
+            tar -xzf "${tmp_archive}" -C "${tmp_extract}"
+
+            rm -rf "${destination}"
+            mkdir -p "${destination}"
+
+            if [ -d "${tmp_extract}/package" ]; then
+              cp -a "${tmp_extract}/package/." "${destination}/"
+            else
+              cp -a "${tmp_extract}/." "${destination}/"
+            fi
+          }
+
+          sync_target() {
+            local owner="$1"
+            local repo="$2"
+            local sha="$3"
+            local monorepo_subpath="$4"
+            local destination="$5"
+            local source_url="https://x-access-token:${STAINLESS_SYNC_GITHUB_TOKEN}@github.com/${owner}/${repo}.git"
+
+            local tmp_repo
+            tmp_repo="$(mktemp -d)"
+
+            git -C "${tmp_repo}" init --quiet
+            git -C "${tmp_repo}" remote add origin "${source_url}"
+            git -C "${tmp_repo}" fetch --depth=1 origin "${sha}"
+
+            rm -rf "${destination}"
+            mkdir -p "${destination}"
+
+            if git -C "${tmp_repo}" cat-file -e "FETCH_HEAD:${monorepo_subpath}" 2>/dev/null; then
+              local strip_components
+              strip_components="$(awk -F/ '{print NF}' <<< "${monorepo_subpath}")"
+              git -C "${tmp_repo}" archive FETCH_HEAD "${monorepo_subpath}" | tar -x -C "${destination}" --strip-components="${strip_components}"
+            else
+              git -C "${tmp_repo}" archive FETCH_HEAD | tar -x -C "${destination}"
+            fi
+          }
+
+          sync_target "${GO_OWNER}" "${GO_REPO}" "${GO_SHA}" "sdks/go" "sdks/go"
+
+          if [ -n "${TS_INSTALL_URL}" ]; then
+            sync_from_install_url "${TS_INSTALL_URL}" "sdks/ts"
+          else
+            if [ "${TS_OWNER}" = "stainless-sdks" ] && [ "${TS_REPO}" = "hypeman-typescript" ]; then
+              TS_REPO="hypeman-ts"
+            fi
+            sync_target "${TS_OWNER}" "${TS_REPO}" "${TS_SHA}" "sdks/ts" "sdks/ts"
+          fi
+
+          if git diff --quiet -- sdks/go sdks/ts; then
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+          else
+            echo "changed=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Set up Go
+        if: steps.sync_sdks.outputs.changed == 'true'
+        uses: actions/setup-go@v5
         with:
-          fetch-depth: 2
+          go-version: '1.25.4'
+
+      - name: Run Go SDK tests
+        if: steps.sync_sdks.outputs.changed == 'true'
+        run: GOWORK=off go test ./...
+        working-directory: ./sdks/go
+
+      - name: Run CLI tests
+        if: steps.sync_sdks.outputs.changed == 'true'
+        env:
+          GOWORK: ${{ github.workspace }}/go.work
+        run: go test ./...
+        working-directory: ./apps/cli
 
-      - name: Run merge build
-        uses: stainless-api/upload-openapi-spec-action/merge@v1
+      - name: Set up Node
+        if: steps.sync_sdks.outputs.changed == 'true'
+        uses: actions/setup-node@v4
         with:
-          stainless_api_key: ${{ secrets.STAINLESS_API_KEY }}
-          org: ${{ env.STAINLESS_ORG }}
-          project: ${{ env.STAINLESS_PROJECT }}
-          oas_path: ${{ env.OAS_PATH }}
-          make_comment: true
-          github_token: ${{ secrets.GITHUB_TOKEN }}
+          node-version: '20'
+
+      - name: Set up pnpm
+        if: steps.sync_sdks.outputs.changed == 'true'
+        uses: pnpm/action-setup@v4
+        with:
+          version: '10.24.0'
+
+      - name: Run TypeScript SDK tests
+        if: steps.sync_sdks.outputs.changed == 'true'
+        run: |
+          ./scripts/bootstrap
+          ./scripts/test
+        working-directory: ./sdks/ts
+
+      - name: Commit synced SDK changes
+        if: steps.sync_sdks.outputs.changed == 'true'
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add sdks/go sdks/ts
+          git commit -m "chore(stainless): sync SDKs for PR #${{ github.event.pull_request.number }}"
+
+      - name: Push synced SDK changes
+        if: steps.sync_sdks.outputs.changed == 'true'
+        run: git push origin "HEAD:${{ github.event.pull_request.head.ref }}"