Merge pull request #2 from rivet-dev/add-pkg-pr-new

ci: add pkg.pr.new preview workflow

Author: NathanFlurry

.github/workflows/pkg-pr-new.yaml

@@ -0,0 +1,52 @@
+name: pkg.pr.new
+
+on:
+  pull_request:
+    paths:
+      - ".github/workflows/pkg-pr-new.yaml"
+      - "package.json"
+      - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
+      - "packages/secure-exec/**"
+  push:
+    branches:
+      - main
+    paths:
+      - ".github/workflows/pkg-pr-new.yaml"
+      - "package.json"
+      - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
+      - "packages/secure-exec/**"
+
+concurrency:
+  group: pkg-pr-new-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Enable Corepack
+        run: corepack enable
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: pnpm
+          cache-dependency-path: pnpm-lock.yaml
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Build package
+        run: pnpm --filter secure-exec build
+
+      - name: Publish to pkg.pr.new
+        run: pnpm dlx pkg-pr-new publish "./packages/secure-exec" --packageManager pnpm

packages/secure-exec/package.json

@@ -4,6 +4,14 @@
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/rivet-dev/secure-exec.git",
+    "directory": "packages/secure-exec"
+  },
   "exports": {
     ".": {
       "import": "./dist/index.js",

packages/secure-exec/tests/runtime-driver/node/runtime.test.ts

@@ -40,7 +40,9 @@ describe("runtime driver specific: node", () => {
 			createNodeRuntimeDriverFactory();
 		const runtime = new NodeRuntime({
 			memoryLimit: 128,
-			cpuTimeLimitMs: 250,
+			// Keep the default runtime limit low enough to exercise node-only
+			// construction options without depending on machine-specific startup jitter.
+			cpuTimeLimitMs: 500,
 			timingMitigation: "off",
 			payloadLimits: {
 				base64TransferBytes: 4096,
@@ -57,7 +59,9 @@ describe("runtime driver specific: node", () => {
 	it("accepts Node-only exec options", async () => {
 		const runtime = createRuntime();
 		const result = await runtime.exec(`console.log("node-exec-options-ok");`, {
-			cpuTimeLimitMs: 50,
+			// Keep the limit low enough to exercise the node-only option path
+			// without coupling the test to machine-specific startup jitter.
+			cpuTimeLimitMs: 250,
 			timingMitigation: "off",
 		});
 		expect(result.code).toBe(0);