Add code to publish binaries on release #1459

monadoid · 2025-12-23T00:38:58Z

why

Stagehand-python needs a stable, versioned place to fetch the exact stagehand/server SEA binaries for packaging into wheels. Today our stagehand-server/v* GitHub Releases only include the OpenAPI spec, so the binary handoff isn’t automatic.

what changed

stagehand-server/v* releases now build a cross-platform SEA binary matrix (linux/macOS/windows) and attach the resulting binaries (plus checksums) to the same GitHub Release. The release still includes the versioned OpenAPI spec asset as before.

test plan

Binaries should build on merge to main

Summary by cubic

Publish cross-platform stagehand-server SEA binaries on each versioned GitHub Release, with SHA-256 checksums. This makes it easy for stagehand-python to fetch exact, versioned server binaries.

New Features
- CI builds SEA binaries for linux-x64, linux-arm64, darwin-arm64, darwin-x64, win32-x64, and win32-arm64.
- Binaries and checksums are attached to the stagehand/server v* GitHub Release alongside the OpenAPI spec.
- Added build scripts (build-binary.sh, create-binary.sh) and sea-config.json; local cross-compiling is not supported.
- Artifacts are produced per-OS via a matrix job and collected in the release.
Dependencies
- Added esbuild and postject to support bundling and SEA blob injection.

^{Written for commit acc3bf5. Summary will update automatically on new commits.}

changeset-bot · 2025-12-23T00:39:02Z

🦋 Changeset detected

Latest commit: acc3bf5

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@browserbasehq/stagehand-server	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

greptile-apps · 2025-12-23T00:41:43Z

Greptile Summary

This PR adds automated cross-platform SEA (Single Executable Application) binary builds to the stagehand-server release workflow. Previously, GitHub Releases only included the OpenAPI spec; now they include versioned binaries for linux-x64, darwin-arm64, darwin-x64, and win32-x64 along with SHA-256 checksums.

Major changes:

Matrix job builds binaries on 4 platforms using esbuild for bundling and postject for SEA blob injection
Binaries are uploaded as GitHub artifacts, downloaded by the release job, checksummed, and attached to the GitHub Release
macOS binaries include proper code signing (removal and re-signing)
Windows uses a PowerShell-based build due to shell differences, but follows the same logic
Added build:binary npm script and SEA dependencies (esbuild, postject) to packages/server

Confidence Score: 4/5

This PR is safe to merge with minimal risk - implements well-structured binary build automation
Score reflects solid implementation with proper error handling, version verification, and platform-specific handling. Minor confidence reduction due to slight inconsistency in Windows build (uses inline PowerShell rather than calling build-binary.sh script) and potential checksum generation edge case with no binaries
Pay attention to .github/workflows/stagehand-server-release.yml for the Windows build step logic and checksum generation

Important Files Changed

Filename	Overview
.github/workflows/stagehand-server-release.yml	Adds matrix job to build cross-platform SEA binaries and attach them to GitHub releases with checksums
packages/server/scripts/build-binary.sh	New script that builds core package, bundles with esbuild, generates SEA blob, and creates platform binary
packages/server/scripts/create-binary.sh	Creates platform-specific SEA binary from pre-generated blob with proper signing for macOS

Sequence Diagram

sequenceDiagram
    participant Dev as Developer
    participant GH as GitHub
    participant Matrix as Matrix Job (4 OS)
    participant Artifacts as GitHub Artifacts
    participant Release as Release Job
    
    Dev->>GH: Push tag stagehand-server/v*
    GH->>Matrix: Trigger build_binaries job
    
    par Build on ubuntu-latest
        Matrix->>Matrix: Install deps (PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD)
        Matrix->>Matrix: pnpm --filter @browserbasehq/stagehand-server build:binary
        Matrix->>Matrix: Build @browserbasehq/stagehand core package
        Matrix->>Matrix: Bundle with esbuild
        Matrix->>Matrix: Generate SEA blob with Node
        Matrix->>Matrix: Copy node binary & inject blob with postject
        Matrix->>Artifacts: Upload stagehand-server-linux-x64
    and Build on macos-latest (arm64)
        Matrix->>Matrix: Install deps & build (same steps)
        Matrix->>Matrix: codesign --remove-signature, postject, codesign --sign
        Matrix->>Artifacts: Upload stagehand-server-darwin-arm64
    and Build on macos-13 (x64)
        Matrix->>Matrix: Install deps & build (same steps)
        Matrix->>Matrix: codesign --remove-signature, postject, codesign --sign
        Matrix->>Artifacts: Upload stagehand-server-darwin-x64
    and Build on windows-latest
        Matrix->>Matrix: Install deps
        Matrix->>Matrix: PowerShell: build core, bundle, generate blob
        Matrix->>Matrix: Copy node.exe & inject blob with postject
        Matrix->>Artifacts: Upload stagehand-server-win32-x64.exe
    end
    
    Matrix->>Release: All builds complete
    Release->>Release: Derive version from tag (stagehand-server/v*)
    Release->>Release: Verify tag matches package.json version
    Release->>Release: Prepare release-assets directory
    Release->>Release: Copy openapi.v3.yaml
    Release->>Artifacts: Download all SEA binary artifacts
    Artifacts->>Release: stagehand-server-* binaries
    Release->>Release: Generate checksums.sha256 (shasum -a 256)
    Release->>GH: Publish GitHub Release with binaries, checksums, and OpenAPI spec
    GH->>Dev: Release published

greptile-apps

_{5 files reviewed, 1 comment}

_{Edit Code Review Agent Settings | Greptile}

.github/workflows/stagehand-server-release.yml

cubic-dev-ai

No issues found across 7 files

greptile-apps

_{5 files reviewed, 2 comments}

_{Edit Code Review Agent Settings | Greptile}

.github/workflows/stagehand-server-release.yml

cubic-dev-ai

2 issues found across 1 file (changes from recent commits).

Prompt for AI agents (all issues)


Check if these issues are valid — if so, understand the root cause of each and fix them.


<file name=".github/workflows/stagehand-server-release.yml">

<violation number="1" location=".github/workflows/stagehand-server-release.yml:109">
P2: Downloaded Node.js binaries are not verified against checksums before use. For release artifacts, consider verifying the downloaded tarball against Node.js&#39;s SHASUMS256.txt to ensure integrity. Example for Linux:
```bash
curl -fsSL &quot;https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt&quot; -o SHASUMS256.txt
grep &quot;${NODE_TARBALL}&quot; SHASUMS256.txt | shasum -a 256 -c -
```</violation>

<violation number="2" location=".github/workflows/stagehand-server-release.yml:164">
P2: Downloaded Node.js zip is not verified against checksums. Consider adding checksum verification similar to the Linux arm64 step to ensure integrity of the downloaded binary.</violation>
</file>

_{Reply to cubic to teach it or ask questions. Re-run a review with @cubic-dev-ai review this PR}

.github/workflows/stagehand-server-release.yml

@tkattkat

monadoid added 2 commits December 22, 2025 17:35

Add code to publish binaries on release

9d7f29d

Add changeset

f691e66

greptile-apps bot reviewed Dec 23, 2025

View reviewed changes

.github/workflows/stagehand-server-release.yml Show resolved Hide resolved

monadoid closed this Dec 23, 2025

cubic-dev-ai bot reviewed Dec 23, 2025

View reviewed changes

monadoid reopened this Dec 23, 2025

monadoid mentioned this pull request Dec 23, 2025

Add SEA binary build for packages/server #1449

Closed

Added windows/linux arm64 builds

acc3bf5

greptile-apps bot reviewed Dec 23, 2025

View reviewed changes

.github/workflows/stagehand-server-release.yml Show resolved Hide resolved

.github/workflows/stagehand-server-release.yml Show resolved Hide resolved

cubic-dev-ai bot reviewed Dec 23, 2025

View reviewed changes

.github/workflows/stagehand-server-release.yml Show resolved Hide resolved

.github/workflows/stagehand-server-release.yml Show resolved Hide resolved

seanmcguire12 approved these changes Dec 23, 2025

View reviewed changes

monadoid merged commit abb3469 into main Dec 23, 2025
25 checks passed

This was referenced Dec 23, 2025

Version Packages #1414

Merged

Version Packages shaneholloman/stagehand#1

Open

Version Packages CloudEngineHub/stagehand#1

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Add code to publish binaries on release #1459

Add code to publish binaries on release #1459

Uh oh!

monadoid commented Dec 23, 2025 •

edited by cubic-dev-ai bot

Loading

Uh oh!

changeset-bot bot commented Dec 23, 2025 •

edited

Loading

Uh oh!

greptile-apps bot commented Dec 23, 2025 •

edited

Loading

Uh oh!

greptile-apps bot left a comment

Uh oh!

Uh oh!

cubic-dev-ai bot left a comment

Uh oh!

greptile-apps bot left a comment

Uh oh!

Uh oh!

Uh oh!

cubic-dev-ai bot left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Add code to publish binaries on release #1459

Add code to publish binaries on release #1459

Uh oh!

Conversation

monadoid commented Dec 23, 2025 • edited by cubic-dev-ai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

why

what changed

test plan

Summary by cubic

Uh oh!

changeset-bot bot commented Dec 23, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

greptile-apps bot commented Dec 23, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Greptile Summary

Confidence Score: 4/5

Important Files Changed

Sequence Diagram

Uh oh!

greptile-apps bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

Uh oh!

greptile-apps bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

monadoid commented Dec 23, 2025 •

edited by cubic-dev-ai bot

Loading

changeset-bot bot commented Dec 23, 2025 •

edited

Loading

greptile-apps bot commented Dec 23, 2025 •

edited

Loading