ci.yml

name: CI

on:
  pull_request:
    branches: [main]
    # Naming `types` replaces the default set, so the first three are the
    # defaults restored. `edited` is the addition: it re-runs when a title or
    # description changes, so a session link pasted in after a green run can't
    # sit behind a stale check. PR descriptions here are rarely edited, so the
    # extra full runs are cheap.
    types: [opened, synchronize, reopened, edited]

jobs:
  ci:
    runs-on: self-hosted

    steps:
      # First, and before checkout, so a bad description fails in seconds
      # rather than after the full suite. `.claude/settings.json` sets
      # attribution.sessionUrl:false so Claude Code stops emitting these; this
      # is the check that tells us if that ever stops working.
      #
      # Only line numbers are reported, never the matched text: this repo is
      # public, so are its Actions logs, and echoing the link here would
      # republish the identifier somewhere editing the PR cannot reach.
      - name: No Claude Code session links in the PR title or description
        env:
          PR_TITLE: ${{ github.event.pull_request.title }}
          PR_BODY: ${{ github.event.pull_request.body }}
        run: |
          lines=$(printf '%s\n%s' "$PR_TITLE" "$PR_BODY" \
            | grep -in 'claude\.ai/code/session' | cut -d: -f1 | tr '\n' ' ') || true
          if [ -n "$lines" ]; then
            echo "::error::Remove the Claude Code session link from the PR title/description (line 1 is the title, line 2 onward is the description). Offending lines: $lines"
            exit 1
          fi

      - uses: actions/checkout@v6
        with:
          # ci.yml doesn't call gh/git push/private-registry work (that's release.yml).
          # Skipping credential persist means checkout's post-run also skips the
          # `git submodule foreach --recursive` cleanup loop, which is unnecessary
          # with no submodules and slow on self-hosted macOS.
          persist-credentials: false

      - uses: pnpm/action-setup@v6
        with:
          version: 9

      - uses: oven-sh/setup-bun@v2
        with:
          bun-version: "1.3.13"

      - uses: actions/setup-node@v6
        with:
          node-version: "22"

      - name: Start Postgres
        id: postgres
        run: |
          CONTAINER="dispatch-ci-$GITHUB_RUN_ID"
          echo "container=$CONTAINER" >> "$GITHUB_OUTPUT"
          PORT=$((RANDOM % 10000 + 10000))
          echo "port=$PORT" >> "$GITHUB_OUTPUT"
          docker run --rm -d \
            --name "$CONTAINER" \
            -e POSTGRES_USER=dispatch \
            -e POSTGRES_PASSWORD=dispatch \
            -e POSTGRES_DB=postgres \
            -p "$PORT":5432 \
            postgres:17-alpine
          for i in $(seq 1 15); do
            docker exec "$CONTAINER" pg_isready -U dispatch && break
            sleep 1
          done

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Install Playwright browsers
        run: pnpm exec playwright install chromium

      - name: Validate assisted-update metadata
        run: |
          META="release-notes/next-assisted-update.json"
          if [ -f "$META" ]; then
            bun bin/embed-assisted-update.ts --check-only --metadata "$META"
          fi

      - name: CI checks
        run: pnpm run ci
        env:
          TEST_DATABASE_URL: postgres://dispatch:dispatch@127.0.0.1:${{ steps.postgres.outputs.port }}/postgres

      - name: Build Bun binaries
        run: pnpm run build:bun

      - name: Smoke test compiled binary for host platform
        run: |
          case "$(uname -s)" in
            Darwin) PLATFORM="darwin" ;;
            Linux) PLATFORM="linux" ;;
            *) echo "unsupported platform: $(uname -s)" >&2; exit 1 ;;
          esac
          case "$(uname -m)" in
            aarch64|arm64) ARCH="arm64" ;;
            x86_64) ARCH="x64" ;;
            *) echo "unsupported architecture: $(uname -m)" >&2; exit 1 ;;
          esac
          BINARY=$(find dist/bun -maxdepth 1 -type f -name "dispatch-*-bun-${PLATFORM}-${ARCH}" | head -n 1)
          if [[ -z "$BINARY" ]]; then
            echo "error: no Bun binary found for platform ${PLATFORM}/${ARCH}" >&2
            exit 1
          fi
          bun scripts/smoke-bun-binary.mjs "$BINARY"
        env:
          TEST_DATABASE_URL: postgres://dispatch:dispatch@127.0.0.1:${{ steps.postgres.outputs.port }}/postgres

      - name: Upload Playwright report
        uses: actions/upload-artifact@v7
        if: failure()
        with:
          name: playwright-report
          path: test-results/
          retention-days: 7

      - name: Stop Postgres
        if: always()
        run: docker stop ${{ steps.postgres.outputs.container }} 2>/dev/null || true