ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:

jobs:
  check:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: pnpm/action-setup@v4
        with:
          # Matches the DeepSeek Harness toolchain version.
          version: 11.7.0

      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: pnpm

      - run: pnpm install --frozen-lockfile=false

      - name: Typecheck
        run: pnpm run typecheck

      - name: Build
        run: pnpm run build

      # `lib/` is committed so a GitHub-address install works without pnpm
      # running a build script. This fails if the committed build is stale.
      - name: Check the committed build matches the sources
        run: |
          if [ -n "$(git status --porcelain lib)" ]; then
            echo "::error::lib/ is out of date. Run 'pnpm run build' and commit the result."
            git --no-pager diff lib
            exit 1
          fi

      - name: Verify the package contents
        run: |
          npm pack --dry-run 2>&1 | tee pack.txt
          grep -q "lib/index.js" pack.txt || { echo "::error::lib/index.js missing from the package"; exit 1; }
          grep -q "cordis.patch.yml" pack.txt || { echo "::error::cordis.patch.yml missing from the package"; exit 1; }

      # These need a real OpenCode binary and reach a live provider, so they run
      # only when one is installed on the runner. The pure checks always run.
      - name: Unit checks (no provider needed)
        run: |
          pnpm run verify:offline

      - name: Live checks (needs the OpenCode CLI)
        if: hashFiles(format('{0}/.github/**', github.workspace)) != ''
        run: |
          if command -v opencode >/dev/null 2>&1; then
            pnpm run verify:live
          else
            echo "::notice::OpenCode CLI not installed on this runner; live checks skipped"
          fi