ci.yml

name: CI

on:
  push:
    branches: ["*"]
  pull_request:

concurrency:
  group: ci-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  lint-build-test:
    runs-on: macos-15-intel
    timeout-minutes: 35
    steps:
      - uses: actions/checkout@v6

      - name: Select Xcode 26.1.1 (if present) or fallback to default
        run: |
          set -euo pipefail
          for candidate in /Applications/Xcode_26.1.1.app /Applications/Xcode_26.1.app /Applications/Xcode.app; do
            if [[ -d "$candidate" ]]; then
              sudo xcode-select -s "${candidate}/Contents/Developer"
              echo "DEVELOPER_DIR=${candidate}/Contents/Developer" >> "$GITHUB_ENV"
              break
            fi
          done
          /usr/bin/xcodebuild -version

      - name: Swift toolchain version
        run: |
          set -euo pipefail
          swift --version
          swift package --version

      - name: Install lint tools
        run: ./Scripts/install_lint_tools.sh

      - name: Lint
        run: ./Scripts/lint.sh lint

      - name: Swift Test
        timeout-minutes: 25
        run: |
          swift test --parallel \
            --skip ClaudeOAuthCredentialsStoreSecurityCLITests \
            --skip CLIOpenAIDashboardCacheTests \
            --skip CodexAccountScopedRefreshDashboardCleanupTests \
            --skip CodexAccountScopedRefreshTests \
            --skip CodexDashboardWorkedExampleParityTests \
            --skip CodexWebDashboardStrategyAuthorityTests \
            --skip OpenAIDashboardNavigationDelegateTests \
            --skip StatusMenuTokenAccountSwitcherTests \
            --skip SubprocessRunnerTests
          swift test --no-parallel \
            --filter 'ClaudeOAuthCredentialsStoreSecurityCLITests|CLIOpenAIDashboardCacheTests|CodexAccountScopedRefreshDashboardCleanupTests|CodexAccountScopedRefreshTests|CodexDashboardWorkedExampleParityTests|CodexWebDashboardStrategyAuthorityTests|OpenAIDashboardNavigationDelegateTests|SubprocessRunnerTests'

  build-linux-cli:
    timeout-minutes: 20
    strategy:
      fail-fast: false
      matrix:
        include:
          - name: linux-x64
            runs-on: ubuntu-24.04
          - name: linux-arm64
            runs-on: ubuntu-24.04-arm
    runs-on: ${{ matrix.runs-on }}
    steps:
      - uses: actions/checkout@v6

      - name: Runner info
        run: |
          set -euo pipefail
          uname -a
          uname -m

      - name: Install Swift 6.2.1 via swiftly
        shell: bash
        run: |
          set -euo pipefail

          if ! command -v gpg >/dev/null 2>&1; then
            sudo apt-get update
            sudo apt-get install -y ca-certificates gpg
          fi

          SWIFTLY_ARCH="$(uname -m)"
          SWIFTLY_HOME_DIR="$HOME/.local/share/swiftly"
          SWIFTLY_BIN_DIR="$HOME/.local/bin"
          POST_INSTALL_SCRIPT="$(mktemp)"

          mkdir -p "$SWIFTLY_BIN_DIR"
          curl -fsSL "https://download.swift.org/swiftly/linux/swiftly-${SWIFTLY_ARCH}.tar.gz" -o /tmp/swiftly.tar.gz
          tar -xzf /tmp/swiftly.tar.gz -C /tmp
          /tmp/swiftly init --assume-yes --skip-install

          . "$SWIFTLY_HOME_DIR/env.sh"
          echo "$SWIFTLY_BIN_DIR" >> "$GITHUB_PATH"
          echo "SWIFTLY_HOME_DIR=$SWIFTLY_HOME_DIR" >> "$GITHUB_ENV"
          echo "SWIFTLY_BIN_DIR=$SWIFTLY_BIN_DIR" >> "$GITHUB_ENV"

          swiftly install 6.2.1 --use --assume-yes --post-install-file "$POST_INSTALL_SCRIPT"
          if [[ -s "$POST_INSTALL_SCRIPT" ]]; then
            sudo apt-get update
            sudo bash "$POST_INSTALL_SCRIPT"
          fi

          hash -r
          swift --version

      - name: Build CodexBarCLI (release, static Swift stdlib)
        run: swift build -c release --product CodexBarCLI --static-swift-stdlib

      - name: Swift Test (Linux only)
        run: swift test --parallel

      - name: Smoke test CodexBarCLI
        shell: bash
        run: |
          set -euo pipefail
          BIN_DIR="$(swift build -c release --product CodexBarCLI --static-swift-stdlib --show-bin-path)"
          BIN="$BIN_DIR/CodexBarCLI"
          "$BIN" --help >/dev/null
          "$BIN" --version >/dev/null
          if "$BIN" usage --provider codex --web >/dev/null 2>&1; then
            echo "Expected --web to fail on Linux"
            exit 1
          fi
          "$BIN" usage --provider codex --web 2>&1 | tee /tmp/codexbarcli-stderr.txt >/dev/null || true
          grep -q "macOS" /tmp/codexbarcli-stderr.txt