ci.yml

name: CI

on:
  pull_request:
    branches: [master, develop]
  push:
    branches: [master, develop]

permissions:
  contents: read
  pull-requests: write
  issues: write

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

jobs:
  ci:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
        with:
          fetch-depth: 0

      # pnpm must be set up BEFORE setup-node so `cache: pnpm` can find it
      - name: Setup pnpm
        uses: pnpm/action-setup@v6

      - name: Setup Node
        uses: actions/setup-node@v6
        with:
          node-version: 24
          cache: pnpm

      - run: pnpm install --frozen-lockfile

      # Build once; lint/typecheck/test/size reuse the Turbo cache (no rebuild)
      - name: Build
        run: pnpm run build

      - name: Lint (oxlint fast pass)
        run: pnpm run lint:fast

      - name: Lint (ESLint)
        run: pnpm run lint

      - name: Typecheck
        run: pnpm run typecheck

      - name: Dead code / unused deps (knip)
        run: pnpm run knip

      - name: Package correctness (publint + attw)
        run: pnpm run lint:package

      - name: Test
        run: pnpm test -- --coverage

      - name: Bundle size budgets (size-limit)
        run: pnpm run size

      - name: Report Coverage
        if: success() && github.event_name == 'pull_request'
        uses: actions/github-script@v7
        with:
          script: |
            const fs = require('fs');
            const path = require('path');

            const packagesDir = 'packages';
            if (!fs.existsSync(packagesDir)) return;

            const dirs = fs.readdirSync(packagesDir);

            const validPackages = dirs.filter(dir => {
              const summaryPath = path.join(packagesDir, dir, 'coverage', 'coverage-summary.json');
              return fs.existsSync(summaryPath);
            });

            if (validPackages.length === 0) return;

            let message = '## 📊 Test Coverage Report (vitest) \n\n';

            message += '| Package | Statements | Branches | Functions | Lines |\n';
            message += '| :--- | :--- | :--- | :--- | :--- |\n';

            const metrics = ['statements', 'branches', 'functions', 'lines'];

            for (const pkg of validPackages) {
              const summaryPath = path.join(packagesDir, pkg, 'coverage', 'coverage-summary.json');
              const summary = JSON.parse(fs.readFileSync(summaryPath, 'utf8'));
              const total = summary.total;

              message += `| **@scrolloop/${pkg}** |`;

              for (const metric of metrics) {
                const data = total[metric];
                message += ` ${data.covered}/${data.total} (${data.pct}%) |`;
              }
              message += '\n';
            }

            await github.rest.issues.createComment({
              issue_number: context.issue.number,
              owner: context.repo.owner,
              repo: context.repo.repo,
              body: message
            });

  e2e:
    runs-on: ubuntu-latest
    timeout-minutes: 15
    container:
      image: mcr.microsoft.com/playwright:v1.57.0-noble
    steps:
      - uses: actions/checkout@v5
        with:
          fetch-depth: 0

      - name: Setup pnpm
        uses: pnpm/action-setup@v6

      - name: Setup Node
        uses: actions/setup-node@v6
        with:
          node-version: 24
          cache: pnpm

      - run: pnpm install --frozen-lockfile
      - run: pnpm run build

      - name: E2E
        run: pnpm --filter @scrolloop/react test:e2e

  release:
    needs: [ci, e2e]
    if: github.event_name == 'push' && github.ref == 'refs/heads/master'
    runs-on: ubuntu-latest
    permissions:
      contents: write # changesets/action creates the "Version Packages" PR + tags
      pull-requests: write
      id-token: write # npm provenance (OIDC)
    steps:
      - uses: actions/checkout@v5
        with:
          fetch-depth: 0

      - name: Setup pnpm
        uses: pnpm/action-setup@v6

      - name: Setup Node (npm registry)
        uses: actions/setup-node@v6
        with:
          node-version: 24
          cache: pnpm
          registry-url: https://registry.npmjs.org/

      - run: pnpm install --frozen-lockfile

      # When changesets exist on master: opens/updates a "Version Packages" PR
      # (runs `pnpm version`). When that PR merges and versions are bumped:
      # publishes the scoped packages to npm with provenance (runs `pnpm release`).
      - name: Changesets release
        uses: changesets/action@v1
        with:
          version: pnpm run version
          publish: pnpm run release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
          NPM_CONFIG_PROVENANCE: "true"