Genarrative/.gitea/workflows/project-ci.yml

name: Project CI

on:
  push:
    branches:
      - master
      - codex/ai-game-creator-app
  pull_request:
  workflow_dispatch:

permissions:
  contents: read

env:
  CI: 'true'
  CARGO_INCREMENTAL: '0'
  CARGO_HTTP_MULTIPLEXING: 'false'
  CARGO_NET_RETRY: '10'
  CARGO_TERM_COLOR: always
  NPM_CONFIG_AUDIT: 'false'
  NPM_CONFIG_FETCH_RETRIES: '10'
  NPM_CONFIG_FETCH_RETRY_FACTOR: '2'
  NPM_CONFIG_FETCH_RETRY_MAXTIMEOUT: '60000'
  NPM_CONFIG_FETCH_RETRY_MINTIMEOUT: '2000'
  NPM_CONFIG_FUND: 'false'
  NPM_CONFIG_PREFER_OFFLINE: 'true'
  RUSTUP_AUTO_INSTALL: '0'
  RUSTC_WRAPPER: ''
  CARGO_BUILD_RUSTC_WRAPPER: ''

jobs:
  repository-checks:
    name: Repository checks
    runs-on: genarrative-ci
    steps:
      - name: Checkout full history from Gitea
        env:
          GENARRATIVE_GITEA_FETCH_DEPTH: '0'
          GENARRATIVE_GITEA_TOKEN: ${{ github.token }}
        run: genarrative-gitea-checkout

      - name: Validate preinstalled CI job image and sandbox
        run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh

      - name: Resolve comparison base
        shell: bash
        run: |
          set -euo pipefail
          base_ref="$(node -e '
            const fs = require("node:fs");
            const event = JSON.parse(fs.readFileSync(process.env.GITHUB_EVENT_PATH, "utf8"));
            process.stdout.write(event.pull_request?.base?.sha ?? event.before ?? "");
          ')"
          if [[ -n "${base_ref}" && ! "${base_ref}" =~ ^0+$ ]]; then
            git cat-file -e "${base_ref}^{commit}" 2>/dev/null || {
              echo "comparison base commit is unavailable: ${base_ref}" >&2
              exit 1
            }
          else
            base_ref="$(git merge-base HEAD origin/master 2>/dev/null || git rev-parse HEAD)"
          fi
          if [[ "${GITHUB_EVENT_NAME:-}" == 'pull_request' ]] \
            && ! git merge-base --is-ancestor "${base_ref}" HEAD; then
            echo 'pull request head does not contain the latest base commit; update the branch and rerun CI.' >&2
            exit 1
          fi
          echo "SPACETIME_SCHEMA_BASE_REF=${base_ref}" >> "${GITHUB_ENV}"

      - name: Install npm dependencies
        run: npm ci

      - name: Run repository lint gates
        run: npm run lint

      - name: Build web applications
        run: npm run build

      - name: Validate content data
        run: npm run check:content

      - name: Check committed whitespace
        shell: bash
        run: |
          set -euo pipefail
          base_ref="${SPACETIME_SCHEMA_BASE_REF:-}"
          test -n "${base_ref}"
          git cat-file -e "${base_ref}^{commit}"
          git diff --check "${base_ref}"...HEAD

  frontend-tests:
    name: Frontend tests
    runs-on: genarrative-ci
    steps:
      - name: Checkout source from Gitea
        env:
          GENARRATIVE_GITEA_FETCH_DEPTH: '1'
          GENARRATIVE_GITEA_TOKEN: ${{ github.token }}
        run: genarrative-gitea-checkout

      - name: Validate preinstalled CI job image and sandbox
        run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh

      - name: Install npm dependencies
        run: npm ci

      - name: Run frontend and script tests
        run: npm run test

      - name: Run BgFilter worker smoke harness tests
        run: npm run bgfilter-worker:smoke-test

      - name: Validate production health patrol behavior
        run: npm run check:production-health-patrol

      - name: Validate production API release behavior
        run: npm run check:production-api-release

      - name: Validate production API deploy behavior
        run: npm run check:production-api-deploy

  backend-tests:
    name: Backend tests
    runs-on: genarrative-ci
    steps:
      - name: Checkout full history from Gitea
        env:
          GENARRATIVE_GITEA_FETCH_DEPTH: '0'
          GENARRATIVE_GITEA_TOKEN: ${{ github.token }}
        run: genarrative-gitea-checkout

      - name: Validate preinstalled CI job image and sandbox
        run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh

      - name: Resolve comparison base
        shell: bash
        run: |
          set -euo pipefail
          base_ref="$(node -e '
            const fs = require("node:fs");
            const event = JSON.parse(fs.readFileSync(process.env.GITHUB_EVENT_PATH, "utf8"));
            process.stdout.write(event.pull_request?.base?.sha ?? event.before ?? "");
          ')"
          if [[ -n "${base_ref}" && ! "${base_ref}" =~ ^0+$ ]]; then
            git cat-file -e "${base_ref}^{commit}" 2>/dev/null || {
              echo "comparison base commit is unavailable: ${base_ref}" >&2
              exit 1
            }
          else
            base_ref="$(git merge-base HEAD origin/master 2>/dev/null || git rev-parse HEAD)"
          fi
          if [[ "${GITHUB_EVENT_NAME:-}" == 'pull_request' ]] \
            && ! git merge-base --is-ancestor "${base_ref}" HEAD; then
            echo 'pull request head does not contain the latest base commit; update the branch and rerun CI.' >&2
            exit 1
          fi
          echo "SPACETIME_SCHEMA_BASE_REF=${base_ref}" >> "${GITHUB_ENV}"

      - name: Install npm dependencies
        run: npm ci

      - name: Check server-rs boundaries
        run: npm run check:server-rs-ddd

      - name: Run server-rs workspace tests
        run: cargo test --locked --workspace --no-fail-fast --manifest-path server-rs/Cargo.toml

      - name: Check api-server targets
        run: cargo check --locked -p api-server --all-targets --manifest-path server-rs/Cargo.toml

      - name: Check SpacetimeDB module
        run: cargo check --locked -p spacetime-module --manifest-path server-rs/Cargo.toml

  native-shell-tests:
    name: Native shell tests
    runs-on: genarrative-ci
    steps:
      - name: Checkout full history from Gitea
        env:
          GENARRATIVE_GITEA_FETCH_DEPTH: '0'
          GENARRATIVE_GITEA_TOKEN: ${{ github.token }}
        run: genarrative-gitea-checkout

      - name: Validate preinstalled CI job image and sandbox
        run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh

      - name: Install npm dependencies
        run: npm ci

      - name: Run native shell gates
        run: npm run check:native-shells

      - name: Ensure native lockfile is unchanged
        run: git diff --exit-code -- apps/desktop-shell/src-tauri/Cargo.lock