name: CI

on: [push, pull_request]

permissions:
  contents: read # to fetch code (actions/checkout)

jobs:
  compile-and-lint:
    # Skip pull_request events from PRs in the same repo. This prevents
    # duplicate build jobs from running when creating a PR in the original repo.
    # Exception: chore/update-lockfile PRs (created by automation with GITHUB_TOKEN, which doesn't trigger push events)
    if: ${{ github.event_name == 'push' || github.event.pull_request.head.repo.full_name != github.repository || github.head_ref == 'chore/update-lockfile' }}

    name: Compile & Lint
    runs-on: ubuntu-latest

    steps:
    - name: Checkout Commit
      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
    - name: Install pnpm
      uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
      with:
        standalone: true
    - name: Setup Node
      run: pnpm runtime -g set node 24.6.0
      timeout-minutes: 2
    - name: pnpm install
      run: pnpm install
      timeout-minutes: 3
    - name: Compile TypeScript
      run: pnpm run compile-only
    - name: Lint
      run: pnpm run lint
    - name: Package compiled artifacts
      run: tar -czf compiled.tar.gz --exclude='node_modules' $(find . -type d -name lib -not -path '*/node_modules/*') $(find . -name 'tsconfig.tsbuildinfo' -not -path '*/node_modules/*') pnpm/dist
    - name: Upload compiled artifacts
      uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
      with:
        name: compiled-packages
        path: compiled.tar.gz
        retention-days: 1

  test:
    needs: compile-and-lint
    # Skip pull_request events from PRs in the same repo. This prevents
    # duplicate test jobs from running when creating a PR in the original repo.
    # Exception: chore/update-lockfile PRs (created by automation with GITHUB_TOKEN, which doesn't trigger push events)
    if: ${{ github.event_name == 'push' || github.event.pull_request.head.repo.full_name != github.repository || github.head_ref == 'chore/update-lockfile' }}

    concurrency:
      group: ${{ github.workflow }}-${{ github.ref }}-${{ matrix.platform }}-${{ matrix.node[0] }}
      cancel-in-progress: true

    strategy:
      fail-fast: false
      matrix:
        node:
          - [22, 13, 0]
          - [24, 0, 0]
          - [25, 0, 0]
        platform:
          - ubuntu-latest
          - windows-latest

    name: Test ${{matrix.platform}} / Node.js ${{ matrix.node[0] }}
    runs-on: ${{matrix.platform}}

    steps:
    - name: Configure Git
      run: |
        git config --global core.autocrlf false
        git config --global user.name "xyz"
        git config --global user.email "x@y.z"
    - name: Checkout Commit
      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
    - name: Install pnpm
      uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
      with:
        standalone: false
    - name: Setup Node
      run: pnpm runtime -g set node ${{ join(matrix.node, '.') }}
      timeout-minutes: 2
    # npm is needed for preparing git-hosted dependencies (e.g. in dlx tests)
    - name: Verify npm
      run: npm --version
    - name: pnpm install
      run: pnpm install
      timeout-minutes: 3
    - name: Download compiled artifacts
      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
      with:
        name: compiled-packages
    - name: Extract compiled artifacts
      run: tar -xzf compiled.tar.gz
    - name: Determine test scope
      id: test-scope
      shell: bash
      run: |
        if [[ "${{ github.ref_name }}" == "main" || "${{ github.ref_name }}" == "chore/update-lockfile" ]]; then
          echo "script=ci:test-all" >> "$GITHUB_OUTPUT"
          echo "scope=all" >> "$GITHUB_OUTPUT"
        else
          git remote set-branches --add origin main && git fetch origin main --depth=1
          if [ -n "$(git diff --name-only origin/main HEAD -- pnpm-workspace.yaml)" ]; then
            echo "script=ci:test-all" >> "$GITHUB_OUTPUT"
            echo "scope=all — pnpm-workspace.yaml modified" >> "$GITHUB_OUTPUT"
          else
            echo "script=ci:test-branch" >> "$GITHUB_OUTPUT"
            echo "scope=affected packages" >> "$GITHUB_OUTPUT"
          fi
        fi
    - name: Run tests (${{ steps.test-scope.outputs.scope }})
      timeout-minutes: 70
      run: pnpm run ${{ steps.test-scope.outputs.script }}
      env:
        PNPM_WORKERS: 3