name: CI

on:
  pull_request:
    types: [opened, synchronize, reopened]
  push:
    branches: [master, windows]
    paths-ignore:
      - "website/**"
      - ".github/APPROVED_CONTRIBUTORS"

permissions:
  contents: read

concurrency:
  group: ci-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:
  conventional-commits:
    if: github.event_name != 'push' || github.ref_name == 'master'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
        with:
          fetch-depth: 0
          persist-credentials: false

      - name: Validate commit subjects
        if: github.event_name == 'push'
        run: python3 scripts/conventional_commits.py --range "${{ github.event.before }}..${{ github.event.after }}"

      - name: Validate PR title
        if: github.event_name == 'pull_request'
        run: python3 scripts/conventional_commits.py "${{ github.event.pull_request.title }}"

  check:
    name: check (${{ matrix.os }})
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            kind: unix
            nextest_filter: all()
          - os: macos-latest
            kind: unix
            nextest_filter: not binary(live_handoff)
          - os: windows-latest
            kind: windows
    runs-on: ${{ matrix.os }}
    timeout-minutes: 15
    steps:
      - name: Checkout
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
        with:
          persist-credentials: false

      - name: Install Rust
        if: matrix.kind == 'unix'
        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable

      - name: Install Rust
        if: matrix.kind == 'windows'
        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
        with:
          targets: x86_64-pc-windows-msvc

      - name: Install Rust tools
        if: matrix.kind == 'unix'
        uses: taiki-e/install-action@fd2f5e3d644b484055ebf4268f474c565f148f25 # v2.81.9
        with:
          tool: just,cargo-nextest

      - name: Install Zig
        uses: mlugg/setup-zig@d1434d08867e3ee9daa34448df10607b98908d29 # v2.2.1
        with:
          version: 0.15.2

      - name: Install macOS build tools
        if: runner.os == 'macOS'
        run: brew install cmake ninja

      - name: Restore cargo cache
        uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
        with:
          cache-bin: false
          key: ${{ matrix.os }}

      - name: Run checks
        if: matrix.kind == 'unix'
        run: just ci '${{ matrix.nextest_filter }}'

      - name: Run Windows checks
        if: matrix.kind == 'windows'
        shell: pwsh
        run: |
          $ErrorActionPreference = "Stop"
          function Invoke-Checked {
            param([string]$Command, [string[]]$Arguments)
            & $Command @Arguments
            if ($LASTEXITCODE -ne 0) {
              throw "command failed with exit code $LASTEXITCODE`: $Command $($Arguments -join ' ')"
            }
          }
          Invoke-Checked cargo @("fmt", "--check")
          Invoke-Checked cargo @("clippy", "--bin", "herdr", "--locked", "--target", "x86_64-pc-windows-msvc", "--", "-D", "warnings")
          Invoke-Checked cargo @("test", "--locked", "--target", "x86_64-pc-windows-msvc", "--bin", "herdr", "windows_")
          Invoke-Checked cargo @("test", "--locked", "--target", "x86_64-pc-windows-msvc", "--bin", "herdr", "server::client_transport::tests")
          Invoke-Checked cargo @("build", "--locked", "--target", "x86_64-pc-windows-msvc")

      - name: Smoke ConPTY pane
        if: matrix.kind == 'windows'
        shell: pwsh
        run: |
          $ErrorActionPreference = "Stop"
          $env:HERDR_SESSION = "ci-windows-$env:GITHUB_RUN_ID-$env:GITHUB_RUN_ATTEMPT"
          $exe = Join-Path $PWD "target\x86_64-pc-windows-msvc\debug\herdr.exe"

          & $exe --version
          & $exe --default-config | Out-Null

          $server = Start-Process -FilePath $exe -ArgumentList "server" -PassThru -WindowStyle Hidden
          try {
            $deadline = (Get-Date).AddSeconds(10)
            do {
              Start-Sleep -Milliseconds 250
              $status = & $exe status server 2>&1
              if ($LASTEXITCODE -eq 0 -and (($status -join "`n") -match "status: running")) {
                break
              }
            } while ((Get-Date) -lt $deadline)

            if ((Get-Date) -ge $deadline) {
              throw "server did not become ready"
            }

            & $exe agent start smoke -- "$env:ComSpec" /K dir
            Start-Sleep -Seconds 2
            $read = & $exe agent read smoke --source recent --lines 40 --format text
            $text = $read -join "`n"
            if ($text -notmatch "File\(s\)" -or $text -notmatch "Dir\(s\)") {
              throw "pane read did not include cmd.exe directory output: $text"
            }
          } finally {
            & $exe server stop 2>$null
            Wait-Process -Id $server.Id -Timeout 10 -ErrorAction SilentlyContinue
          }