orca/.github/workflows/skill-update-roundtrip.yml

name: Skill update round trip

# Why the same paths on push as pull_request: GitHub evaluates each event's
# filters independently. The PR already skipped README-only changes, but the
# unfiltered `push` to main still started the 13-job matrix. Cancelling that
# run marks the default-branch tip failed, so the repo shows a red X.
on:
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review, converted_to_draft]
    paths: &skill-roundtrip-paths
      - 'skills/**'
      - 'resources/skills/**'
      - 'config/scripts/verify-skill-update-roundtrip.mjs'
      - 'src/main/skills/skill-freshness-eligibility.ts'
      - 'src/shared/agent-feature-install-commands.ts'
      - 'src/shared/skill-freshness.ts'
      - '.github/workflows/skill-update-roundtrip.yml'
  # Why unfiltered: GitHub ignores `paths` on merge_group. We do not run a merge
  # queue today; if one is added, gate the matrix on a path job first.
  merge_group:
  push:
    branches:
      - main
    paths: *skill-roundtrip-paths

concurrency:
  group: skill-roundtrip-${{ github.event_name }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}

jobs:
  roundtrip:
    if: github.event_name != 'pull_request' || github.event.pull_request.draft != true
    strategy:
      fail-fast: false
      matrix:
        os: [macos-latest, ubuntu-latest, windows-latest]
        # Why: `pinned` runs the skills CLI version Orca ships (SKILLS_CLI_VERSION).
        skills-cli: [pinned]
        include:
          - os: ubuntu-latest
            skills-cli: latest
    continue-on-error: ${{ matrix.skills-cli == 'latest' }}
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v6
        id: checkout
        with:
          persist-credentials: false
      - uses: actions/setup-node@v6
        id: node
        with:
          node-version-file: package.json
      - name: Verify pinned symlink placement with autocrlf false
        if: ${{ !cancelled() && matrix.skills-cli == 'pinned' && steps.checkout.outcome == 'success' && steps.node.outcome == 'success' }}
        env:
          GITHUB_TOKEN: ${{ github.token }}
          SKILL_UPDATE_SOURCE: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
          SKILL_UPDATE_REF: ${{ github.event.pull_request.head.sha || github.sha }}
        run: >-
          node config/scripts/verify-skill-update-roundtrip.mjs
          --autocrlf=false
          --shape=symlink

      - name: Verify pinned symlink placement with autocrlf true
        if: ${{ !cancelled() && matrix.skills-cli == 'pinned' && steps.checkout.outcome == 'success' && steps.node.outcome == 'success' }}
        env:
          GITHUB_TOKEN: ${{ github.token }}
          SKILL_UPDATE_SOURCE: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
          SKILL_UPDATE_REF: ${{ github.event.pull_request.head.sha || github.sha }}
        run: >-
          node config/scripts/verify-skill-update-roundtrip.mjs
          --autocrlf=true
          --shape=symlink

      - name: Verify pinned copy placement with autocrlf false
        if: ${{ !cancelled() && matrix.skills-cli == 'pinned' && steps.checkout.outcome == 'success' && steps.node.outcome == 'success' }}
        env:
          GITHUB_TOKEN: ${{ github.token }}
          SKILL_UPDATE_SOURCE: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
          SKILL_UPDATE_REF: ${{ github.event.pull_request.head.sha || github.sha }}
        run: >-
          node config/scripts/verify-skill-update-roundtrip.mjs
          --autocrlf=false
          --shape=copy

      - name: Verify pinned copy placement with autocrlf true
        if: ${{ !cancelled() && matrix.skills-cli == 'pinned' && steps.checkout.outcome == 'success' && steps.node.outcome == 'success' }}
        env:
          GITHUB_TOKEN: ${{ github.token }}
          SKILL_UPDATE_SOURCE: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
          SKILL_UPDATE_REF: ${{ github.event.pull_request.head.sha || github.sha }}
        run: >-
          node config/scripts/verify-skill-update-roundtrip.mjs
          --autocrlf=true
          --shape=copy

      - name: Preview latest CLI with symlink placement and autocrlf false
        if: matrix.skills-cli == 'latest'
        env:
          GITHUB_TOKEN: ${{ github.token }}
          SKILL_UPDATE_SOURCE: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
          SKILL_UPDATE_REF: ${{ github.event.pull_request.head.sha || github.sha }}
        run: >-
          node config/scripts/verify-skill-update-roundtrip.mjs
          --cli=latest
          --autocrlf=false
          --shape=symlink