js.yml

name: JS CI/CD Pipeline

on:
  push:
    branches:
      - main
    paths:
      - 'js/**'
      - 'scripts/**'
      - '.github/workflows/js.yml'
  pull_request:
    types: [opened, synchronize, reopened]
    paths:
      - 'js/**'
      - 'scripts/**'
      - '.github/workflows/js.yml'
  workflow_dispatch:
    inputs:
      release_mode:
        description: 'Manual release mode'
        required: true
        type: choice
        default: 'instant'
        options:
          - instant
          - changeset-pr
      bump_type:
        description: 'Manual release type'
        required: true
        type: choice
        options:
          - patch
          - minor
          - major
      description:
        description: 'Manual release description (optional)'
        required: false
        type: string

concurrency:
  group: js-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  # Changeset check - only runs on PRs
  changeset-check:
    name: Check for Changesets
    runs-on: ubuntu-latest
    if: github.event_name == 'pull_request'
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '24.x'

      - name: Install dependencies
        run: npm install --legacy-peer-deps
        working-directory: js

      - name: Check for changesets
        run: |
          # Skip changeset check for automated version PRs
          if [[ "${{ github.head_ref }}" == "changeset-release/"* ]]; then
            echo "Skipping changeset check for automated release PR"
            exit 0
          fi

          # Run changeset validation script
          node scripts/validate-changeset.mjs

  # Linting and formatting - runs after changeset check on PRs, immediately on main
  lint:
    name: Lint and Format Check
    runs-on: ubuntu-latest
    needs: [changeset-check]
    if: always() && (github.event_name == 'push' || github.event_name == 'workflow_dispatch' || needs.changeset-check.result == 'success')
    steps:
      - uses: actions/checkout@v6

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '24.x'

      - name: Install dependencies
        run: npm install --legacy-peer-deps
        working-directory: js

      - name: Run ESLint
        run: npm run lint
        working-directory: js

      - name: Check formatting
        run: npm run format:check
        working-directory: js

      - name: Check file size limit
        run: npm run check:file-size
        working-directory: js

  # Test with Bun (this project is Bun-only)
  # Only runs unit tests (no external dependencies/API calls)
  # Integration/e2e tests are in integration-tests.yml and model-tests.yml (manual execution)
  test:
    name: Unit Tests (Bun on ${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    needs: [changeset-check]
    if: always() && (github.event_name == 'push' || github.event_name == 'workflow_dispatch' || needs.changeset-check.result == 'success')
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v6
        with:
          # Need to checkout the PR branch for push access
          ref: ${{ github.head_ref || github.ref }}
          # Use a token with write access for pushing cache commits
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: Setup Bun
        uses: oven-sh/setup-bun@v2
        with:
          bun-version: latest

      - name: Install dependencies
        run: bun install
        working-directory: js

      - name: Run unit tests
        run: bun test tests/json-standard-unit.test.js tests/process-name.test.js
        working-directory: js

      - name: Commit cached API responses
        # Only commit on the primary OS to avoid conflicts
        if: matrix.os == 'ubuntu-latest' && github.event_name == 'pull_request'
        run: |
          # Check if there are any new cached files in data/api-cache
          if [ -d "data/api-cache" ] && [ -n "$(git status --porcelain data/api-cache/)" ]; then
            echo "Found uncommitted cached API responses"
            git config user.name "github-actions[bot]"
            git config user.email "github-actions[bot]@users.noreply.github.com"
            git add data/api-cache/
            git commit -m "chore: commit cached API responses (Links Notation format)

            🤖 Generated with [Claude Code](https://claude.com/claude-code)

            Co-Authored-By: Claude <noreply@anthropic.com>"
            git push
            echo "Pushed cached API responses to branch"
          else
            echo "No new cached API responses to commit"
          fi

  # Verbose HTTP logging integration test - verifies --verbose mode logs HTTP traffic
  # This is the ONLY real-API test in CI/CD. Uses free-tier model (opencode/minimax-m2.5-free)
  # to verify HTTP request/response logging works end-to-end.
  # Runs only on ubuntu-latest to conserve free API limits.
  # See: https://github.com/link-assistant/agent/issues/221
  verbose-integration:
    name: Verbose HTTP Logging Test
    runs-on: ubuntu-latest
    needs: [changeset-check]
    if: always() && (github.event_name == 'push' || github.event_name == 'workflow_dispatch' || needs.changeset-check.result == 'success')
    steps:
      - uses: actions/checkout@v6
        with:
          ref: ${{ github.head_ref || github.ref }}

      - name: Setup Bun
        uses: oven-sh/setup-bun@v2
        with:
          bun-version: latest

      - name: Install dependencies
        run: bun install
        working-directory: js

      - name: Run verbose HTTP logging integration test
        run: bun test tests/integration/verbose-hi.test.js
        working-directory: js
        timeout-minutes: 5

  # Release - only runs on main after tests pass (for push events)
  release:
    name: Release
    needs: [lint, test, verbose-integration]
    # Use always() to ensure this job runs even if changeset-check was skipped
    # This is needed because lint/test jobs have a transitive dependency on changeset-check
    if: always() && github.ref == 'refs/heads/main' && github.event_name == 'push' && needs.lint.result == 'success' && needs.test.result == 'success' && needs.verbose-integration.result == 'success'
    runs-on: ubuntu-latest
    concurrency:
      group: release-main
      cancel-in-progress: false
    # Permissions required for npm OIDC trusted publishing
    permissions:
      contents: write
      pull-requests: write
      id-token: write
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '24.x'
          registry-url: 'https://registry.npmjs.org'

      - name: Install dependencies
        run: npm install --legacy-peer-deps
        working-directory: js

      - name: Update npm for OIDC trusted publishing
        run: node scripts/setup-npm.mjs

      - name: Check for changesets
        id: check_changesets
        run: |
          # Count changeset files (excluding README.md and config.json)
          CHANGESET_COUNT=$(find js/.changeset -name "*.md" ! -name "README.md" | wc -l)
          echo "Found $CHANGESET_COUNT changeset file(s)"
          echo "has_changesets=$([[ $CHANGESET_COUNT -gt 0 ]] && echo 'true' || echo 'false')" >> $GITHUB_OUTPUT

      - name: Version packages and commit to main
        if: steps.check_changesets.outputs.has_changesets == 'true'
        id: version
        run: node scripts/version-and-commit.mjs --mode changeset

      - name: Publish to npm
        # Run if version was committed OR if a previous attempt already committed (for re-runs)
        if: steps.version.outputs.version_committed == 'true' || steps.version.outputs.already_released == 'true'
        id: publish
        run: node scripts/publish-to-npm.mjs --should-pull

      - name: Create GitHub Release
        if: steps.publish.outputs.published == 'true'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: node scripts/create-github-release.mjs --release-version "${{ steps.publish.outputs.published_version }}" --repository "${{ github.repository }}" --prefix "js-"

      - name: Format GitHub release notes
        if: steps.publish.outputs.published == 'true'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: node scripts/format-github-release.mjs --release-version "${{ steps.publish.outputs.published_version }}" --repository "${{ github.repository }}" --commit-sha "${{ github.sha }}" --prefix "js-"

  # Manual Instant Release - triggered via workflow_dispatch with instant mode
  # This job is in js.yml because npm trusted publishing
  # only allows one workflow file to be registered as a trusted publisher
  instant-release:
    name: Instant Release
    if: github.event_name == 'workflow_dispatch' && github.event.inputs.release_mode == 'instant'
    runs-on: ubuntu-latest
    concurrency:
      group: release-main
      cancel-in-progress: false
    # Permissions required for npm OIDC trusted publishing
    permissions:
      contents: write
      pull-requests: write
      id-token: write
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '24.x'
          registry-url: 'https://registry.npmjs.org'

      - name: Install dependencies
        run: npm install --legacy-peer-deps
        working-directory: js

      - name: Update npm for OIDC trusted publishing
        run: node scripts/setup-npm.mjs

      - name: Version packages and commit to main
        id: version
        run: node scripts/version-and-commit.mjs --mode instant --bump-type "${{ github.event.inputs.bump_type }}" --description "${{ github.event.inputs.description }}"

      - name: Publish to npm
        # Run if version was committed OR if a previous attempt already committed (for re-runs)
        if: steps.version.outputs.version_committed == 'true' || steps.version.outputs.already_released == 'true'
        id: publish
        run: node scripts/publish-to-npm.mjs

      - name: Create GitHub Release
        if: steps.publish.outputs.published == 'true'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: node scripts/create-github-release.mjs --release-version "${{ steps.publish.outputs.published_version }}" --repository "${{ github.repository }}" --prefix "js-"

      - name: Format GitHub release notes
        if: steps.publish.outputs.published == 'true'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: node scripts/format-github-release.mjs --release-version "${{ steps.publish.outputs.published_version }}" --repository "${{ github.repository }}" --commit-sha "${{ github.sha }}" --prefix "js-"

  # Manual Changeset PR - creates a pull request with the changeset for review
  changeset-pr:
    name: Create Changeset PR
    if: github.event_name == 'workflow_dispatch' && github.event.inputs.release_mode == 'changeset-pr'
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '24.x'

      - name: Install dependencies
        run: npm install --legacy-peer-deps
        working-directory: js

      - name: Create changeset file
        run: node scripts/create-manual-changeset.mjs --bump-type "${{ github.event.inputs.bump_type }}" --description "${{ github.event.inputs.description }}"

      - name: Format changeset with Prettier
        run: |
          # Run Prettier on the changeset file to ensure it matches project style
          cd js && npx prettier --write ".changeset/*.md" || true

          echo "Formatted changeset files"

      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          commit-message: 'chore: add changeset for manual ${{ github.event.inputs.bump_type }} release'
          branch: changeset-manual-release-${{ github.run_id }}
          delete-branch: true
          title: 'chore: manual ${{ github.event.inputs.bump_type }} release'
          body: |
            ## Manual Release Request

            This PR was created by a manual workflow trigger to prepare a **${{ github.event.inputs.bump_type }}** release.

            ### Release Details
            - **Type:** ${{ github.event.inputs.bump_type }}
            - **Description:** ${{ github.event.inputs.description || 'Manual release' }}
            - **Triggered by:** @${{ github.actor }}

            ### Next Steps
            1. Review the changeset in this PR
            2. Merge this PR to main
            3. The automated release workflow will create a version PR
            4. Merge the version PR to publish to npm and create a GitHub release