ci.yml

name: CI

on:
  push:
    branches:
      - main
  pull_request:
  workflow_dispatch:

permissions:
  contents: read
  actions: write

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}

jobs:
  workflow-guard-tests:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Validate macOS runner guards
        run: ./tests/test_ci_self_hosted_guard.sh

      - name: Validate release SDK build lane
        run: ./tests/test_ci_release_sdk_lane.sh

      - name: Validate Python test harness syntax
        run: git ls-files 'tests/*.py' 'tests_v2/*.py' 'scripts/*.py' | xargs python3 -m py_compile

      - name: Validate create-dmg version pinning
        run: ./tests/test_ci_create_dmg_pinned.sh

      - name: Validate unit-test SwiftPM retry guard
        run: ./tests/test_ci_unit_test_spm_retry.sh

      - name: Validate xcodebuild noninteractive crash prompt guard
        run: python3 tests/test_ci_xcodebuild_noninteractive_helper.py

      - name: Validate cmux scheme test configuration
        run: ./tests/test_ci_scheme_testaction_debug.sh

      - name: Validate GhosttyKit checksum verification
        run: ./tests/test_ci_ghosttykit_checksum_verification.sh

      - name: Validate nightly tag push auth
        run: ./tests/test_ci_nightly_tag_push_auth.sh

      - name: Validate nightly Xcode selection
        run: ./tests/test_ci_nightly_xcode_selection.sh

      - name: Validate universal nightly workflow
        run: bash ./tests/test_nightly_universal_build.sh

      - name: Validate release asset guard
        run: node scripts/release_asset_guard.test.js

      - name: Validate release attestation retry guard
        run: ./tests/test_ci_attestation_retry.sh

      - name: Validate current GhosttyKit checksum pin
        run: ./tests/test_ci_ghosttykit_checksum_present.sh

      - name: Validate Swift warning budget guard
        run: ./tests/test_ci_swift_warning_budget.sh

      - name: Validate Swift file length budget guard
        run: ./tests/test_ci_swift_file_length_budget.sh

      - name: Validate auxiliary window close shortcut lint
        run: ./tests/test_ci_auxiliary_window_close_shortcuts.sh

      - name: Validate pbxproj test-wiring lint
        run: ./tests/test_ci_pbxproj_test_wiring.sh

      - name: Validate pbxproj objectVersion pin and normalization
        run: ./scripts/check-pbxproj.sh

      - name: Validate bash shell integration job control
        run: python3 tests/test_bash_integration_no_done_notifications.py

      - name: Validate bash prompt bootstrap composes with user PROMPT_COMMAND (starship)
        run: python3 tests/test_issue_5164_starship_prompt_composition.py

      - name: Validate Swift file length budget
        run: python3 scripts/swift_file_length_budget.py --budget .github/swift-file-length-budget.tsv

  remote-daemon-tests:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version-file: daemon/remote/go.mod
          cache-dependency-path: daemon/remote/go.sum

      - name: Run remote daemon tests
        working-directory: daemon/remote
        run: go test ./...

      - name: Validate remote daemon release assets
        run: ./tests/test_remote_daemon_release_assets.sh

  web-typecheck:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: web
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Bun
        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2

      - name: Install dependencies
        run: bun install --frozen-lockfile

      - name: Typecheck
        run: bun tsc --noEmit

      - name: Web tests
        run: bun test

  # Checks for in-app React webviews (currently the diff viewer; more cmux React
  # surfaces will live alongside it).
  react-apps-check:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Bun
        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2

      - name: Verify generated webviews assets
        run: ./scripts/build-webviews-app.sh --check

      - name: Verify React Compiler for webviews
        run: ./scripts/check-webviews-react-compiler.mjs

      - name: Typecheck webviews
        working-directory: webviews
        run: bun run typecheck

      - name: Test webviews
        working-directory: webviews
        run: bun run test

      - name: Oxlint webviews
        working-directory: webviews
        run: bun run lint:ci

      - name: React Doctor
        working-directory: webviews
        run: bun run react-doctor:ci

  web-db-migrations:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: web
    services:
      postgres:
        image: postgres:16-alpine
        env:
          POSTGRES_DB: cmux_test
          POSTGRES_PASSWORD: cmux
          POSTGRES_USER: cmux
        ports:
          - 5432:5432
        options: >-
          --health-cmd "pg_isready -U cmux -d cmux_test"
          --health-interval 1s
          --health-timeout 5s
          --health-retries 30
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Bun
        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2

      - name: Install dependencies
        run: bun install --frozen-lockfile

      - name: Apply migrations
        env:
          DATABASE_URL: postgres://cmux:cmux@localhost:5432/cmux_test
          DIRECT_DATABASE_URL: postgres://cmux:cmux@localhost:5432/cmux_test
        run: bunx drizzle-kit migrate --config drizzle.config.ts

      - name: Re-apply migrations
        env:
          DATABASE_URL: postgres://cmux:cmux@localhost:5432/cmux_test
          DIRECT_DATABASE_URL: postgres://cmux:cmux@localhost:5432/cmux_test
        run: bunx drizzle-kit migrate --config drizzle.config.ts

      - name: Database behavior tests
        env:
          CMUX_DB_TEST: "1"
          DATABASE_URL: postgres://cmux:cmux@localhost:5432/cmux_test
          DIRECT_DATABASE_URL: postgres://cmux:cmux@localhost:5432/cmux_test
        run: bun run test:db:behavior

  tests:
    runs-on: ${{ vars.MACOS_RUNNER_15 || 'warp-macos-15-arm64-6x' }}
    timeout-minutes: 75
    env:
      CMUX_SKIP_ZIG_BUILD: "1"
      # XCTest app-host crashes can leave xcodebuild waiting in Swift's crash
      # backtracer until the job timeout. Keep crash handling non-interactive
      # and cheap so xcodebuild can restart/finish the suite.
      SWIFT_BACKTRACE: "interactive=no,timeout=0s,symbolicate=off,color=no"
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          submodules: recursive

      - name: Select Xcode
        run: |
          set -euo pipefail
          if [ -d "/Applications/Xcode.app/Contents/Developer" ]; then
            XCODE_DIR="/Applications/Xcode.app/Contents/Developer"
          else
            XCODE_APP="$(
              find /Applications -maxdepth 1 -name 'Xcode*.app' -print 2>/dev/null \
                | sort \
                | tail -n 1 \
                || true
            )"
            if [ -n "$XCODE_APP" ]; then
              XCODE_DIR="$XCODE_APP/Contents/Developer"
            else
              echo "No Xcode.app found under /Applications" >&2
              exit 1
            fi
          fi
          echo "DEVELOPER_DIR=$XCODE_DIR" >> "$GITHUB_ENV"
          export DEVELOPER_DIR="$XCODE_DIR"
          xcodebuild -version

      - name: Capture Ghostty revision
        id: ghostty-revision
        run: |
          echo "sha=$(git -C ghostty rev-parse HEAD)" >> "$GITHUB_OUTPUT"

      - name: Cache GhosttyKit.xcframework
        id: cache-ghosttykit
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: GhosttyKit.xcframework
          key: ghosttykit-${{ steps.ghostty-revision.outputs.sha }}

      - name: Download pre-built GhosttyKit.xcframework
        if: steps.cache-ghosttykit.outputs.cache-hit != 'true'
        run: |
          ./scripts/download-prebuilt-ghosttykit.sh

      - name: Install zig
        run: |
          ./scripts/install-zig-ci.sh

      - name: Install Rust
        run: |
          ./scripts/install-rust-ci.sh

      - name: Cache Zig packages
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: ~/.cache/zig
          key: zig-packages-${{ hashFiles('ghostty/build.zig.zon', 'ghostty/build.zig.zon.json') }}
          restore-keys: zig-packages-

      - name: Cache Swift packages
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: .ci-source-packages
          key: spm-${{ hashFiles('cmux.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved') }}
          restore-keys: spm-

      - name: Prepare isolated DerivedData
        run: |
          set -euo pipefail
          DERIVED_DATA_PATH="${RUNNER_TEMP}/cmux-derived-data-tests-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
          rm -rf "$DERIVED_DATA_PATH"
          mkdir -p "$DERIVED_DATA_PATH"
          echo "CMUX_DERIVED_DATA_PATH=$DERIVED_DATA_PATH" >> "$GITHUB_ENV"

      - name: Resolve Swift packages
        run: |
          set -euo pipefail
          SOURCE_PACKAGES_DIR="$PWD/.ci-source-packages"
          mkdir -p "$SOURCE_PACKAGES_DIR"

          for attempt in 1 2 3; do
            if xcodebuild -project cmux.xcodeproj -scheme cmux-unit -configuration Debug \
              -derivedDataPath "$CMUX_DERIVED_DATA_PATH" \
              -clonedSourcePackagesDirPath "$SOURCE_PACKAGES_DIR" \
              -resolvePackageDependencies; then
              exit 0
            fi
            if [ "$attempt" -eq 3 ]; then
              echo "Failed to resolve Swift packages after 3 attempts" >&2
              exit 1
            fi
            echo "Package resolution failed on attempt $attempt, retrying..."
            sleep $((attempt * 5))
          done

      - name: Run Ghostty split-theme appearance regression
        run: |
          set -euo pipefail
          SOURCE_PACKAGES_DIR="$PWD/.ci-source-packages"
          xcodebuild -project cmux.xcodeproj -scheme cmux-unit -configuration Debug \
            -derivedDataPath "$CMUX_DERIVED_DATA_PATH" \
            -clonedSourcePackagesDirPath "$SOURCE_PACKAGES_DIR" \
            -disableAutomaticPackageResolution \
            -destination "platform=macOS" \
            CMUX_SKIP_ZIG_BUILD=1 \
            -only-testing:cmuxTests/AppearanceSettingsTests/testSplitGhosttyThemeUsesStoredDarkModeWhenAppAppearanceIsStaleLight \
            -only-testing:cmuxTests/AppearanceSettingsTests/testSplitGhosttyThemeUsesStoredLightModeWhenAppAppearanceIsStaleDark \
            -only-testing:cmuxTests/AppearanceSettingsTests/testSplitGhosttyThemeUsesSystemLightWhenAppAppearanceIsStaleDark \
            -only-testing:cmuxTests/AppearanceSettingsTests/testSplitGhosttyThemeUsesSystemDarkWhenAppAppearanceIsStaleLight \
            test

      - name: Run browser system proxy mirror regression
        run: |
          # Focused gate for https://github.com/manaflow-ai/cmux/issues/5888.
          # The full "Run unit tests" step tolerates app-host crashes by
          # parsing only the last test summary, so suites that run late can
          # be silently skipped when an earlier crash aborts the run. This
          # step makes the system-proxy loopback-bypass regression an
          # unconditional gate.
          set -euo pipefail
          SOURCE_PACKAGES_DIR="$PWD/.ci-source-packages"
          xcodebuild -project cmux.xcodeproj -scheme cmux-unit -configuration Debug \
            -derivedDataPath "$CMUX_DERIVED_DATA_PATH" \
            -clonedSourcePackagesDirPath "$SOURCE_PACKAGES_DIR" \
            -disableAutomaticPackageResolution \
            -destination "platform=macOS" \
            CMUX_SKIP_ZIG_BUILD=1 \
            -only-testing:cmuxTests/BrowserSystemProxyMirrorTests \
            test

      - name: Run Option/Alt sided-modifier regression
        run: |
          # Focused gate for https://github.com/manaflow-ai/cmux/issues/5993.
          # The full "Run unit tests" step tolerates app-host crashes by
          # parsing only the last test summary, so suites that run late can
          # be silently skipped when an earlier crash aborts the run. This
          # step makes the Option/Alt sided-modifier and Option-composition
          # regression an unconditional gate.
          set -euo pipefail
          SOURCE_PACKAGES_DIR="$PWD/.ci-source-packages"
          xcodebuild -project cmux.xcodeproj -scheme cmux-unit -configuration Debug \
            -derivedDataPath "$CMUX_DERIVED_DATA_PATH" \
            -clonedSourcePackagesDirPath "$SOURCE_PACKAGES_DIR" \
            -disableAutomaticPackageResolution \
            -destination "platform=macOS" \
            CMUX_SKIP_ZIG_BUILD=1 \
            -only-testing:cmuxTests/GhosttyOptionAsAltModsTests \
            test

      - name: Run unit tests
        run: |
          set -euo pipefail
          SOURCE_PACKAGES_DIR="$PWD/.ci-source-packages"
          run_unit_tests() {
            # These app-host tests create real SwiftUI/WebKit/Ghostty windows and
            # intermittently crash inside XCTest's post-test memory checker or
            # leave native display/WebKit work alive on GitHub macOS runners.
            # When that happens, Swift's crash/backtrace handling or the stale
            # app-host process keeps xcodebuild alive until the job-level timeout,
            # hiding the actual unit test summary.
            scripts/ci/xcodebuild_noninteractive.py \
              xcodebuild -project cmux.xcodeproj -scheme cmux-unit -configuration Debug \
              -derivedDataPath "$CMUX_DERIVED_DATA_PATH" \
              -clonedSourcePackagesDirPath "$SOURCE_PACKAGES_DIR" \
              -disableAutomaticPackageResolution \
              -destination "platform=macOS" \
              CMUX_SKIP_ZIG_BUILD=1 \
              test 2>&1 &
            local xcodebuild_pid=$!
            local timeout_seconds="${CMUX_UNIT_TEST_TIMEOUT_SECONDS:-900}"
            local deadline=$((SECONDS + timeout_seconds))
            while kill -0 "$xcodebuild_pid" 2>/dev/null; do
              if [ "$SECONDS" -ge "$deadline" ]; then
                echo "xcodebuild unit test timeout after ${timeout_seconds}s; terminating"
                kill -TERM "$xcodebuild_pid" 2>/dev/null || true
                sleep 5
                kill -KILL "$xcodebuild_pid" 2>/dev/null || true
                wait "$xcodebuild_pid" 2>/dev/null || true
                return 124
              fi
              sleep 5
            done
            wait "$xcodebuild_pid"
          }

          # Stream output via tee so CI logs are visible in real time, while still
          # capturing for post-run analysis of expected vs unexpected failures.
          set +e
          run_unit_tests | tee /tmp/test-output.txt
          EXIT_CODE=${PIPESTATUS[0]}
          OUTPUT=$(cat /tmp/test-output.txt)
          set -e

          # SwiftPM binary artifact resolution can occasionally fail on ephemeral
          # runners with "Could not resolve package dependencies". Retry once after
          # clearing SwiftPM/DerivedData caches to recover from transient corruption.
          if [ "$EXIT_CODE" -ne 0 ] && echo "$OUTPUT" | grep -q "Could not resolve package dependencies"; then
            echo "SwiftPM package resolution failed, clearing caches and retrying once"
            rm -rf ~/Library/Caches/org.swift.swiftpm
            mkdir -p ~/Library/Caches/org.swift.swiftpm
            rm -rf "$CMUX_DERIVED_DATA_PATH"
            mkdir -p "$CMUX_DERIVED_DATA_PATH"
            set +e
            run_unit_tests | tee /tmp/test-output.txt
            EXIT_CODE=${PIPESTATUS[0]}
            OUTPUT=$(cat /tmp/test-output.txt)
            set -e
          fi

          if [ "$EXIT_CODE" -ne 0 ]; then
            SUMMARY=$(echo "$OUTPUT" | grep "Executed.*tests.*with.*failures" | tail -1)
            if echo "$SUMMARY" | grep -q "(0 unexpected)"; then
              echo "All failures are expected, treating as pass"
            else
              echo "Unexpected test failures detected"
              exit 1
            fi
          fi

      - name: Run bundled Ghostty theme picker helper regression
        run: |
          set -euo pipefail
          CMUX_SOURCE_PACKAGES_DIR="$PWD/.ci-source-packages" \
            ./tests/test_bundled_ghostty_theme_picker_helper.sh

      - name: Run Swift package unit tests
        run: |
          set -euo pipefail
          # CmuxCommandPalette's nucleo FFI tests load the Rust dylib through
          # CMUX_NUCLEO_FFI_LIB (they skip when it is absent, so build it here
          # to keep the FFI parity suite a real gate).
          cargo build --manifest-path Native/CommandPaletteNucleoFFI/Cargo.toml --release
          export CMUX_NUCLEO_FFI_LIB="$PWD/Native/CommandPaletteNucleoFFI/target/release/libcmux_command_palette_nucleo_ffi.dylib"
          # The cmux-unit scheme only runs the cmuxTests app-host suite; it does
          # not execute the SPM package test targets. Run them here so package
          # tests (settings stores, secret-file migration, socket-control
          # convergence, etc.) are a real CI gate, not just compiled.
          # Scoped to packages that build headlessly via SwiftPM (no GhosttyKit /
          # app-target dependency). Add a package here once its `swift test`
          # is confirmed to resolve standalone. The GhosttyKit-referencing
          # packages (CmuxTerminalCore and the terminal packages stacked on
          # it) are the exception: their binaryTarget only needs the
          # xcframework present at the repo root (downloaded earlier in this
          # job), and their test runners link a C stub for the @_silgen_name
          # symbol instead of the GhosttyKit archive.
          PACKAGES=(
            CMUXAuthCore
            CmuxCore
            CmuxRemoteDaemon
            CmuxRemoteWorkspace
            CmuxRemoteSession
            CmuxAuthRuntime
            CmuxCommandPalette
            CmuxControlSocket
            CmuxFileWatch
            CmuxFoundation
            CmuxGit
            CmuxProcess
            CmuxSettings
            CmuxSettingsUI
            CmuxSocketControl
            CmuxTerminal
            CmuxTerminalCore
            CmuxTerminalEngine
            CmuxTerminalServices
            CmuxUpdater
            CMUXAgentLaunch
          )
          # SwiftPM emits an error-severity diagnostic while planning the
          # GhosttyKit binaryTarget (the xcframework's static archive is not
          # lib-prefixed: "unexpected binary name"/"unexpected binary
          # framework"). The build and every test still succeed, but the
          # diagnostic poisons the process exit code on a fresh .build. For
          # the GhosttyKit-referencing packages only, tolerate exactly that
          # case: a nonzero exit passes only when the all-tests-passed summary
          # is present, no test failures are reported, and the only error
          # lines are that known diagnostic. Everything else (compile errors,
          # test failures, crashes) still fails the job.
          for pkg in "${PACKAGES[@]}"; do
            echo "::group::swift test Packages/$pkg"
            case "$pkg" in
            CmuxTerminal|CmuxTerminalCore|CmuxTerminalEngine|CmuxTerminalServices)
              status=0
              output="$(swift test --package-path "Packages/$pkg" 2>&1)" || status=$?
              printf '%s\n' "$output"
              if [ "$status" -ne 0 ]; then
                if printf '%s\n' "$output" | grep -Eq 'Test run with [0-9]+ tests( in [0-9]+ suites)? passed' \
                  && ! printf '%s\n' "$output" | grep -Eq 'with [1-9][0-9]* failures?' \
                  && ! printf '%s\n' "$output" | grep -v 'unexpected binary' | grep -Eq '(^|[^a-zA-Z])error:'; then
                  echo "Tolerated cosmetic GhosttyKit binaryTarget diagnostic; all tests passed."
                else
                  exit "$status"
                fi
              fi
              ;;
            *)
              swift test --package-path "Packages/$pkg"
              ;;
            esac
            echo "::endgroup::"
          done

      - name: Setup Bun
        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2

      - name: Build and test Agent Session web resources
        run: |
          set -euo pipefail
          bun install --frozen-lockfile
          bun run agent-session-web:build
          bun run agent-session-web:test
          git diff --exit-code -- Resources/agent-session-react Resources/agent-session-solid

      - name: Run CLI no-socket regressions
        run: |
          set -euo pipefail

          CLI_BIN="$(
            find "$CMUX_DERIVED_DATA_PATH" -path "*/Build/Products/Debug/cmux" -exec stat -f '%m %N' {} \; \
              | sort -nr \
              | head -1 \
              | cut -d' ' -f2-
          )"
          if [ -z "${CLI_BIN:-}" ] || [ ! -x "$CLI_BIN" ]; then
            echo "cmux CLI binary not found in DerivedData" >&2
            exit 1
          fi

          CMUX_CLI_BIN="$CLI_BIN" python3 tests/test_cli_version_memory_guard.py
          CMUX_CLI_BIN="$CLI_BIN" python3 tests/test_cli_contract_help.py
          CMUX_CLI_BIN="$CLI_BIN" python3 tests/test_cli_layout_focus_contract.py
          CMUX_CLI_BIN="$CLI_BIN" python3 tests/test_cli_socket_operation_deadline.py
          python3 tests/test_stress_cli_socket_api.py
          CMUX_CLI_BIN="$CLI_BIN" python3 tests/test_cli_omo_openagent_plugin_migration.py
          CMUX_CLI_BIN="$CLI_BIN" python3 tests/test_cli_socket_autodiscovery.py
          python3 tests/test_claude_wrapper_hooks.py
          python3 tests/test_claude_wrapper_user_binary_resolution.py
          CMUX_CLI_BIN="$CLI_BIN" python3 tests/test_cli_claude_teams_fallback_path.py
          CMUX_CLI_BIN="$CLI_BIN" python3 tests/test_cli_omo_fallback_path.py
          CMUX_CLI_BIN="$CLI_BIN" python3 tests/test_cli_omx_fallback_path.py
          CMUX_CLI_BIN="$CLI_BIN" python3 tests/test_cli_omc_fallback_path.py
          python3 tests/test_issue_2448_shell_claude_wrapper_dispatch.py
          python3 tests/test_shell_git_branch_stale_cwd.py
          python3 tests/test_shell_git_config_remote_url_parsing.py
          CMUX_CLI_BIN="$CLI_BIN" python3 tests/test_claude_hook_stop_last_assistant.py
          CMUX_CLI_BIN="$CLI_BIN" python3 tests/test_claude_hook_clear_running_status.py
          CMUX_CLI_BIN="$CLI_BIN" python3 tests/test_pi_extension_install.py
          CMUX_CLI_BIN="$CLI_BIN" python3 tests/test_omp_extension_install.py

  tests-build-and-lag:
    # Build the full cmux scheme and run the lag regression on macOS CI.
    # Keep lag validation separate from UI regressions so functional UI failures
    # and performance regressions stay isolated. Broader interactive UI suites
    # still run via test-e2e.yml on GitHub-hosted runners.
    runs-on: ${{ vars.MACOS_RUNNER_15 || 'warp-macos-15-arm64-6x' }}
    # A cold DerivedData cache (any project.pbxproj or Package.resolved change
    # mints a new cache key with no restore-keys fallback) forces a full
    # cmux build whose Swift codegen alone can run 20+ min. Project/package
    # changes from the sidebar extension kit pushed this full build plus the
    # CA and lag regressions beyond 35 min before the cache could repopulate.
    timeout-minutes: 55
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          submodules: recursive

      - name: Select Xcode
        run: |
          set -euo pipefail
          if [ -d "/Applications/Xcode.app/Contents/Developer" ]; then
            XCODE_DIR="/Applications/Xcode.app/Contents/Developer"
          else
            XCODE_APP="$(
              find /Applications -maxdepth 1 -name 'Xcode*.app' -print 2>/dev/null \
                | sort \
                | tail -n 1 \
                || true
            )"
            if [ -n "$XCODE_APP" ]; then
              XCODE_DIR="$XCODE_APP/Contents/Developer"
            else
              echo "No Xcode.app found under /Applications" >&2
              exit 1
            fi
          fi
          echo "DEVELOPER_DIR=$XCODE_DIR" >> "$GITHUB_ENV"
          export DEVELOPER_DIR="$XCODE_DIR"
          xcodebuild -version

      - name: Prepare isolated DerivedData
        run: |
          set -euo pipefail
          DERIVED_DATA_PATH="$RUNNER_TEMP/cmux-deriveddata-tests-build-and-lag-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
          rm -rf "$DERIVED_DATA_PATH"
          echo "CMUX_DERIVED_DATA_PATH=$DERIVED_DATA_PATH" >> "$GITHUB_ENV"

      - name: Capture Ghostty revision
        id: ghostty-revision
        run: |
          echo "sha=$(git -C ghostty rev-parse HEAD)" >> "$GITHUB_OUTPUT"

      - name: Cache GhosttyKit.xcframework
        id: cache-ghosttykit-lag
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: GhosttyKit.xcframework
          key: ghosttykit-${{ steps.ghostty-revision.outputs.sha }}

      - name: Download pre-built GhosttyKit.xcframework
        if: steps.cache-ghosttykit-lag.outputs.cache-hit != 'true'
        run: |
          ./scripts/download-prebuilt-ghosttykit.sh

      - name: Install zig
        run: |
          ./scripts/install-zig-ci.sh

      - name: Install Rust
        run: |
          ./scripts/install-rust-ci.sh

      - name: Cache Zig packages
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: ~/.cache/zig
          key: zig-packages-${{ hashFiles('ghostty/build.zig.zon', 'ghostty/build.zig.zon.json') }}
          restore-keys: zig-packages-

      - name: Cache DerivedData
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: ~/Library/Developer/Xcode/DerivedData/cmux-*
          key: deriveddata-build-${{ hashFiles('cmux.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved') }}-${{ hashFiles('cmux.xcodeproj/project.pbxproj') }}-${{ steps.ghostty-revision.outputs.sha }}

      - name: Cache Swift packages
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: .ci-source-packages
          key: spm-build-${{ hashFiles('cmux.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved') }}
          restore-keys: spm-build-

      - name: Resolve Swift packages
        run: |
          set -euo pipefail
          SOURCE_PACKAGES_DIR="$PWD/.ci-source-packages"
          rm -rf "$CMUX_DERIVED_DATA_PATH"
          mkdir -p "$SOURCE_PACKAGES_DIR"

          for attempt in 1 2 3; do
            if xcodebuild -project cmux.xcodeproj -scheme cmux -configuration Debug \
              -derivedDataPath "$CMUX_DERIVED_DATA_PATH" \
              -clonedSourcePackagesDirPath "$SOURCE_PACKAGES_DIR" \
              -resolvePackageDependencies; then
              exit 0
            fi
            if [ "$attempt" -eq 3 ]; then
              echo "Failed to resolve Swift packages after 3 attempts" >&2
              exit 1
            fi
            echo "Package resolution failed on attempt $attempt, retrying..."
            sleep $((attempt * 5))
          done

      - name: Build app
        run: |
          set -euo pipefail
          SOURCE_PACKAGES_DIR="$PWD/.ci-source-packages"
          xcodebuild -project cmux.xcodeproj -scheme cmux -configuration Debug \
            -derivedDataPath "$CMUX_DERIVED_DATA_PATH" \
            -clonedSourcePackagesDirPath "$SOURCE_PACKAGES_DIR" \
            -disableAutomaticPackageResolution \
            -destination "platform=macOS" build 2>&1 | tee /tmp/cmux-build-output.txt

      - name: Validate Swift warning budget
        run: python3 scripts/swift_warning_budget.py --log /tmp/cmux-build-output.txt

      - name: Run CoreAnimation main-thread startup regression
        run: |
          set -euo pipefail
          APP="$(
            find "$CMUX_DERIVED_DATA_PATH" -path "*/Build/Products/Debug/cmux DEV.app" -exec stat -f '%m %N' {} \; \
              | sort -nr \
              | head -1 \
              | cut -d' ' -f2-
          )"
          if [ -z "${APP:-}" ] || [ ! -d "$APP" ]; then
            echo "cmux DEV.app not found in DerivedData" >&2
            exit 1
          fi

          CMUX_ALLOW_UNTAGGED_CA_REGRESSION=1 \
          CMUX_CA_ASSERT_HOLD_SECONDS=15 \
          CMUX_TAG="ci-ca-main-thread" \
          ./scripts/verify-main-thread-ca-transactions.sh "$APP"

      - name: Create virtual display
        run: |
          set -euo pipefail
          clang -framework Foundation -framework CoreGraphics \
            -o /tmp/create-virtual-display scripts/create-virtual-display.m
          /tmp/create-virtual-display &
          VDISPLAY_PID=$!
          echo "VDISPLAY_PID=$VDISPLAY_PID" >> "$GITHUB_ENV"
          sleep 3
          kill -0 "$VDISPLAY_PID"

      - name: Run workspace churn typing-lag regression
        run: |
          set -euo pipefail

          APP="$(find "$CMUX_DERIVED_DATA_PATH" -path "*/Build/Products/Debug/cmux DEV.app" -print -quit)"
          if [ -z "${APP:-}" ] || [ ! -d "$APP" ]; then
            echo "cmux DEV.app not found in DerivedData" >&2
            exit 1
          fi

          TAG="ci-lag"
          SOCK="/tmp/cmux-debug-${TAG}.sock"
          BUNDLE_ID="$(
            /usr/libexec/PlistBuddy -c 'Print :CFBundleIdentifier' "$APP/Contents/Info.plist" 2>/dev/null \
              || echo 'com.cmuxterm.app.debug'
          )"

          pkill -x "cmux DEV" || true
          rm -f "$SOCK" "/tmp/cmux-${TAG}.sock" || true
          defaults write "$BUNDLE_ID" socketControlMode -string full >/dev/null 2>&1 || true

          CMUX_TAG="$TAG" CMUX_SOCKET_PATH="$SOCK" CMUX_UI_TEST_MODE=1 "$APP/Contents/MacOS/cmux DEV" >/tmp/cmux-ci-lag.log 2>&1 &
          APP_PID=$!
          trap 'kill "$APP_PID" >/dev/null 2>&1 || true' EXIT

          for _ in {1..240}; do
            [ -S "$SOCK" ] && break
            sleep 0.25
          done
          [ -S "$SOCK" ] || { echo "Socket not ready at $SOCK" >&2; exit 1; }

          CMUX_SOCKET_PATH="$SOCK" \
          CMUX_LAG_MAX_P95_RATIO=1.70 \
          CMUX_LAG_MAX_AVG_RATIO=1.70 \
          CMUX_LAG_MIN_BASELINE_P95_MS_FOR_RATIO=6.0 \
          CMUX_LAG_MIN_BASELINE_AVG_MS_FOR_RATIO=4.0 \
          CMUX_LAG_MAX_P95_DELTA_MS=20.0 \
          CMUX_LAG_MAX_AVG_DELTA_MS=12.0 \
          CMUX_LAG_MAX_CHURN_P95_MS=35 \
          CMUX_LAG_KEY_EVENTS=180 \
          python3 tests/test_workspace_churn_up_arrow_lag.py

      - name: Cleanup virtual display
        if: always()
        run: |
          set -euo pipefail
          if [ -n "${VDISPLAY_PID:-}" ]; then
            kill "$VDISPLAY_PID" >/dev/null 2>&1 || true
          fi
          rm -f /tmp/create-virtual-display

  release-ghostty-cli-helper:
    runs-on: ${{ vars.MACOS_RUNNER_15 || 'warp-macos-15-arm64-6x' }}
    timeout-minutes: 20
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          submodules: recursive

      - name: Install zig
        run: ./scripts/install-zig-ci.sh

      - name: Cache Zig packages
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: ~/.cache/zig
          key: zig-packages-${{ hashFiles('ghostty/build.zig.zon', 'ghostty/build.zig.zon.json') }}
          restore-keys: zig-packages-

      - name: Build universal Ghostty CLI helper
        run: |
          set -euo pipefail
          mkdir -p ghostty-cli-helper
          ./scripts/build-ghostty-cli-helper.sh --universal --output ghostty-cli-helper/ghostty
          lipo ghostty-cli-helper/ghostty -verify_arch arm64 x86_64

      - name: Upload universal Ghostty CLI helper
        id: upload-ghostty-cli-helper
        continue-on-error: true
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: cmux-ghostty-cli-helper
          path: ghostty-cli-helper/ghostty
          if-no-files-found: error

      - name: Retry universal Ghostty CLI helper upload
        if: steps.upload-ghostty-cli-helper.outcome == 'failure'
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: cmux-ghostty-cli-helper
          path: ghostty-cli-helper/ghostty
          if-no-files-found: error
          overwrite: true

  release-build:
    needs: release-ghostty-cli-helper
    # Compile the same unsigned universal Release app that nightly builds before
    # signing, notarization, and publishing. This catches DEBUG/Release boundary
    # mistakes before they reach main.
    # Keep the app build on macOS 26 so SDK-gated SwiftUI Liquid Glass code
    # compiles into the same artifact shape as nightly and stable releases.
    runs-on: ${{ vars.MACOS_RUNNER_26 || 'warp-macos-26-arm64-6x' }}
    timeout-minutes: 20
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          submodules: recursive

      - name: Select Xcode
        run: |
          set -euo pipefail
          if [ -d "/Applications/Xcode.app/Contents/Developer" ]; then
            XCODE_DIR="/Applications/Xcode.app/Contents/Developer"
          else
            XCODE_APP="$(
              find /Applications -maxdepth 1 -name 'Xcode*.app' -print 2>/dev/null \
                | sort \
                | tail -n 1 \
                || true
            )"
            if [ -n "$XCODE_APP" ]; then
              XCODE_DIR="$XCODE_APP/Contents/Developer"
            else
              echo "No Xcode.app found under /Applications" >&2
              exit 1
            fi
          fi
          echo "DEVELOPER_DIR=$XCODE_DIR" >> "$GITHUB_ENV"
          export DEVELOPER_DIR="$XCODE_DIR"
          xcodebuild -version
          xcrun --sdk macosx --show-sdk-path

      - name: Capture Ghostty revision
        id: ghostty-revision
        run: |
          echo "sha=$(git -C ghostty rev-parse HEAD)" >> "$GITHUB_OUTPUT"

      - name: Cache GhosttyKit.xcframework
        id: cache-ghosttykit-release
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: GhosttyKit.xcframework
          key: ghosttykit-${{ steps.ghostty-revision.outputs.sha }}

      - name: Download pre-built GhosttyKit.xcframework
        if: steps.cache-ghosttykit-release.outputs.cache-hit != 'true'
        run: |
          ./scripts/download-prebuilt-ghosttykit.sh

      - name: Install Rust
        run: |
          ./scripts/install-rust-ci.sh

      - name: Cache DerivedData
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: build-universal
          key: deriveddata-release-${{ hashFiles('cmux.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved') }}-${{ hashFiles('cmux.xcodeproj/project.pbxproj') }}-${{ steps.ghostty-revision.outputs.sha }}

      - name: Cache Swift packages
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: .spm-cache
          key: spm-release-${{ hashFiles('cmux.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved') }}
          restore-keys: |
            spm-release-
            spm-

      - name: Build universal app (Release)
        run: |
          set -euo pipefail
          CMUX_SKIP_ZIG_BUILD=1 xcodebuild -project cmux.xcodeproj -scheme cmux -configuration Release -derivedDataPath build-universal \
            -destination 'generic/platform=macOS' \
            -clonedSourcePackagesDirPath .spm-cache \
            ARCHS="arm64 x86_64" \
            ONLY_ACTIVE_ARCH=NO \
            CODE_SIGNING_ALLOWED=NO ASSETCATALOG_COMPILER_APPICON_NAME=AppIcon-Nightly build

      - name: Download universal Ghostty CLI helper
        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: cmux-ghostty-cli-helper
          path: ghostty-cli-helper

      - name: Install universal Ghostty CLI helper
        run: |
          set -euo pipefail
          ./scripts/install-prebuilt-ghostty-cli-helper.sh \
            ghostty-cli-helper/ghostty \
            build-universal/Build/Products/Release/cmux.app

      - name: Validate Release artifact slices
        run: |
          set -euo pipefail
          APP_BINARY="build-universal/Build/Products/Release/cmux.app/Contents/MacOS/cmux"
          CLI_BINARY="build-universal/Build/Products/Release/cmux.app/Contents/Resources/bin/cmux"
          HELPER_BINARY="build-universal/Build/Products/Release/cmux.app/Contents/Resources/bin/ghostty"
          test -x "$APP_BINARY"
          test -x "$CLI_BINARY"
          test -x "$HELPER_BINARY"
          file "$APP_BINARY" "$CLI_BINARY" "$HELPER_BINARY"
          SDK_VERSION="$(otool -l "$APP_BINARY" | awk '/LC_BUILD_VERSION/ { in_version=1; next } in_version && /sdk / { print $2; exit }')"
          echo "App SDK version: $SDK_VERSION"
          lipo "$APP_BINARY" -verify_arch arm64 x86_64
          lipo "$CLI_BINARY" -verify_arch arm64 x86_64
          lipo "$HELPER_BINARY" -verify_arch arm64 x86_64
          [[ "$SDK_VERSION" == 26.* ]]

  ui-regressions:
    runs-on: ${{ vars.MACOS_RUNNER_15 || 'warp-macos-15-arm64-6x' }}
    # Cold builds after project/package changes can spend more than 25 minutes
    # in build-for-testing before the UI regression script starts.
    timeout-minutes: 45
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          submodules: recursive

      - name: Select Xcode
        run: |
          set -euo pipefail
          if [ -d "/Applications/Xcode.app/Contents/Developer" ]; then
            XCODE_DIR="/Applications/Xcode.app/Contents/Developer"
          else
            XCODE_APP="$(
              find /Applications -maxdepth 1 -name 'Xcode*.app' -print 2>/dev/null \
                | sort \
                | tail -n 1 \
                || true
            )"
            if [ -n "$XCODE_APP" ]; then
              XCODE_DIR="$XCODE_APP/Contents/Developer"
            else
              echo "No Xcode.app found under /Applications" >&2
              exit 1
            fi
          fi
          echo "DEVELOPER_DIR=$XCODE_DIR" >> "$GITHUB_ENV"
          export DEVELOPER_DIR="$XCODE_DIR"
          xcodebuild -version
          xcrun --sdk macosx --show-sdk-path

      - name: Prepare isolated DerivedData
        run: |
          set -euo pipefail
          DERIVED_DATA_PATH="$RUNNER_TEMP/cmux-deriveddata-ui-regressions-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
          rm -rf "$DERIVED_DATA_PATH"
          echo "CMUX_DERIVED_DATA_PATH=$DERIVED_DATA_PATH" >> "$GITHUB_ENV"

      - name: Download pre-built GhosttyKit.xcframework
        run: ./scripts/download-prebuilt-ghosttykit.sh

      - name: Install zig
        run: |
          ./scripts/install-zig-ci.sh

      - name: Install Rust
        run: |
          ./scripts/install-rust-ci.sh

      - name: Cache Zig packages
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: ~/.cache/zig
          key: zig-packages-${{ hashFiles('ghostty/build.zig.zon', 'ghostty/build.zig.zon.json') }}
          restore-keys: zig-packages-

      - name: Cache Swift packages
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: .ci-source-packages
          key: spm-ui-regressions-${{ hashFiles('cmux.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved') }}
          restore-keys: spm-ui-regressions-

      - name: Resolve Swift packages
        run: |
          set -euo pipefail
          SOURCE_PACKAGES_DIR="$PWD/.ci-source-packages"
          rm -rf "$CMUX_DERIVED_DATA_PATH"
          mkdir -p "$SOURCE_PACKAGES_DIR"

          for attempt in 1 2 3; do
            if xcodebuild -project cmux.xcodeproj -scheme cmux -configuration Debug \
              -derivedDataPath "$CMUX_DERIVED_DATA_PATH" \
              -clonedSourcePackagesDirPath "$SOURCE_PACKAGES_DIR" \
              -resolvePackageDependencies; then
              exit 0
            fi
            if [ "$attempt" -eq 3 ]; then
              echo "Failed to resolve Swift packages after 3 attempts" >&2
              exit 1
            fi
            echo "Package resolution failed on attempt $attempt, retrying..."
            sleep $((attempt * 5))
          done

      - name: Build for testing (display resolution)
        run: |
          set -euo pipefail
          SOURCE_PACKAGES_DIR="$PWD/.ci-source-packages"
          xcodebuild -project cmux.xcodeproj -scheme cmux -configuration Debug \
            -derivedDataPath "$CMUX_DERIVED_DATA_PATH" \
            -clonedSourcePackagesDirPath "$SOURCE_PACKAGES_DIR" \
            -disableAutomaticPackageResolution \
            -destination "platform=macOS" \
            build-for-testing

      - name: Create persistent virtual display
        run: |
          set -euo pipefail
          HELPER_PATH="/tmp/create-virtual-display"
          clang -framework Foundation -framework CoreGraphics \
            -o "$HELPER_PATH" scripts/create-virtual-display.m

          VDISPLAY_READY="/tmp/cmux-vdisplay-persistent.ready"
          VDISPLAY_ID_PATH="/tmp/cmux-vdisplay-persistent.id"
          rm -f "$VDISPLAY_READY" "$VDISPLAY_ID_PATH"

          "$HELPER_PATH" \
            --modes "1920x1080" \
            --ready-path "$VDISPLAY_READY" \
            --display-id-path "$VDISPLAY_ID_PATH" \
            > /tmp/cmux-vdisplay-persistent.log 2>&1 &
          echo "VDISPLAY_PERSISTENT_PID=$!" >> "$GITHUB_ENV"

          echo "Waiting for persistent virtual display..."
          for _ in $(seq 1 24); do
            if [ -f "$VDISPLAY_READY" ]; then break; fi
            sleep 0.5
          done
          if [ ! -f "$VDISPLAY_READY" ]; then
            echo "ERROR: Persistent virtual display not ready after 12s" >&2
            cat /tmp/cmux-vdisplay-persistent.log 2>/dev/null || true
            exit 1
          fi
          echo "Persistent virtual display ready: ID=$(cat "$VDISPLAY_ID_PATH")"

      - name: Run display resolution churn UI regression
        run: |
          set -euo pipefail
          SOURCE_PACKAGES_DIR="$PWD/.ci-source-packages"
          HELPER_PATH="/tmp/create-virtual-display"
          TOKEN="$(uuidgen)"
          DIAG_PATH="/tmp/cmux-ui-test-display-churn-${TOKEN}.json"
          DISPLAY_READY="/tmp/cmux-ui-test-display-${TOKEN}.ready"
          DISPLAY_ID_PATH="/tmp/cmux-ui-test-display-${TOKEN}.id"
          DISPLAY_START="/tmp/cmux-ui-test-display-${TOKEN}.start"
          DISPLAY_DONE="/tmp/cmux-ui-test-display-${TOKEN}.done"
          HELPER_LOG="/tmp/cmux-ui-test-display-${TOKEN}-helper.log"

          cleanup() {
            pkill -x "cmux DEV" 2>/dev/null || true
            rm -f "$DIAG_PATH" "$DISPLAY_READY" "$DISPLAY_ID_PATH" "$DISPLAY_START" "$DISPLAY_DONE" "$HELPER_LOG"
            rm -f /tmp/cmux-ui-test-prelaunch.json /tmp/cmux-ui-test-display-harness.json
          }
          trap cleanup EXIT

          # Build display helper
          clang -framework Foundation -framework CoreGraphics \
            -o "$HELPER_PATH" scripts/create-virtual-display.m

          # Find the app binary
          APP_BINARY=$(find "$CMUX_DERIVED_DATA_PATH" -path "*/Build/Products/Debug/cmux DEV.app/Contents/MacOS/cmux DEV" -print -quit 2>/dev/null || true)
          if [ -z "$APP_BINARY" ]; then
            echo "ERROR: App binary not found in DerivedData" >&2
            exit 1
          fi
          echo "App binary: $APP_BINARY"

          for attempt in 1 2; do
            cleanup 2>/dev/null || true

            # Launch display helper from shell (non-sandboxed).
            # Use --start-delay-ms instead of --start-path because the XCTest
            # runner is sandboxed and can't write to /tmp/ for the start signal.
            # 10s delay gives the test time to capture baseline render stats.
            "$HELPER_PATH" \
              --modes "1920x1080,1728x1117,1600x900,1440x810" \
              --ready-path "$DISPLAY_READY" \
              --display-id-path "$DISPLAY_ID_PATH" \
              --done-path "$DISPLAY_DONE" \
              --iterations 40 \
              --interval-ms 40 \
              --start-delay-ms 10000 \
              > "$HELPER_LOG" 2>&1 &
            HELPER_PID=$!

            # Wait for display ready
            echo "Waiting for virtual display..."
            for _ in $(seq 1 24); do
              if [ -f "$DISPLAY_READY" ]; then break; fi
              sleep 0.5
            done
            if [ ! -f "$DISPLAY_READY" ]; then
              echo "ERROR: Virtual display not ready after 12s" >&2
              cat "$HELPER_LOG" 2>/dev/null || true
              continue
            fi
            DISPLAY_ID=$(cat "$DISPLAY_ID_PATH")
            echo "Virtual display ready: ID=$DISPLAY_ID"

            # Launch app from shell (non-sandboxed, outside XCTest sandbox)
            CMUX_UI_TEST_MODE=1 \
            CMUX_UI_TEST_DIAGNOSTICS_PATH="$DIAG_PATH" \
            CMUX_UI_TEST_DISPLAY_RENDER_STATS=1 \
            CMUX_UI_TEST_TARGET_DISPLAY_ID="$DISPLAY_ID" \
            CMUX_TAG="ui-tests-display-resolution" \
            "$APP_BINARY" > /tmp/cmux-ui-test-app.log 2>&1 &
            APP_PID=$!
            echo "App launched: PID=$APP_PID"

            # Wait for app diagnostics
            echo "Waiting for app diagnostics..."
            APP_READY=false
            for i in $(seq 1 30); do
              if [ -f "$DIAG_PATH" ]; then
                if python3 -c "import json; d=json.load(open('$DIAG_PATH')); assert d.get('pid')" 2>/dev/null; then
                  APP_READY=true
                  break
                fi
              fi
              if ! kill -0 "$APP_PID" 2>/dev/null; then
                echo "ERROR: App crashed during startup"
                cat /tmp/cmux-ui-test-app.log 2>/dev/null | tail -30 || true
                break
              fi
              sleep 0.5
            done

            if [ "$APP_READY" != "true" ]; then
              echo "Attempt $attempt: App not ready after 15s"
              pkill -x "cmux DEV" 2>/dev/null || true
              kill "$HELPER_PID" 2>/dev/null || true
              if [ "$attempt" -eq 2 ]; then
                echo "Display resolution UI regression failed after 2 attempts" >&2
                echo "--- App log ---"
                cat /tmp/cmux-ui-test-app.log 2>/dev/null | tail -50 || true
                echo "--- Helper log ---"
                cat "$HELPER_LOG" 2>/dev/null | tail -20 || true
                echo "--- Diagnostics ---"
                cat "$DIAG_PATH" 2>/dev/null || echo "(not found)"
                exit 1
              fi
              sleep 3
              continue
            fi

            echo "App started. Diagnostics:"
            cat "$DIAG_PATH"

            # Wait for render stats (terminal surface initialization)
            echo "Waiting for render stats..."
            RENDER_READY=false
            for i in $(seq 1 40); do
              if python3 -c "import json; d=json.load(open('$DIAG_PATH')); assert d.get('renderStatsAvailable') == '1'" 2>/dev/null; then
                RENDER_READY=true
                echo "Render stats available after $((i / 2))s"
                break
              fi
              sleep 0.5
            done
            if [ "$RENDER_READY" != "true" ]; then
              echo "WARNING: Render stats not available after 20s. Diagnostics:"
              cat "$DIAG_PATH" 2>/dev/null || true
              echo "--- App log ---"
              cat /tmp/cmux-ui-test-app.log 2>/dev/null | tail -30 || true
            fi

            # Write manifests so test can find the pre-launched state
            MANIFEST_PATH="/tmp/cmux-ui-test-display-harness.json"
            cat >"$MANIFEST_PATH" <<MANIFEST_EOF
          {"readyPath":"$DISPLAY_READY","displayIDPath":"$DISPLAY_ID_PATH","donePath":"$DISPLAY_DONE","logPath":"$HELPER_LOG"}
          MANIFEST_EOF

            PRELAUNCH_PATH="/tmp/cmux-ui-test-prelaunch.json"
            cat >"$PRELAUNCH_PATH" <<PRELAUNCH_EOF
          {"diagnosticsPath":"$DIAG_PATH"}
          PRELAUNCH_EOF

            # Run test — app is already launched from shell
            if xcodebuild -project cmux.xcodeproj -scheme cmux -configuration Debug \
              -derivedDataPath "$CMUX_DERIVED_DATA_PATH" \
              -clonedSourcePackagesDirPath "$SOURCE_PACKAGES_DIR" \
              -disableAutomaticPackageResolution \
              -destination "platform=macOS" \
              -only-testing:cmuxUITests/DisplayResolutionRegressionUITests \
              test-without-building; then
              exit 0
            fi

            pkill -x "cmux DEV" 2>/dev/null || true
            kill "$HELPER_PID" 2>/dev/null || true

            if [ "$attempt" -eq 2 ]; then
              echo "Display resolution UI regression failed after 2 attempts" >&2
              exit 1
            fi
            echo "Attempt $attempt failed, retrying..."
            sleep 3
          done

      - name: Run browser find focus UI regression
        run: |
          set -euo pipefail
          SOURCE_PACKAGES_DIR="$PWD/.ci-source-packages"
          xcodebuild -project cmux.xcodeproj -scheme cmux -configuration Debug \
            -derivedDataPath "$CMUX_DERIVED_DATA_PATH" \
            -clonedSourcePackagesDirPath "$SOURCE_PACKAGES_DIR" \
            -disableAutomaticPackageResolution \
            -destination "platform=macOS" \
            -maximum-test-execution-time-allowance 180 \
            -only-testing:cmuxUITests/BrowserPaneNavigationKeybindUITests/testCmdFOpensBrowserFindAfterCmdDCmdLNavigation \
            test-without-building

      - name: Cleanup persistent virtual display
        if: always()
        run: |
          if [ -n "${VDISPLAY_PERSISTENT_PID:-}" ]; then
            kill "$VDISPLAY_PERSISTENT_PID" >/dev/null 2>&1 || true
          fi
          rm -f /tmp/cmux-vdisplay-persistent.ready /tmp/cmux-vdisplay-persistent.id /tmp/cmux-vdisplay-persistent.log

  ios-build:
    # Deterministic iOS compile gate. The iOS app and the iOS-only CmuxMobile*
    # packages are otherwise compiled ONLY in the non-required, flaky
    # ios-simulator job (test-ios.yml), so an iOS-only compile break can merge
    # green even though every required check passed. That is exactly how the
    # @MainActor/nonisolated break in the composer image-decode path
    # (TerminalComposerView) reached main. This job compiles the iOS app for the
    # simulator WITHOUT running tests or booting a simulator, so it is
    # deterministic (no virtual display, no sim boot) and safe to require.
    # It runs on every PR and on push to main; make it a required status check.
    runs-on: ${{ vars.MACOS_RUNNER_26 || 'warp-macos-26-arm64-6x' }}
    timeout-minutes: 35
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          submodules: recursive

      - name: Select Xcode
        run: |
          set -euo pipefail
          if [ -d "/Applications/Xcode.app/Contents/Developer" ]; then
            XCODE_DIR="/Applications/Xcode.app/Contents/Developer"
          else
            XCODE_APP="$(find /Applications -maxdepth 1 -name 'Xcode*.app' -print 2>/dev/null | sort | tail -n 1 || true)"
            if [ -n "$XCODE_APP" ]; then
              XCODE_DIR="$XCODE_APP/Contents/Developer"
            else
              echo "No Xcode.app found under /Applications" >&2
              exit 1
            fi
          fi
          echo "DEVELOPER_DIR=$XCODE_DIR" >> "$GITHUB_ENV"
          export DEVELOPER_DIR="$XCODE_DIR"
          xcodebuild -version

      - name: Provision GhosttyKit
        run: |
          # The iOS app links GhosttyKit (incl. its iOS + iOS-simulator slices)
          # via a local-path binaryTarget, so it must exist before resolve.
          # Mirror the ios-simulator job exactly: ensure-ghosttykit.sh manages
          # its own $HOME/.cache/cmux/ghosttykit cache and writes the framework
          # where the iOS workspace expects it. Do NOT add an actions/cache step
          # keyed on repo-root GhosttyKit.xcframework here: ensure-ghosttykit.sh
          # does not populate that path, and the shared ghosttykit-<sha> key is
          # owned by the macOS jobs that use download-prebuilt (a real dir), so
          # caching a symlink/absent path from this job would poison that key.
          ./scripts/install-zig-ci.sh
          ./scripts/ensure-ghosttykit.sh

      - name: Cache Swift packages
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: .spm-cache-ios
          key: spm-ios-${{ hashFiles('ios/cmuxPackage/Package.resolved') }}
          restore-keys: spm-ios-

      - name: Resolve packages
        run: |
          set -euo pipefail
          xcodebuild -workspace ios/cmux.xcworkspace \
            -scheme cmux-ios \
            -destination 'generic/platform=iOS Simulator' \
            -derivedDataPath /tmp/cmux-ios-build \
            -clonedSourcePackagesDirPath .spm-cache-ios \
            -resolvePackageDependencies

      - name: Build iOS app for simulator (compile only, no tests, no boot)
        run: |
          set -euo pipefail
          # build-for-testing compiles the app and the test targets for the
          # simulator using a GENERIC destination, so nothing is booted and the
          # result is deterministic. This catches the Swift compile breaks
          # (actor isolation, missing await, etc.) that only manifest in the iOS
          # build and are invisible to the macOS unit-test job.
          xcodebuild -workspace ios/cmux.xcworkspace \
            -scheme cmux-ios \
            -destination 'generic/platform=iOS Simulator' \
            -derivedDataPath /tmp/cmux-ios-build \
            -clonedSourcePackagesDirPath .spm-cache-ios \
            CODE_SIGNING_ALLOWED=NO \
            build-for-testing