ci.yml

name: CI

on:
  pull_request:
  push:
    branches:
      - main

permissions:
  contents: read

env:
  NODE_VERSION: 22.19.0

jobs:
  gateway:
    name: Gateway
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
        with:
          # buf breaking 需要完整历史以对比 origin/main 的 proto 契约。
          fetch-depth: 0

      - uses: actions/setup-go@v5
        with:
          go-version-file: crates/agent-gateway/go.mod
          cache-dependency-path: crates/agent-gateway/go.sum

      - uses: actions/setup-node@v6
        with:
          node-version: ${{ env.NODE_VERSION }}

      - name: Install pnpm
        run: npm install -g pnpm@10.32.1

      - name: Install buf
        uses: bufbuild/buf-action@v1
        with:
          setup_only: true
          version: 1.71.0

      - name: Install protobuf Go plugins
        run: |
          go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.36.11
          echo "$(go env GOPATH)/bin" >> "$GITHUB_PATH"

      - name: Build embedded Gateway WebUI
        working-directory: crates/agent-gateway/web
        run: |
          pnpm install --frozen-lockfile
          pnpm build

      - name: Proto lint and breaking-change check
        run: make proto-check BUF_BREAKING_AGAINST='../../.git#branch=origin/main,subdir=crates/agent-gateway'

      - name: Check generated protobuf
        run: |
          make proto
          git diff --exit-code -- crates/agent-gateway/internal/proto

      - name: Lint gateway
        uses: golangci/golangci-lint-action@v8
        with:
          version: v2.12.2
          working-directory: crates/agent-gateway

      - name: Test gateway
        working-directory: crates/agent-gateway
        run: go test ./...

  gateway-docker:
    name: Gateway Docker Smoke
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - uses: docker/setup-buildx-action@v3

      - name: Build Docker image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: Dockerfile
          load: true
          tags: liveagent-gateway:ci
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Smoke test container
        run: |
          set -euo pipefail
          docker rm -f liveagent-gateway-smoke >/dev/null 2>&1 || true
          docker run -d \
            --name liveagent-gateway-smoke \
            -p 18080:8080 \
            -e LIVEAGENT_GATEWAY_TOKEN=ci-token \
            liveagent-gateway:ci
          trap 'docker rm -f liveagent-gateway-smoke >/dev/null 2>&1 || true' EXIT
          for _ in $(seq 1 30); do
            if curl -fsS http://127.0.0.1:18080/healthz | grep -q '"ok":true'; then
              exit 0
            fi
            sleep 1
          done
          echo "Gateway Docker smoke test failed; container logs:"
          docker logs liveagent-gateway-smoke || true
          exit 1

  webui:
    name: Gateway WebUI
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - uses: actions/setup-node@v6
        with:
          node-version: ${{ env.NODE_VERSION }}

      - name: Install pnpm
        run: npm install -g pnpm@10.32.1

      - name: Install dependencies
        working-directory: crates/agent-gateway/web
        run: pnpm install --frozen-lockfile

      - name: Build WebUI
        working-directory: crates/agent-gateway/web
        run: pnpm build

      - name: Lint WebUI
        working-directory: crates/agent-gateway/web
        run: pnpm lint

      - name: Test WebUI modules
        working-directory: crates/agent-gateway/web
        run: pnpm test

  gui:
    name: GUI
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - uses: actions/setup-node@v6
        with:
          node-version: ${{ env.NODE_VERSION }}

      - name: Install pnpm
        run: npm install -g pnpm@10.32.1

      - name: Install dependencies
        working-directory: crates/agent-gui
        run: pnpm install --frozen-lockfile

      - name: Typecheck and build GUI frontend
        working-directory: crates/agent-gui
        run: pnpm build

      - name: Lint GUI frontend
        working-directory: crates/agent-gui
        run: pnpm lint

      - name: Test frontend modules
        working-directory: crates/agent-gui
        run: pnpm test:frontend

      - name: Test release scripts
        working-directory: crates/agent-gui
        run: pnpm test:release

  tauri-rust:
    name: Tauri Rust Check
    runs-on: ubuntu-latest
    timeout-minutes: 20
    steps:
      - uses: actions/checkout@v6

      - name: Install Tauri Linux dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y \
            protobuf-compiler \
            libwebkit2gtk-4.1-dev \
            libgtk-3-dev \
            libayatana-appindicator3-dev \
            librsvg2-dev

      - uses: dtolnay/rust-toolchain@stable

      - uses: Swatinem/rust-cache@v2
        with:
          workspaces: crates/agent-gui/src-tauri

      - name: Check Tauri backend tests
        env:
          CARGO_TERM_COLOR: always
        run: cargo check --manifest-path crates/agent-gui/src-tauri/Cargo.toml --tests

      - name: Test Tauri history migrations
        env:
          CARGO_TERM_COLOR: always
        run: cargo test --manifest-path crates/agent-gui/src-tauri/Cargo.toml chat_history --lib

  mirror:
    name: GUI/WebUI Mirror Check
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - uses: actions/setup-node@v6
        with:
          node-version: ${{ env.NODE_VERSION }}

      - name: Check mirrored files are byte-identical
        run: node scripts/check-mirror.mjs

  whitespace:
    name: Diff Hygiene
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - run: git diff --check