deskctl/.github/workflows/ci.yml

name: CI

# Runners: uvacompute (https://uvacompute.com)
# To enable, set the UVA_RUNNER repo variable to the correct runner label.
# runs-on: ${{ vars.UVA_RUNNER || 'ubuntu-latest' }}

on:
  pull_request:
    branches: [main]
  push:
    branches: [main]
  workflow_dispatch:

permissions:
  contents: write

jobs:
  changes:
    name: Changes
    runs-on: ubuntu-latest
    outputs:
      rust: ${{ steps.check.outputs.rust }}
      version: ${{ steps.version.outputs.version }}
      tag: ${{ steps.version.outputs.tag }}
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - uses: dorny/paths-filter@v3
        id: filter
        with:
          filters: |
            rust:
              - 'src/**'
              - 'tests/**'
              - 'Cargo.toml'
              - 'Cargo.lock'
              - 'npm/**'
              - 'flake.nix'
              - 'flake.lock'
              - 'docker/**'
              - '.github/workflows/**'
              - 'Makefile'

      - name: Set outputs
        id: check
        run: |
          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
            echo "rust=true" >> "$GITHUB_OUTPUT"
          else
            echo "rust=${{ steps.filter.outputs.rust }}" >> "$GITHUB_OUTPUT"
          fi

      - name: Read current version
        id: version
        if: github.event_name != 'pull_request' && steps.check.outputs.rust == 'true'
        run: |
          VERSION=$(grep '^version' Cargo.toml | head -1 | sed 's/.*"\(.*\)"/\1/')
          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
          echo "tag=v${VERSION}" >> "$GITHUB_OUTPUT"

  validate:
    name: Validate
    needs: changes
    if: needs.changes.outputs.rust == 'true'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy

      - uses: Swatinem/rust-cache@v2

      - uses: pnpm/action-setup@v4
        with:
          version: 10
          run_install: false

      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: pnpm
          cache-dependency-path: site/pnpm-lock.yaml

      - name: Install site dependencies
        run: pnpm --dir site install --frozen-lockfile

      - name: Install system dependencies
        run: sudo apt-get update && sudo apt-get install -y libx11-dev libxtst-dev

      - name: Format check
        run: make fmt-check

      - name: Clippy
        run: make lint

      - name: Unit tests
        run: make test-unit

      - name: Site format check
        run: make site-format-check

  integration:
    name: Integration (Xvfb)
    needs: changes
    if: needs.changes.outputs.rust == 'true'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: dtolnay/rust-toolchain@stable

      - uses: Swatinem/rust-cache@v2

      - name: Install system dependencies
        run: sudo apt-get update && sudo apt-get install -y libx11-dev libxtst-dev xvfb

      - name: Xvfb integration tests
        run: make test-integration

  distribution:
    name: Distribution Validate
    needs: changes
    if: needs.changes.outputs.rust == 'true'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: dtolnay/rust-toolchain@stable

      - uses: Swatinem/rust-cache@v2

      - uses: actions/setup-node@v4
        with:
          node-version: 22

      - uses: cachix/install-nix-action@v30
        with:
          extra_nix_config: |
            experimental-features = nix-command flakes

      - name: Install system dependencies
        run: sudo apt-get update && sudo apt-get install -y libx11-dev libxtst-dev

      - name: Distribution validation
        run: make dist-validate

  build:
    name: Build Release Asset
    needs: [changes, validate, integration, distribution]
    if: github.event_name != 'pull_request' && needs.changes.outputs.rust == 'true'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy

      - uses: Swatinem/rust-cache@v2

      - name: Install system dependencies
        run: sudo apt-get update && sudo apt-get install -y libx11-dev libxtst-dev

      - name: Clippy
        run: cargo clippy -- -D warnings

      - name: Build
        run: cargo build --release --locked

      - uses: actions/upload-artifact@v4
        with:
          name: deskctl-linux-x86_64
          path: target/release/deskctl
          retention-days: 7

  release:
    name: Release
    needs: [changes, build]
    if: github.event_name != 'pull_request'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/download-artifact@v4
        with:
          name: deskctl-linux-x86_64
          path: artifacts/

      - name: Create release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          chmod +x artifacts/deskctl
          mv artifacts/deskctl artifacts/deskctl-linux-x86_64
          cd artifacts && sha256sum deskctl-linux-x86_64 > checksums.txt && cd ..
          if gh release view "${{ needs.changes.outputs.tag }}" >/dev/null 2>&1; then
            gh release upload "${{ needs.changes.outputs.tag }}" \
              artifacts/deskctl-linux-x86_64 \
              artifacts/checksums.txt \
              --clobber
          else
            gh release create "${{ needs.changes.outputs.tag }}" \
              --title "${{ needs.changes.outputs.tag }}" \
              --generate-notes \
              artifacts/deskctl-linux-x86_64 \
              artifacts/checksums.txt
          fi