ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:

concurrency:
  group: ci-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  verify:
    strategy:
      fail-fast: true
      matrix:
        os: [ubuntu-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - name: Validate launcher installer with Windows PowerShell 5.1
        if: runner.os == 'Windows'
        shell: powershell
        run: |
          if ($PSVersionTable.PSVersion.Major -ne 5) {
            throw "Expected Windows PowerShell 5.1, got $($PSVersionTable.PSVersion)"
          }
          $source = Get-Content scripts/install-launcher.ps1 -Raw
          [void][scriptblock]::Create($source)
          if (-not [Environment]::Is64BitOperatingSystem) {
            throw "The Windows CI runner must be 64-bit"
          }
      - if: runner.os == 'Linux'
        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
        with:
          go-version: "1.26.x"
          cache: false
      - if: runner.os == 'Linux'
        name: Lint GitHub Actions
        run: go run github.com/rhysd/actionlint/cmd/actionlint@v1.7.7 -config-file .github/actionlint.yaml .github/workflows/*.yml
      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
        with:
          bun-version: 1.3.14
      - run: bun install --frozen-lockfile
      - run: bun install --frozen-lockfile
        working-directory: launcher
      - run: bun run verify
      - run: bun run app:package
      - name: Ensure virtual display is available
        if: runner.os == 'Linux'
        run: command -v xvfb-run || (sudo apt-get update && sudo apt-get install -y xvfb)
      - run: bun run app:smoke