integration.yml

name: Integration tests

# Manual-only. Trigger this workflow from the GitHub UI (or
# `gh workflow run integration.yml -f suite=...`) before merging a
# change that touches sync2's network paths. The earlier nightly
# bootstrap schedule was retired — the test repos (and our GitHub
# API quota) get touched on demand rather than on a clock.
on:
  workflow_dispatch:
    inputs:
      suite:
        description: "Which suite to run"
        required: true
        default: "all"
        type: choice
        options:
          - all
          - bootstrap
          - nonbootstrap

jobs:
  integration:
    runs-on: ubuntu-latest
    # Only one integration job at a time — the test repos are shared
    # state and parallel runs would trample each other.
    concurrency:
      group: integration-tests
      cancel-in-progress: false
    timeout-minutes: 30

    steps:
      - uses: actions/checkout@v4

      - name: Setup pnpm
        uses: pnpm/action-setup@v4
        with:
          version: latest-10

      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: pnpm

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      # Build first — fail fast on TS regressions before burning API quota.
      - name: Build plugin
        run: pnpm build

      - name: Run integration tests
        env:
          # Fine-grained PAT scoped to the private test repo. Used by
          # every test except bootstrap. Cannot create/delete repos.
          GITHUB_TOKEN: ${{ secrets.INTEGRATION_TEST_TOKEN }}
          # Classic PAT with public_repo + delete_repo. Used ONLY by
          # bootstrap tests against the ephemeral public test repo.
          GITHUB_BOOTSTRAP_TOKEN: ${{ secrets.INTEGRATION_BOOTSTRAP_TEST_TOKEN }}
          # Repo identifiers — non-secret, exposed via GitHub vars.
          INT_TEST_OWNER: ${{ vars.INT_TEST_OWNER }}
          INT_TEST_REPO: ${{ vars.INT_TEST_REPO }}
          INT_BOOTSTRAP_TEST_REPO: ${{ vars.INT_BOOTSTRAP_TEST_REPO }}
          INT_TEST_BRANCH_PREFIX: ${{ vars.INT_TEST_BRANCH_PREFIX || 'int-test' }}
        run: |
          case "${{ inputs.suite }}" in
            bootstrap)    pnpm test:integration:bootstrap ;;
            nonbootstrap) pnpm test:integration:nonbootstrap ;;
            all|*)        pnpm test:integration ;;
          esac

      # Best-effort cleanup of stray feature branches in the PRIVATE
      # test repo. Bootstrap repo doesn't need this — its lifecycle
      # is delete+recreate per test.
      - name: Cleanup leftover branches
        if: always()
        env:
          GITHUB_TOKEN: ${{ secrets.INTEGRATION_TEST_TOKEN }}
          INT_TEST_OWNER: ${{ vars.INT_TEST_OWNER }}
          INT_TEST_REPO: ${{ vars.INT_TEST_REPO }}
          INT_TEST_BRANCH_PREFIX: ${{ vars.INT_TEST_BRANCH_PREFIX || 'int-test' }}
        run: |
          node -e "
          (async () => {
            const owner = process.env.INT_TEST_OWNER;
            const repo = process.env.INT_TEST_REPO;
            const token = process.env.GITHUB_TOKEN;
            const prefix = process.env.INT_TEST_BRANCH_PREFIX;
            const headers = {
              Authorization: 'Bearer ' + token,
              Accept: 'application/vnd.github+json',
              'X-GitHub-Api-Version': '2022-11-28',
            };
            const list = await fetch(
              'https://api.github.com/repos/' + owner + '/' + repo + '/branches?per_page=100',
              { headers }
            );
            if (list.status === 404 || list.status === 409) return;
            if (list.status !== 200) {
              console.warn('list branches', list.status);
              return;
            }
            const branches = await list.json();
            const stray = branches.filter(b => b.name.startsWith(prefix + '-'));
            for (const b of stray) {
              const del = await fetch(
                'https://api.github.com/repos/' + owner + '/' + repo + '/git/refs/heads/' + encodeURIComponent(b.name),
                { method: 'DELETE', headers }
              );
              console.log('cleanup', b.name, '->', del.status);
            }
          })().catch(e => { console.error(e); process.exitCode = 0; });
          "