From dfd1856238b6270c7fdd8a09975336bb010ea6cb Mon Sep 17 00:00:00 2001
From: Oreofe <oreofeolurin@gmail.com>
Date: Sat, 29 Aug 2026 17:39:30 +0100
Subject: [PATCH] ci: run build and the three test suites on every PR
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Nothing gated pull requests. The only workflows here were release.yml and
docker-publish.yml, both tag-triggered, so a PR could be merged having been
built and tested only on a contributor's machine.

Adds a CI workflow on pull_request and on pushes to dev/main:

- web console — `npm run build`, which runs `tsc -b` first, so a TypeScript
  error fails here rather than in the release build (the console is compiled
  into the Zig binary)
- build — `zig build`
- test-unit, test-integration, test-e2e — as a matrix with fail-fast off, so
  one failing suite does not mask the other two

The console is built once and handed to the Zig jobs as an artifact instead of
being rebuilt three times.

No `zig fmt --check` gate yet: 12 files on dev are already unformatted, so it
would fail every PR on day one, and two of them are touched by a PR currently
in flight. Reformatting is a separate cleanup, best landed when nothing is open.

Its first run already earned its keep: it caught that the Linux build was
broken and that the next release tag would have failed (#50, fixed in #51).
---
 .github/workflows/ci.yml | 96 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 96 insertions(+)
 create mode 100644 .github/workflows/ci.yml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..f12c0f5
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,96 @@
+name: CI
+
+on:
+  pull_request:
+    branches: [dev, main]
+  push:
+    branches: [dev, main]
+  workflow_dispatch:
+
+# A new push to a PR makes the in-flight run obsolete. Never cancel on
+# dev/main — those runs are the record of what the branch actually did.
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+permissions:
+  contents: read
+
+env:
+  ZIG_VERSION: "0.16.0"
+
+jobs:
+  # The console is compiled into the Zig binary, so a TypeScript error here
+  # breaks the release build — `npm run build` runs `tsc -b` first.
+  web:
+    name: Web console
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: npm
+          cache-dependency-path: web/package-lock.json
+
+      - name: Build console
+        working-directory: web
+        run: |
+          npm ci
+          npm run build
+
+      # Handed to the Zig jobs so they embed the real console rather than
+      # rebuilding it three times.
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dashboard-dist
+          path: web/dist
+          retention-days: 1
+
+  build:
+    name: Build
+    needs: web
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: mlugg/setup-zig@v2
+        with:
+          version: ${{ env.ZIG_VERSION }}
+
+      - uses: actions/download-artifact@v4
+        with:
+          name: dashboard-dist
+          path: src/node/dashboard/dist
+
+      # No `zig fmt --check` gate yet: 12 files on dev are already unformatted,
+      # so it would fail every PR on day one. Reformatting them is a separate
+      # cleanup, best landed when no PRs are in flight — two of those files are
+      # touched by open PRs right now.
+      - name: Build
+        run: zig build
+
+  test:
+    name: ${{ matrix.step }}
+    needs: web
+    runs-on: ubuntu-latest
+    strategy:
+      # Report every suite's result — one failure should not hide the others.
+      fail-fast: false
+      matrix:
+        step: [test-unit, test-integration, test-e2e]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: mlugg/setup-zig@v2
+        with:
+          version: ${{ env.ZIG_VERSION }}
+
+      # The e2e suite drives a real server, which embeds the console.
+      - uses: actions/download-artifact@v4
+        with:
+          name: dashboard-dist
+          path: src/node/dashboard/dist
+
+      - name: zig build ${{ matrix.step }}
+        run: zig build ${{ matrix.step }}
+        timeout-minutes: 30