ci.yml

name: CI

on:
  push:
    branches:
      - main
    tags-ignore:
      - '**'
    paths-ignore:
      - '**/*.md'
  pull_request:

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}

permissions:
  contents: read

jobs:
  test-android:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Test
        run: ./gradlew assembleDebug testAndroidHostTest testDebugUnitTest --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}
          path: ./**/build/reports/

  test-ios:
    runs-on: macos-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
          select-xcode-26: "true"

      - name: Test
        run: ./gradlew iosSimulatorArm64Test -Pkotlin.incremental.native=false --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}
          path: ./**/build/reports/

  test-desktop:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Test
        run: ./gradlew desktopTest --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}
          path: ./**/build/reports/

  test-linux:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Test
        run: ./gradlew linuxX64Test --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}
          path: ./**/build/reports/

  test-wasm:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Test
        run: ./gradlew wasmJsTest --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}
          path: ./**/build/reports/

  test-jvm-modules:
    name: test-jvm-modules

    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Test
        run: ./gradlew :kotlin-inject-extensions:contribute:impl-code-generators:test :metro-extensions:contribute:impl-code-generators:test :metro-extensions:contribute:impl-compiler-plugin:test --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}
          path: ./**/build/reports/

  test-metro-compiler-compatibility:
    name: test-metro-compiler-compatibility / Kotlin ${{ matrix.kotlin }}

    runs-on: ubuntu-latest
    timeout-minutes: 25

    strategy:
      fail-fast: false
      matrix:
        kotlin: ['2.4.20', '2.5.0-Beta1']

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      # Dump and diagnostic goldens remain tied to the repository's pinned compiler version.
      - name: Test
        run: ./gradlew :metro-extensions:contribute:impl-compiler-plugin:test -Papp.platform.kotlinVersion=${{ matrix.kotlin }} --tests 'software.ralf.app.platform.metro.compiler.runners.BoxTestGenerated*' --stacktrace --show-version

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}-${{ matrix.kotlin }}
          path: ./**/build/reports/

  test-emulator-renderer-android-view:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Prepare emulator
        uses: ./.github/actions/prepare-emulator-action

      - name: Test
        run: ./gradlew :renderer-android-view:public:emulatorCheck --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}
          path: ./**/build/reports/

  test-emulator-renderer-compose-multiplatform:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Prepare emulator
        uses: ./.github/actions/prepare-emulator-action

      - name: Test
        run: ./gradlew :renderer-compose-multiplatform:public:emulatorCheck --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}
          path: ./**/build/reports/

  test-emulator-sample-app:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4
      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Prepare emulator
        uses: ./.github/actions/prepare-emulator-action

      - name: Test
        run: ./gradlew :sample:app:android:emulatorCheck --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}
          path: ./**/build/reports/

  test-emulator-sample-app-ksp:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4
      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Prepare emulator
        uses: ./.github/actions/prepare-emulator-action

      - name: Test
        run: ./gradlew :sample:app:android:emulatorCheck -Papp.platform.metro.ksp=true --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}
          path: ./**/build/reports/

  build-ios-sample-app:
    runs-on: macos-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4
      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
          select-xcode-26: "true"

      # The command to build is executed by the Android Studio iOS app run action.
      #
      # Target the generic simulator platform so the build does not depend on a
      # specific installed iOS 26.x simulator runtime.
      - name: Build swift
        run: |
          /usr/bin/xcodebuild -version
          /usr/bin/xcodebuild -showsdks
          /usr/bin/xcodebuild -project sample/app/ios/iosApp.xcodeproj -scheme iosApp -configuration Debug OBJROOT=build/ios SYMROOT=build/ios -destination 'generic/platform=iOS Simulator' ARCHS=arm64 ONLY_ACTIVE_ARCH=YES -allowProvisioningDeviceRegistration -allowProvisioningUpdates

  build-wasm-sample-app:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Build wasm binary
        run: ./gradlew :sample:app:web:wasmJsBrowserDistribution

  binary-compatibility-check:
    runs-on: macos-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
          select-xcode-26: "true"

      - name: ABI check
        run: ./gradlew checkKotlinAbi :gradle-plugin:module-structure:checkKotlinAbi :gradle-plugin:plugin:checkKotlinAbi --stacktrace --show-version --continue

  ktfmt:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Run ktfmt
        run: ./ktfmt.sh --dry-run --set-exit-if-changed

  android-lint:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Android Lint
        run: ./gradlew lint lintAndroidMain --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}
          path: ./**/build/reports/

  detekt:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Detekt
        run: ./gradlew detekt --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}
          path: ./**/build/reports/

  module-structure-check:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Module Structure Check
        run: ./gradlew checkModuleStructureDependencies checkModuleStructureNesting --stacktrace --show-version --continue

  publish-maven-local:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Publish to Maven Local
        run: |
          ./gradlew publishToMavenLocal -Dmaven.repo.local="$RUNNER_TEMP/maven-local" --stacktrace --show-version --no-configuration-cache
          ./gradlew -p gradle-plugin publishToMavenLocal -Dmaven.repo.local="$RUNNER_TEMP/maven-local" --stacktrace --show-version --no-configuration-cache

      - name: Upload Maven Local
        uses: actions/upload-artifact@v4
        with:
          name: maven-local
          path: ${{ runner.temp }}/maven-local
          if-no-files-found: error

  publish-maven-local-blueprint:
    name: publish-maven-local-blueprint-${{ matrix.blueprint }}
    needs: publish-maven-local
    runs-on: ubuntu-latest
    timeout-minutes: 25

    strategy:
      fail-fast: false
      matrix:
        blueprint: [starter, list-detail]

    defaults:
      run:
        working-directory: blueprints/${{ matrix.blueprint }}

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Download Maven Local
        uses: actions/download-artifact@v4
        with:
          name: maven-local
          path: ${{ runner.temp }}/maven-local

      - name: Use published App Platform version
        run: |
          version=$(sed -n 's/^VERSION_NAME=//p' "$GITHUB_WORKSPACE/gradle.properties")
          test -n "$version"
          sed -i "s/^app-platform = .*/app-platform = \"$version\"/" gradle/libs.versions.toml

      - name: Build Android, Desktop and Wasm and run Desktop tests
        run: >
          ./gradlew :app:android:assembleDebug :app:desktop:desktopMainClasses :app:web:wasmJsBrowserDistribution
          desktopTest
          --init-script "$GITHUB_WORKSPACE/.github/gradle/blueprint-maven-local.init.gradle"
          -Dmaven.repo.local="$RUNNER_TEMP/maven-local"
          --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}-${{ matrix.blueprint }}
          path: blueprints/${{ matrix.blueprint }}/**/build/reports/

  build-src:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Run release task
        run: ./gradlew -p buildSrc release --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}
          path: ./**/build/reports/

  gradle-plugin:
    runs-on: ubuntu-latest
    timeout-minutes: 25

    steps:
      - uses: actions/checkout@v4

      - name: Setup
        uses: ./.github/actions/setup-action
        with:
          gradle-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}

      - name: Run release task
        run: ./gradlew -p gradle-plugin release --stacktrace --show-version --continue

      - name: Upload Test Results
        uses: actions/upload-artifact@v4
        if: ${{ failure() }}
        with:
          name: test-results-${{ github.job }}
          path: ./**/build/reports/