lint.yml

name: Lint
concurrency:
  group: lint-${{ github.ref }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
on:
  pull_request:
    branches: [main]
    types: [opened, synchronize, reopened]
  push:
    branches: [main]

permissions:
  contents: read

jobs:
  lint:
    if: "${{ (needs.ci-reuse.result != 'success' && !cancelled()) || ((success()) && needs.ci-reuse.outputs.reuse != 'true') }}"
    needs:
      - ci-reuse
    runs-on: ubuntu-latest
    steps:
      - name: Fail if tree verification failed
        if: needs.ci-reuse.result != 'success'
        run: exit 1
      - uses: actions/checkout@v5
      - uses: actions/setup-node@v5
        with:
          node-version: 24
          cache: npm
          cache-dependency-path: '**/package-lock.json'
      - name: Cache Angular
        uses: actions/cache@v5
        with:
          path: .angular/cache
          key: ${{ runner.os }}-angular-${{ hashFiles('package-lock.json') }}-${{ github.sha }}
          restore-keys: |
            ${{ runner.os }}-angular-${{ hashFiles('package-lock.json') }}-
            ${{ runner.os }}-angular-
      - run: npm ci
      - run: npm run lint
      - run: npm run build
      - run: npm run test:package-consumer
      - run: npm run test:offline-types:nonstrict
  test:
    if: "${{ (needs.ci-reuse.result != 'success' && !cancelled()) || ((success()) && needs.ci-reuse.outputs.reuse != 'true') }}"
    needs:
      - ci-reuse
    runs-on: ubuntu-latest
    strategy:
      matrix:
        project: [demo, kit, photo-editor, scroll-header, scroll-strategies]
    steps:
      - name: Fail if tree verification failed
        if: needs.ci-reuse.result != 'success'
        run: exit 1
      - uses: actions/checkout@v5
      - uses: actions/setup-node@v5
        with:
          node-version: 24
          cache: npm
          cache-dependency-path: '**/package-lock.json'
      - name: Cache Angular
        uses: actions/cache@v5
        with:
          path: .angular/cache
          key: ${{ runner.os }}-angular-${{ hashFiles('package-lock.json') }}-${{ github.sha }}
          restore-keys: |
            ${{ runner.os }}-angular-${{ hashFiles('package-lock.json') }}-
            ${{ runner.os }}-angular-
      - run: npm ci
      - run: npm run build
      - run: npm run test -- ${{ matrix.project }} --watch=false
  test-actions:
    if: "${{ (needs.ci-reuse.result != 'success' && !cancelled()) || ((success()) && needs.ci-reuse.outputs.reuse != 'true') }}"
    needs:
      - ci-reuse
    runs-on: ubuntu-latest
    steps:
      - name: Fail if tree verification failed
        if: needs.ci-reuse.result != 'success'
        run: exit 1
      - uses: actions/checkout@v5
      - uses: actions/setup-node@v5
        with:
          node-version: 24
          cache: npm
          cache-dependency-path: '**/package-lock.json'
      - run: npm ci
      - run: npm run test:actions
  angular-21-compat:
    if: "${{ (needs.ci-reuse.result != 'success' && !cancelled()) || ((success()) && needs.ci-reuse.outputs.reuse != 'true') }}"
    needs:
      - ci-reuse
    runs-on: ubuntu-latest
    steps:
      - name: Fail if tree verification failed
        if: needs.ci-reuse.result != 'success'
        run: exit 1
      - uses: actions/checkout@v5
      - uses: actions/setup-node@v5
        with:
          node-version: 24.15.0
          cache: npm
          cache-dependency-path: '**/package-lock.json'
      - run: npm ci
      - name: Install the Angular 21 compatibility toolchain
        run: >-
          npm install --no-save --force
          @angular/animations@^21.2.0
          @angular/build@^21.2.0
          @angular/cdk@^21.2.0
          @angular/cli@^21.2.0
          @angular/common@^21.2.0
          @angular/compiler@^21.2.0
          @angular/compiler-cli@^21.2.0
          @angular/core@^21.2.0
          @angular/forms@^21.2.0
          @angular/platform-browser@^21.2.0
          @angular/platform-browser-dynamic@^21.2.0
          @angular/router@^21.2.0
          @angular/service-worker@^21.2.0
          ng-packagr@^21.2.0
          typescript@~5.9.3
      - name: Build libraries and consuming demo with Angular 21
        run: npm run build
      - name: Type-check a consumer against packed Angular 21 artifacts
        run: npm run test:package-consumer
  e2e:
    if: "${{ (needs.ci-reuse.result != 'success' && !cancelled()) || ((success()) && needs.ci-reuse.outputs.reuse != 'true') }}"
    needs:
      - ci-reuse
    runs-on: ubuntu-latest
    container:
      image: mcr.microsoft.com/playwright:v1.57.0-noble
    steps:
      - name: Fail if tree verification failed
        if: needs.ci-reuse.result != 'success'
        run: exit 1
      - uses: actions/checkout@v5
      - uses: actions/setup-node@v5
        with:
          node-version: 24
          cache: npm
          cache-dependency-path: '**/package-lock.json'
      - name: Cache Angular
        uses: actions/cache@v5
        with:
          path: .angular/cache
          key: ${{ runner.os }}-angular-${{ hashFiles('package-lock.json') }}-${{ github.sha }}
          restore-keys: |
            ${{ runner.os }}-angular-${{ hashFiles('package-lock.json') }}-
            ${{ runner.os }}-angular-
      - run: npm ci
      - name: Run e2e tests
        run: npm run e2e
        env:
          CI: true
          HOME: /root
      - name: Upload Playwright report
        if: failure()
        uses: actions/upload-artifact@v4
        with:
          name: playwright-report
          path: playwright-report/
          retention-days: 7

  ci-reuse:
    name: Verify tested tree
    runs-on: ubuntu-latest
    timeout-minutes: 5
    permissions:
      contents: read
      actions: read
      pull-requests: read
    outputs:
      reuse: ${{ steps.lookup.outputs.reuse }}
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
        with:
          persist-credentials: false
      - name: Test CI reuse guards
        run: node --test .github/scripts/ci-tree-reuse.test.mjs
      - name: Record the actual complete checkout
        id: tree
        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd
        with:
          script: |
            const { execFileSync } = await import('node:child_process');
            const { writeFileSync } = await import('node:fs');
            const git = (...args) => execFileSync('git', args, { encoding: 'utf8' }).trim();
            const tree = git('rev-parse', 'HEAD^{tree}');
            const commit = git('rev-parse', 'HEAD');
            core.setOutput('tree', tree);
            core.setOutput('commit', commit);
            writeFileSync(`${process.env.RUNNER_TEMP}/ci-tree.txt`, `${commit}\n${tree}\n`);
      - name: Reuse only the latest successful PR CI for this tree
        id: lookup
        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd
        env:
          TREE: ${{ steps.tree.outputs.tree }}
        with:
          script: |
            const { resolveReuse } = await import(`${process.env.GITHUB_WORKSPACE}/.github/scripts/ci-tree-reuse.mjs`);
            const result = await resolveReuse(github, context, process.env.TREE, 'lint.yml');
            core.setOutput('reuse', String(result.reuse));
            if (result.reuse) {
              await core.summary.addHeading('Reused PR validation').addLink('Latest successful PR CI', result.url)
                .addRaw(`\n\nComplete repository tree: ${result.tree}\n`).write();
            } else {
              core.info(result.reason);
            }
  ci-result:
    name: CI result
    if: ${{ always() }}
    needs:
      - ci-reuse
      - lint
      - test
      - test-actions
      - angular-21-compat
      - e2e
    runs-on: ubuntu-latest
    timeout-minutes: 5
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
        with:
          persist-credentials: false
      - name: Require executed tests or verified reuse
        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd
        env:
          NEEDS: ${{ toJSON(needs) }}
          REUSE: ${{ needs.ci-reuse.outputs.reuse }}
        with:
          script: |
            const { requireResults } = await import(`${process.env.GITHUB_WORKSPACE}/.github/scripts/ci-tree-reuse.mjs`);
            requireResults(process.env.REUSE === 'true', JSON.parse(process.env.NEEDS), ["lint", "test", "test-actions", "angular-21-compat", "e2e"], []);
      - name: Record the actual complete checkout
        id: tree
        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd
        with:
          script: |
            const { execFileSync } = await import('node:child_process');
            const { writeFileSync } = await import('node:fs');
            const git = (...args) => execFileSync('git', args, { encoding: 'utf8' }).trim();
            const tree = git('rev-parse', 'HEAD^{tree}');
            const commit = git('rev-parse', 'HEAD');
            core.setOutput('tree', tree);
            core.setOutput('commit', commit);
            writeFileSync(`${process.env.RUNNER_TEMP}/ci-tree.txt`, `${commit}\n${tree}\n`);
        if: github.event_name == 'pull_request' && github.event.action != 'closed' && !contains(needs.*.result, 'skipped')
      - name: Record PR checkout evidence
        if: github.event_name == 'pull_request' && github.event.action != 'closed' && !contains(needs.*.result, 'skipped')
        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
        with:
          name: ci-tree-pr-${{ github.event.pull_request.number }}-${{ steps.tree.outputs.tree }}-${{ steps.tree.outputs.commit
            }}-${{ github.run_attempt }}
          path: ${{ runner.temp }}/ci-tree.txt
          if-no-files-found: error
          retention-days: 30