deepseek-harness/.github/workflows/ci.yml

name: CI

on:
  push:
    branches: [main, master]
  pull_request:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

env:
  PRIMARY_NODE_VERSION: '24'

jobs:
  node-24:
    runs-on: ubuntu-latest
    name: node 24 / ${{ matrix.lane }}
    env:
      DSH_GATE_CONCURRENCY: ${{ matrix.gate_concurrency }}
      DSH_PUBLINT_CONCURRENCY: ${{ matrix.publint_concurrency }}
      DSH_COVERAGE_MAX_WORKERS: ${{ matrix.coverage_max_workers }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - lane: static
            command: pnpm run check:ci:static
            gate_concurrency: '4'
            publint_concurrency: '8'
            coverage_max_workers: ''
          - lane: lint
            command: pnpm run check:ci:lint
            gate_concurrency: '1'
            publint_concurrency: '8'
            coverage_max_workers: ''
          - lane: coverage
            command: pnpm run check:ci:coverage
            gate_concurrency: '1'
            publint_concurrency: '8'
            coverage_max_workers: '4'
          - lane: snapshot
            command: pnpm run check:ci:snapshot
            gate_concurrency: '1'
            publint_concurrency: '8'
            coverage_max_workers: ''
          - lane: artifacts
            command: pnpm run check:ci:artifacts
            gate_concurrency: '3'
            publint_concurrency: '8'
            coverage_max_workers: ''
    steps:
      - uses: actions/checkout@v6

      - uses: actions/setup-node@v6
        with:
          node-version: ${{ env.PRIMARY_NODE_VERSION }}

      - name: Enable corepack (pnpm)
        run: corepack enable

      - name: Resolve pnpm store path
        id: pnpm-store
        run: echo "path=$(pnpm store path --silent)" >> "$GITHUB_OUTPUT"

      - uses: actions/cache@v4
        with:
          path: ${{ steps.pnpm-store.outputs.path }}
          key: ${{ runner.os }}-node-${{ env.PRIMARY_NODE_VERSION }}-pnpm-${{ hashFiles('pnpm-lock.yaml') }}
          restore-keys: |
            ${{ runner.os }}-node-${{ env.PRIMARY_NODE_VERSION }}-pnpm-

      - name: Install (immutable)
        run: pnpm install --frozen-lockfile

      - name: Run gates
        run: ${{ matrix.command }}

  node-compat:
    runs-on: ubuntu-latest
    name: node 26
    env:
      DSH_GATE_CONCURRENCY: '2'
    strategy:
      fail-fast: false
      matrix:
        node: [26]
    steps:
      - uses: actions/checkout@v6

      - uses: actions/setup-node@v6
        with:
          node-version: ${{ matrix.node }}

      - name: Enable corepack (pnpm)
        run: corepack enable

      - name: Resolve pnpm store path
        id: pnpm-store
        run: echo "path=$(pnpm store path --silent)" >> "$GITHUB_OUTPUT"

      - uses: actions/cache@v4
        with:
          path: ${{ steps.pnpm-store.outputs.path }}
          key: ${{ runner.os }}-node-${{ matrix.node }}-pnpm-${{ hashFiles('pnpm-lock.yaml') }}
          restore-keys: |
            ${{ runner.os }}-node-${{ matrix.node }}-pnpm-

      - name: Install (immutable)
        run: pnpm install --frozen-lockfile

      - name: Run compatibility gates
        run: pnpm run check:node-compat