vercel__chat/.github/workflows/ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  changeset:
    runs-on: ubuntu-latest
    # Skipped on the release PR: it consumes every changeset and bumps the
    # versions, which is exactly the state `changeset status` reports as an
    # error, so the check always fails there.
    if: github.event_name == 'pull_request' && github.head_ref != 'changeset-release/main'
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6.0.0
        with:
          fetch-depth: 0

      - name: Install pnpm
        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.0

      - name: Setup Node.js
        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6.0.0
        with:
          node-version-file: .nvmrc
          cache: "pnpm"

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Check if packages changed
        id: packages-changed
        env:
          BASE_REF: ${{ github.base_ref }}
        run: |
          git fetch origin "$BASE_REF" --depth=1
          if git diff --name-only "origin/$BASE_REF"...HEAD | grep '^packages/' | grep -qEv '\.md$|^packages/chat/resources/|^packages/integration-tests/'; then
            echo "changed=true" >> "$GITHUB_OUTPUT"
          else
            echo "changed=false" >> "$GITHUB_OUTPUT"
            echo "No package code changes detected — skipping changeset check."
          fi

      - name: Verify changeset present
        if: steps.packages-changed.outputs.changed == 'true'
        env:
          BASE_REF: ${{ github.base_ref }}
        run: pnpm changeset status --since="origin/$BASE_REF"

  lint:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6.0.0

      - name: Install pnpm
        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.0

      - name: Setup Node.js
        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6.0.0
        with:
          node-version-file: .nvmrc
          cache: "pnpm"

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Check
        run: pnpm check

      - name: Knip
        run: pnpm knip

  konsistent:
    name: 'Code Consistency'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6.0.0

      - name: Install pnpm
        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.0

      - name: Setup Node.js
        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6.0.0
        with:
          node-version-file: .nvmrc
          cache: "pnpm"

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Run konsistent
        run: pnpm konsistent

  typecheck:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6.0.0

      - name: Install pnpm
        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.0

      - name: Setup Node.js
        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6.0.0
        with:
          node-version-file: .nvmrc
          cache: "pnpm"

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Typecheck
        run: pnpm typecheck

  build-and-test-matrix:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        node-version: [22, 24]
    name: build-and-test (Node ${{ matrix.node-version }})
    env:
      SLACK_BOT_TOKEN: xoxb-mock
      SLACK_SIGNING_SECRET: mock
      TEAMS_APP_ID: mock
      TEAMS_APP_PASSWORD: mock
      TEAMS_APP_TENANT_ID: mock
      GOOGLE_CHAT_CREDENTIALS: '{"type":"service_account","project_id":"mock","private_key":"-----BEGIN RSA PRIVATE KEY-----\nMOCK\n-----END RSA PRIVATE KEY-----","client_email":"mock@mock.iam.gserviceaccount.com"}'
      REDIS_URL: redis://localhost:6379
      RECORDING_ENABLED: "false"
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6.0.0

      - name: Install pnpm
        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.0

      - name: Setup Node.js
        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6.0.0
        with:
          node-version: ${{ matrix.node-version }}
          cache: "pnpm"

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Build
        run: pnpm turbo build --filter='!example-nextjs-chat' --filter='!example-nuxt-chat'

      - name: Test
        run: pnpm test

  # Guards the ai@^6 || ^7 peer range: the workspace devDependency pins ai@7, so
  # the matrix above only exercises v7. This job forces the v6 constellation and
  # builds/typechecks/tests the ai-dependent packages so a v6 regression cannot
  # land unnoticed.
  ai-sdk-v6-compat:
    runs-on: ubuntu-latest
    name: ai-sdk-v6-compat
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6.0.0

      - name: Install pnpm
        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.0

      - name: Setup Node.js
        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6.0.0
        with:
          node-version-file: .nvmrc
          cache: "pnpm"

      - name: Pin AI SDK to v6
        run: |
          node -e '
            const fs = require("node:fs");
            const pkg = JSON.parse(fs.readFileSync("package.json", "utf8"));
            pkg.pnpm ??= {};
            pkg.pnpm.overrides = {
              ...pkg.pnpm.overrides,
              ai: "6.0.182",
              "@ai-sdk/react": "3.0.184",
              "@ai-sdk/svelte": "4.0.182",
              "@ai-sdk/vue": "3.0.182",
            };
            fs.writeFileSync("package.json", JSON.stringify(pkg, null, 2) + "\n");
          '

      - name: Install dependencies (ai@6)
        run: pnpm install --no-frozen-lockfile

      - name: Verify ai@6 resolved
        run: |
          if ls node_modules/.pnpm | grep -qE '^ai@6\.'; then
            echo "ai@6 resolved"
          else
            echo "expected ai@6 to resolve; got:"
            ls node_modules/.pnpm | grep -E '^ai@' || true
            exit 1
          fi

      - name: Build, typecheck, and test against ai@6
        run: pnpm turbo build typecheck test --filter=chat --filter=@chat-adapter/web

  # Separate "build-and-test" job to set as required in branch protections,
  # as the matrix build names above change each time Node versions change.
  build-and-test:
    runs-on: ubuntu-latest
    needs: [build-and-test-matrix, ai-sdk-v6-compat]
    if: ${{ !cancelled() }}
    name: build-and-test (Summary)
    steps:
      - name: All matrix versions passed
        if: ${{ !(contains(needs.*.result, 'failure')) }}
        run: exit 0
      - name: Some matrix version failed
        if: ${{ contains(needs.*.result, 'failure') }}
        run: exit 1