ci.yml

name: ForgeRock Pull Request CI
on:
  pull_request:

env:
  NX_CLOUD_ENCRYPTION_KEY: ${{ secrets.NX_CLOUD_ENCRYPTION_KEY }}
  NX_CLOUD_ACCESS_TOKEN: ${{ secrets.PR_NX_CLOUD_ACCESS_TOKEN }} # Read Only
  NX_CLOUD_DISTRIBUTED_EXECUTION: true
  CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
  CI: true

# recommended to set a concurrency group
concurrency:
  group: preview-pages-${{ github.ref }}
  cancel-in-progress: true

jobs:
  pr:
    runs-on: ubuntu-latest
    timeout-minutes: 20
    permissions:
      pull-requests: write
      contents: write
      id-token: write
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: pnpm/action-setup@v4
        with:
          run_install: false
      - uses: actions/setup-node@v4
        id: cache
        with:
          node-version-file: '.node-version'
          cache: 'pnpm'

      - run: pnpm install --frozen-lockfile

      # This line enables distribution
      # The "--stop-agents-after" is optional, but allows idle agents to shut down once the "e2e-ci" targets have been requested
      - run: pnpm dlx nx-cloud start-ci-run --distribute-on=".nx/workflows/dynamic-changesets.yml" --stop-agents-after="e2e-ci" --with-env-vars="CODECOV_TOKEN"
      - run: pnpm nx sync:check

      - name: Cache Playwright browsers
        uses: actions/cache@v4
        with:
          path: ~/.cache/ms-playwright
          key: ${{ runner.os }}-playwright-${{ hashFiles('**/pnpm-lock.yaml') }}
          restore-keys: |
            ${{ runner.os }}-playwright-

      - run: pnpm exec playwright install

      - name: Get base and head SHAs for Nx affected commands
        id: get-shas
        run: |
          set -e  # Exit immediately if a command exits with a non-zero status

          # Check if 'gh' command is available
          if ! command -v gh &> /dev/null; then
              echo "Error: GitHub CLI (gh) is not installed." >&2
              exit 1
          fi

          # Get latest release tag
          echo "Fetching latest GitHub release..."
          LATEST_RELEASE_TAG=$(gh release view --json tagName -q .tagName)

          if [ -z "$LATEST_RELEASE_TAG" ]; then
            exit 1
          else
            echo "Latest release tag: $LATEST_RELEASE_TAG"
            # Get the commit SHA that this tag points to
            BASE_SHA=$(git rev-list -n 1 $LATEST_RELEASE_TAG)
          fi

          # Get current HEAD SHA
          HEAD_SHA=$(git rev-parse HEAD)

          echo "Base SHA (latest release): $BASE_SHA"
          echo "Head SHA (current): $HEAD_SHA"

          # Set outputs for use with Nx
          echo "base_sha=$BASE_SHA" >> $GITHUB_OUTPUT
          echo "head_sha=$HEAD_SHA" >> $GITHUB_OUTPUT

          # Export as environment variables for immediate use
          echo "NX_BASE=$BASE_SHA" >> $GITHUB_ENV
          echo "NX_HEAD=$HEAD_SHA" >> $GITHUB_ENV
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      # This line is needed for nx affected to work when CI is running on a PR
      - run: git branch --track main origin/main

      - run: pnpm exec nx-cloud record -- nx format:check
      - run: pnpm exec nx affected -t build typecheck lint test e2e-ci
      - run: npx nx-cloud fix-ci
        if: always()

      - uses: codecov/codecov-action@v5
        with:
          directory: ./packages/
          token: ${{ secrets.CODECOV_TOKEN }}

      - uses: actions/upload-artifact@v4
        if: ${{ !cancelled() }}
        with:
          name: playwright-report
          path: |
            **/.playwright
            **/test-results
          retention-days: 30

      - name: Ensure builds run
        run: pnpm nx run-many -t build
        env:
          NX_CLOUD_DISTRIBUTED_EXECUTION: false

      - name: build docs
        run: pnpm generate-docs

      - name: Publish api docs
        uses: JamesIves/github-pages-deploy-action@v4.7.3
        with:
          source-dir: docs
          pr-comment: 'none'

      - name: Update comment
        uses: marocchino/sticky-pull-request-comment@v2
        with:
          message: Deployed ${{ github.sha }} to https://ForgeRock.github.io/ping-javascript-sdk/pr-${{ github.event.number }}/${{github.sha}} branch gh-pages in ForgeRock/ping-javascript-sdk

      - name: Download baseline bundle sizes
        uses: dawidd6/action-download-artifact@v3
        with:
          workflow: publish.yml
          branch: main
          name: bundle-size-baseline
          path: .
          if_no_artifact_found: warn
        continue-on-error: true

      - name: Calculate bundle sizes
        id: bundle-analysis
        run: |
          # Make script executable
          chmod +x ./scripts/bundle-sizes.sh

          # Check if baseline exists
          if [ -f "previous_sizes.json" ]; then
            echo "✅ Using baseline size data from main branch"
            echo "Baseline data preview:"
            cat previous_sizes.json | head -5
          else
            echo "⚠️ No baseline size data found - this will be the first measurement"
          fi

          # Run the bundle size calculation
          ./scripts/bundle-sizes.sh

      - name: Upload current stats as artifact
        uses: actions/upload-artifact@v4
        with:
          name: bundle-size-stats-pr-${{ github.event.pull_request.number }}
          path: |
            stats.txt
            bundle_size_report.md
          retention-days: 7

      - name: Find bundle size comment
        id: find-comment
        uses: peter-evans/find-comment@v3
        with:
          issue-number: ${{ github.event.pull_request.number }}
          comment-author: 'github-actions[bot]'
          body-includes: <!-- This comment was auto-generated by GitHub Actions to display bundle size statistics -->

      - name: Create or update bundle size comment
        uses: peter-evans/create-or-update-comment@v4
        with:
          comment-id: ${{ steps.find-comment.outputs.comment-id }}
          issue-number: ${{ github.event.pull_request.number }}
          edit-mode: replace
          body: |
            <!-- This comment was auto-generated by GitHub Actions to display bundle size statistics -->
            ## 📦 Bundle Size Analysis

            ${{ steps.bundle-analysis.outputs.stats }}

            ### Legend
            🆕 New package
            🔺 Size increased
            🔻 Size decreased
            ➖ No change

            <details>
            <summary>ℹ️ How bundle sizes are calculated</summary>

            - **Current Size**: Total gzipped size of all files in the package's `dist` directory
            - **Baseline**: Comparison against the latest build from the `main` branch
            - **Files included**: All build outputs except source maps and TypeScript build cache
            - **Exclusions**: `.map`, `.tsbuildinfo`, and `.d.ts.map` files

            </details>

            ---
            <sub>🔄 Updated automatically on each push to this PR</sub>