ci.yml

name: CI

on:
  push:
    branches: [main, master]
  pull_request:
    branches: [main, master]

permissions:
  contents: read

concurrency:
  group: ci-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  build-test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version: '24'
          cache: npm

      - name: Cache HDF5 / zlib sources and WASM build trees
        uses: actions/cache@v4
        with:
          path: |
            .cache/sources
            .cache/build-wasm
          key: hdf5-wasm-official-${{ hashFiles('scripts/hdf5-source-pin.env', 'scripts/fetch-hdf5-source.sh', 'scripts/docker-emcc-full.sh', 'scripts/build-full-wasm-docker.sh', 'scripts/patches/hdf5-1.14.6-H5Tinit_float-fe-invalid.patch', 'scripts/wasm-node-smoke.mjs') }}
          restore-keys: |
            hdf5-wasm-official-

      - name: Install dependencies
        run: npm ci

      - name: Build production WASM (Docker + Emscripten)
        run: bash scripts/build-full-wasm-docker.sh

      # Docker runs as root; bind-mounted dist/ (and parts of .cache/) become root-owned → tsc cannot emit into dist/.
      - name: Restore workspace ownership after Docker
        run: sudo chown -R "$(id -u):$(id -g)" "$GITHUB_WORKSPACE"

      - name: TypeScript build
        run: npm run build

      # Does not rebuild WASM: loads dist/wasm from the step above and opens real HDF5 fixtures (see scripts/wasm-node-smoke.mjs).
      - name: Validate WASM in Node (real fixtures)
        run: npm run smoke:wasm

      - name: Lint
        run: npm run lint

      - name: Test
        run: npm run test

      - name: Upload WASM artifact
        uses: actions/upload-artifact@v4
        with:
          name: ioai-hdf5-wasm
          path: dist/wasm/