ci-rerun.yml

# CI Rerun — Manual workflow for re-running CI on fork PRs or PRs that need
# a fresh CI pass without push. Useful when:
#   - Fork PRs don't trigger CI automatically (security restriction)
#   - A PR needs re-testing after an infrastructure flake
#   - You need to validate a PR against current base branch state
# Usage: Actions → CI Rerun (Manual) → enter PR number → Run workflow
name: CI Rerun (Manual)

on:
  workflow_dispatch:
    inputs:
      pr_number:
        description: 'PR number to test'
        required: true
        type: string

permissions:
  contents: read
  statuses: write

jobs:
  test:
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - name: Fetch PR metadata
        id: pr
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          PR_DATA=$(gh api repos/${{ github.repository }}/pulls/${{ inputs.pr_number }})
          HEAD_SHA=$(echo "$PR_DATA" | jq -r '.head.sha')
          HEAD_REF=$(echo "$PR_DATA" | jq -r '.head.ref')
          HEAD_REPO=$(echo "$PR_DATA" | jq -r '.head.repo.full_name')
          BASE_REF=$(echo "$PR_DATA" | jq -r '.base.ref')
          echo "head_sha=$HEAD_SHA" >> "$GITHUB_OUTPUT"
          echo "head_ref=$HEAD_REF" >> "$GITHUB_OUTPUT"
          echo "head_repo=$HEAD_REPO" >> "$GITHUB_OUTPUT"
          echo "base_ref=$BASE_REF" >> "$GITHUB_OUTPUT"
          echo "Testing PR #${{ inputs.pr_number }}: $HEAD_REPO/$HEAD_REF → $BASE_REF (SHA: $HEAD_SHA)"

      - name: Set pending status
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          gh api repos/${{ github.repository }}/statuses/${{ steps.pr.outputs.head_sha }} \
            --method POST \
            --field state=pending \
            --field context="Squad CI / rerun" \
            --field description="Running CI rerun..." \
            --field target_url="${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"

      - uses: actions/checkout@v4
        with:
          ref: refs/pull/${{ inputs.pr_number }}/merge
        continue-on-error: true
        id: checkout_merge

      - name: Fallback — checkout PR head directly
        if: steps.checkout_merge.outcome == 'failure'
        uses: actions/checkout@v4
        with:
          repository: ${{ steps.pr.outputs.head_repo }}
          ref: ${{ steps.pr.outputs.head_ref }}

      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: 'npm'

      - name: Fix stale lockfile entries
        run: |
          node -e "
            const fs = require('fs');
            const lock = JSON.parse(fs.readFileSync('package-lock.json', 'utf8'));
            const pkgs = lock.packages || {};
            const stale = Object.keys(pkgs).filter(k =>
              k.includes('/node_modules/@cargom98/squad-') &&
              pkgs[k].resolved && pkgs[k].resolved.startsWith('https://')
            );
            if (stale.length) {
              stale.forEach(k => { console.log('Removing: ' + k); delete pkgs[k]; });
              fs.writeFileSync('package-lock.json', JSON.stringify(lock, null, 2) + '\n');
            } else {
              console.log('Lockfile clean');
            }
          "

      - name: Install dependencies
        run: |
          success=false
          for i in 1 2 3; do
            if npm install; then
              success=true
              break
            fi
            echo "Retry $i/3 — npm install failed, retrying in 5s..."
            sleep 5
          done
          if [ "$success" = false ]; then
            echo "::error::npm install failed after 3 attempts"
            exit 1
          fi

      - name: Install docs dependencies
        run: |
          success=false
          for i in 1 2 3; do
            if npm ci; then
              success=true
              break
            fi
            echo "Retry $i/3 — npm ci failed, retrying in 5s..."
            sleep 5
          done
          if [ "$success" = false ]; then
            echo "::error::npm ci failed after 3 attempts"
            exit 1
          fi
        working-directory: docs

      - name: Install Playwright browsers
        run: npx playwright install chromium --with-deps

      - name: Build
        run: npm run build

      - name: Run tests
        run: npm test

      - name: Set success status
        if: success()
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          gh api repos/${{ github.repository }}/statuses/${{ steps.pr.outputs.head_sha }} \
            --method POST \
            --field state=success \
            --field context="Squad CI / rerun" \
            --field description="All checks passed" \
            --field target_url="${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"

      - name: Set failure status
        if: failure()
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          gh api repos/${{ github.repository }}/statuses/${{ steps.pr.outputs.head_sha }} \
            --method POST \
            --field state=failure \
            --field context="Squad CI / rerun" \
            --field description="CI rerun failed — check logs" \
            --field target_url="${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"