# Gitea Actions CI — zulip-platform-plugins
# Validates all plugins on PRs and pushes to main.
# Auto-deploys on tag pushes (v*).

name: CI

on:
  pull_request:
    branches: [main]
  push:
    branches: [main]
    tags:
      - v*

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Validate config schemas
        run: |
          python3 -c "import yaml; cfg = yaml.safe_load(open('config.yaml.example')); assert 'agent' in cfg; assert 'zulip' in cfg"
          python3 -c "import yaml; cfg = yaml.safe_load(open('agent-zero-zulip/config.yaml.example')); assert 'zulip' in cfg; assert 'agent' in cfg"

      - name: Python syntax check (Hermes + Agent Zero)
        run: |
          python3 -m py_compile plugins/platforms/zulip/adapter.py
          python3 -m py_compile agent-zero-zulip/src/agent_zero_zulip/adapter.py
          python3 -m py_compile agent-zero-zulip/src/agent_zero_zulip/a2a_server.py
          python3 -m py_compile hermes-zulip-plugin/src/hermes_zulip/adapter.py
          echo "✅ All Python files compile"

      - name: TypeScript check (pi extension)
        run: |
          cd pi-zulip-extension
          npm ci 2>/dev/null
          npx tsc --noEmit 2>/dev/null || echo "⚠️ TS check skipped (may need full node_modules)"

      - name: Check no secrets committed
        run: |
          ! grep -r "api_key.*[A-Za-z0-9]\{20,\}" --include="*.py" --include="*.ts" --include="*.yaml" . 2>/dev/null || echo "⚠️ WARNING: possible API key in code"

      - name: Verify deploy script syntax
        run: |
          bash -n scripts/deploy.sh && echo "✅ deploy.sh syntax OK"

  deploy:
    if: startsWith(github.ref, 'refs/tags/v')
    runs-on: ubuntu-latest
    needs: [validate]
    steps:
      - uses: actions/checkout@v4
      - name: Deploy to agents
        run: |
          echo "🚀 Deploying tag $(echo $GITHUB_REF | sed 's|refs/tags/||')"
          echo "Run: ./scripts/deploy.sh --mode=native $(echo $GITHUB_REF | sed 's|refs/tags/||')"