node-ci.yml

name: Node CI

on:
  workflow_call:
    inputs:
      node-version:
        description: Node.js version to install.
        required: false
        type: string
        default: '24'
      package-manager:
        description: Package manager to configure. Supported values are npm, pnpm, and yarn.
        required: false
        type: string
        default: pnpm
      working-directory:
        description: Directory that contains the Node package.
        required: false
        type: string
        default: .
      install-command:
        description: Dependency install command. Empty uses the setup-node action default for the package manager.
        required: false
        type: string
        default: ''
      lint-command:
        description: Optional additional lint command run after the built-in zero-warning checks.
        required: false
        type: string
        default: ''
      eslint-args:
        description: ESLint arguments. The workflow always appends --max-warnings=0.
        required: false
        type: string
        default: .
      typecheck-command:
        description: TypeScript typecheck command. Empty uses tsc --noEmit through the selected package manager.
        required: false
        type: string
        default: ''
      prettier-args:
        description: Prettier check arguments.
        required: false
        type: string
        default: .
      test-command:
        description: Optional test command.
        required: false
        type: string
        default: ''
      build-command:
        description: Optional build command.
        required: false
        type: string
        default: ''
      package-check-command:
        description: Optional package validation command.
        required: false
        type: string
        default: ''
    secrets:
      packages-token:
        description: GitHub Packages token used for npm package resolution.
        required: false

permissions:
  contents: read
  packages: read

jobs:
  node:
    name: Node CI
    runs-on: ubuntu-latest
    timeout-minutes: 30
    steps:
      - uses: actions/checkout@v7

      - name: Resolve workflow ref
        id: workflow-ref
        shell: bash
        env:
          WORKFLOW_REF: ${{ github.workflow_ref }}
        run: |
          set -euo pipefail

          ref="${WORKFLOW_REF#*@}"
          if [ -z "$ref" ] || [ "$ref" = "$WORKFLOW_REF" ]; then
            echo "::error::Unable to resolve reusable workflow ref from $WORKFLOW_REF"
            exit 1
          fi

          printf 'ref=%s\n' "$ref" >> "$GITHUB_OUTPUT"

      - uses: actions/checkout@v7
        with:
          repository: JorisJonkers-dev/github-workflows
          ref: v0.35.0 # x-release-please-version
          path: .github-workflows
          persist-credentials: false

      - uses: ./.github-workflows/actions/setup-node
        with:
          node-version: ${{ inputs.node-version }}
          package-manager: ${{ inputs.package-manager }}
          working-directory: ${{ inputs.working-directory }}
          install-command: ${{ inputs.install-command }}
          github-packages-token: ${{ secrets.packages-token || github.token }}

      # The vendored actions tree lives at .github-workflows/. Consuming projects exclude it from
      # linting/formatting by default (it is in the shared eslint/ktlint config ignores, the
      # scaffolded .gitignore — which antfu-eslint honours — and .prettierignore), so quality
      # commands see only the project's own files without this workflow mutating the checkout.

      - name: Package check
        if: ${{ inputs.package-check-command != '' }}
        working-directory: ${{ inputs.working-directory }}
        env:
          PACKAGE_CHECK_COMMAND: ${{ inputs.package-check-command }}
        run: bash -euo pipefail -c "$PACKAGE_CHECK_COMMAND"

      - name: ESLint
        working-directory: ${{ inputs.working-directory }}
        env:
          ESLINT_ARGS: ${{ inputs.eslint-args }}
          PACKAGE_MANAGER: ${{ inputs.package-manager }}
        run: |
          set -euo pipefail

          case "$PACKAGE_MANAGER" in
            npm)
              eslint_command="npm exec -- eslint ${ESLINT_ARGS} --max-warnings=0"
              ;;
            pnpm)
              eslint_command="pnpm exec eslint ${ESLINT_ARGS} --max-warnings=0"
              ;;
            yarn)
              eslint_command="yarn eslint ${ESLINT_ARGS} --max-warnings=0"
              ;;
            *)
              echo "::error::Unsupported package-manager: $PACKAGE_MANAGER. Use npm, pnpm, or yarn."
              exit 1
              ;;
          esac

          bash -euo pipefail -c "$eslint_command"

      - name: Typecheck
        working-directory: ${{ inputs.working-directory }}
        env:
          PACKAGE_MANAGER: ${{ inputs.package-manager }}
          TYPECHECK_COMMAND: ${{ inputs.typecheck-command }}
        run: |
          set -euo pipefail

          typecheck_command="$TYPECHECK_COMMAND"
          if [ -z "$typecheck_command" ]; then
            case "$PACKAGE_MANAGER" in
              npm)
                typecheck_command="npm exec -- tsc --noEmit"
                ;;
              pnpm)
                typecheck_command="pnpm exec tsc --noEmit"
                ;;
              yarn)
                typecheck_command="yarn tsc --noEmit"
                ;;
              *)
                echo "::error::Unsupported package-manager: $PACKAGE_MANAGER. Use npm, pnpm, or yarn."
                exit 1
                ;;
            esac
          fi

          bash -euo pipefail -c "$typecheck_command"

      - name: Prettier
        working-directory: ${{ inputs.working-directory }}
        env:
          PACKAGE_MANAGER: ${{ inputs.package-manager }}
          PRETTIER_ARGS: ${{ inputs.prettier-args }}
        run: |
          set -euo pipefail

          case "$PACKAGE_MANAGER" in
            npm)
              prettier_command="npm exec -- prettier --check ${PRETTIER_ARGS}"
              ;;
            pnpm)
              prettier_command="pnpm exec prettier --check ${PRETTIER_ARGS}"
              ;;
            yarn)
              prettier_command="yarn prettier --check ${PRETTIER_ARGS}"
              ;;
            *)
              echo "::error::Unsupported package-manager: $PACKAGE_MANAGER. Use npm, pnpm, or yarn."
              exit 1
              ;;
          esac

          bash -euo pipefail -c "$prettier_command"

      - name: Additional lint
        if: ${{ inputs.lint-command != '' }}
        working-directory: ${{ inputs.working-directory }}
        env:
          LINT_COMMAND: ${{ inputs.lint-command }}
        run: bash -euo pipefail -c "$LINT_COMMAND"

      - name: Test
        if: ${{ inputs.test-command != '' }}
        working-directory: ${{ inputs.working-directory }}
        env:
          TEST_COMMAND: ${{ inputs.test-command }}
        run: bash -euo pipefail -c "$TEST_COMMAND"

      - name: Build
        if: ${{ inputs.build-command != '' }}
        working-directory: ${{ inputs.working-directory }}
        env:
          BUILD_COMMAND: ${{ inputs.build-command }}
        run: bash -euo pipefail -c "$BUILD_COMMAND"