nuke/.github/workflows/asset-verification.yml

name: Asset Build Verification

on:
  push:
    branches: ["main"]
  pull_request:
    branches: ["main"]

permissions:
  contents: read

jobs:
  asset_verification:
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: build essential
        run: |
          sudo apt-get update
          sudo apt-get install -y build-essential

      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
        with:
          node-version: '24.11.0'
      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
        with:
            go-version: '1.25.4'

      - name: install node deps
        run: |
          npm ci

      - name: Check for uncommitted changes before asset build
        id: check-changes-before
        run: |
          if [[ -n $(git status --porcelain) ]]; then
            echo "has_changes=true" >> $GITHUB_OUTPUT
          else
            echo "has_changes=false" >> $GITHUB_OUTPUT
          fi

      - name: Fail if there are uncommitted changes before build
        if: steps.check-changes-before.outputs.has_changes == 'true'
        run: |
          echo "There are uncommitted changes before running npm run assets"
          git status
          exit 1

      - name: Run asset build
        run: |
          npm run assets

      - name: Check for uncommitted changes after asset build
        id: check-changes-after
        run: |
          if [[ -n $(git status --porcelain) ]]; then
            echo "has_changes=true" >> $GITHUB_OUTPUT
          else
            echo "has_changes=false" >> $GITHUB_OUTPUT
          fi

      - name: Fail if assets generated changes
        if: steps.check-changes-after.outputs.has_changes == 'true'
        run: |
          echo "npm run assets generated uncommitted changes. This indicates the repository has outdated generated files."
          echo "Please run 'npm run assets' locally and commit the changes."
          git status
          git diff
          exit 1