name: Test and Build

on:

workflow_call:

workflow_dispatch:

permissions:

contents: read

jobs:

test-build:

name: Test and Build

runs-on: blacksmith-4vcpu-ubuntu-2404

steps:

- name: Checkout code

uses: actions/checkout@v4

- name: Setup Bun

uses: oven-sh/setup-bun@v2

with:

bun-version: 1.3.9

- name: Setup Node

uses: actions/setup-node@v4

with:

node-version: latest

- name: Mount Bun cache (Sticky Disk)

uses: useblacksmith/stickydisk@v1

with:

key: ${{ github.repository }}-bun-cache

path: ~/.bun/install/cache

- name: Mount node_modules (Sticky Disk)

uses: useblacksmith/stickydisk@v1

with:

key: ${{ github.repository }}-node-modules

path: ./node_modules

- name: Install dependencies

run: bun install --frozen-lockfile

- name: Validate feature flags

run: |

FILE="apps/sim/lib/core/config/feature-flags.ts"

ERRORS=""

echo "Checking for hardcoded boolean feature flags..."

# Use perl for multiline matching to catch both:

# export const isHosted = true

# export const isHosted =

# true

HARDCODED=$(perl -0777 -ne 'while (/export const (is[A-Za-z]+)\s*=\s*\n?\s*(true|false)\b/g) { print " $1 = $2\n" }' "$FILE")

if [ -n "$HARDCODED" ]; then

ERRORS="${ERRORS}\n❌ Feature flags must not be hardcoded to boolean literals!\n\nFound hardcoded flags:\n${HARDCODED}\n\nFeature flags should derive their values from environment variables.\n"

fi

echo "Checking feature flag naming conventions..."

# Check that all export const (except functions) start with 'is'

# This finds exports like "export const someFlag" that don't start with "is" or "get"

BAD_NAMES=$(grep -E "^export const [a-z]" "$FILE" | grep -vE "^export const (is|get)" | sed 's/export const \([a-zA-Z]*\).*/ \1/')

if [ -n "$BAD_NAMES" ]; then

ERRORS="${ERRORS}\n❌ Feature flags must use 'is' prefix for boolean flags!\n\nFound incorrectly named flags:\n${BAD_NAMES}\n\nExample: 'hostedMode' should be 'isHostedMode'\n"

fi

if [ -n "$ERRORS" ]; then

echo ""

echo -e "$ERRORS"

exit 1

fi

echo "✅ All feature flags are properly configured"

- name: Lint code

run: bun run lint:check

- name: Run tests with coverage

env:

NODE_OPTIONS: '--no-warnings'

NEXT_PUBLIC_APP_URL: 'https://www.sim.ai'

DATABASE_URL: 'postgresql://postgres:postgres@localhost:5432/simstudio'

ENCRYPTION_KEY: '7cf672e460e430c1fba707575c2b0e2ad5a99dddf9b7b7e3b5646e630861db1c' # dummy key for CI only

run: bun run test

- name: Check schema and migrations are in sync

working-directory: packages/db

run: |

bunx drizzle-kit generate --config=./drizzle.config.ts

if [ -n "$(git status --porcelain ./migrations)" ]; then

echo "❌ Schema and migrations are out of sync!"

echo "Run 'cd packages/db && bunx drizzle-kit generate' and commit the new migrations."

git status --porcelain ./migrations

git diff ./migrations

exit 1

fi

echo "✅ Schema and migrations are in sync"

- name: Build application

env:

NODE_OPTIONS: '--no-warnings'

NEXT_PUBLIC_APP_URL: 'https://www.sim.ai'

DATABASE_URL: 'postgresql://postgres:postgres@localhost:5432/simstudio'

STRIPE_SECRET_KEY: 'dummy_key_for_ci_only'

STRIPE_WEBHOOK_SECRET: 'dummy_secret_for_ci_only'

RESEND_API_KEY: 'dummy_key_for_ci_only'

AWS_REGION: 'us-west-2'

ENCRYPTION_KEY: '7cf672e460e430c1fba707575c2b0e2ad5a99dddf9b7b7e3b5646e630861db1c' # dummy key for CI only

run: bunx turbo run build --filter=sim

- name: Upload coverage to Codecov

uses: codecov/codecov-action@v5

with:

directory: ./apps/sim/coverage

fail_ci_if_error: false

verbose: true